Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b1c2af-4176-3f99-83e4-d268b67454ba.roa
File: 83b1c2af-4176-3f99-83e4-d268b67454ba.roa (raw, json)
Hash identifier: 1H+FIcGgt94AtQPD8qB6XzUsjTz1Kb26BB5nLtcDixs=
Subject key identifier: D0:B2:51:55:75:DC:39:F0:F7:B2:8B:58:20:4C:EF:0F:CD:A4:3B:BA
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4832AD065417A2DAF4A80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b1c2af-4176-3f99-83e4-d268b67454ba.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 128.109.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:83:2a:d0:65:41:7a:2d:af:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=f6bfe604-3969-44b3-a488-1288244cce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:09:c8:36:77:5f:5b:4c:fc:d5:fd:e6:66:
eb:a9:f9:c7:6c:3b:c5:34:5b:2b:3b:5d:ca:5b:eb:
d4:92:30:92:01:e0:8d:57:ec:8a:00:73:ec:a4:11:
2a:47:96:bc:ac:61:65:65:fa:24:83:63:91:b4:ea:
00:17:2c:48:6e:ae:e0:f2:f6:03:a3:9e:e6:d6:6c:
2d:4f:d9:27:b6:78:e3:a4:24:f3:fe:48:c8:18:cb:
dd:ff:ca:73:45:89:21:f6:a5:a5:a3:0b:1f:15:a2:
ec:1f:4b:d3:f0:98:79:90:d6:2a:30:5c:2b:f7:6d:
8b:93:1b:33:55:bf:cb:45:b0:ea:6c:55:49:b7:88:
0a:bd:74:9d:3d:a6:2b:08:03:e9:21:61:4b:59:4b:
35:8f:f6:04:84:7e:c1:82:76:86:bf:a6:75:53:41:
06:a4:61:18:16:67:5e:da:54:8a:ff:ec:15:af:ee:
19:9a:a7:1d:f3:81:d3:3d:c6:ee:b5:82:8d:65:5e:
87:e2:6c:4b:75:e1:60:6f:50:0c:f6:b9:8f:14:2a:
00:db:76:30:a6:28:e7:ab:36:9f:ad:0a:08:71:e2:
3a:ec:26:89:96:75:b8:77:0a:b9:90:3a:51:89:22:
56:d7:b3:3a:14:f2:c4:8a:61:c6:23:88:46:c3:dc:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B2:51:55:75:DC:39:F0:F7:B2:8B:58:20:4C:EF:0F:CD:A4:3B:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b1c2af-4176-3f99-83e4-d268b67454ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:6d:30:31:3c:54:76:5e:f9:e8:b7:d0:5b:46:c9:1f:21:26:
49:15:ab:40:8a:6e:61:76:70:77:11:1d:ec:a6:15:c0:e4:7b:
fb:13:a7:73:c9:8e:ca:18:ef:5b:a4:9d:83:ed:8b:b4:57:01:
b5:90:84:6b:3e:b0:ac:48:99:48:cd:bf:94:37:46:fb:16:01:
06:6e:78:2c:1a:ef:49:28:33:a9:92:1e:d0:7f:26:e1:26:b6:
12:0d:e5:77:c8:dd:1f:b3:65:76:06:f9:38:19:47:34:83:ba:
06:c2:67:7d:2f:0a:e7:da:fb:53:69:1c:8d:bd:46:5b:02:ec:
54:d0:b0:c7:d5:21:32:b5:02:b9:a3:21:d8:c7:21:64:5b:9a:
89:3e:44:9e:3b:36:f4:df:cb:7e:a4:0d:65:11:69:a2:76:4d:
3d:4a:21:20:97:f4:7e:b6:44:7f:ed:4e:bd:f8:fb:93:06:43:
00:3d:7e:79:48:c8:4d:43:29:52:79:24:be:c7:1b:4b:56:d2:
11:55:81:97:8e:24:63:43:ff:a5:43:10:27:0a:d4:d0:bd:59:
73:0f:cf:e4:15:1e:de:10:a3:dd:57:9a:3a:df:49:4a:b3:0d:
0f:a7:36:15:0f:ec:ae:4d:27:78:7d:31:72:d2:17:de:93:e1:
f9:28:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:46 2025 by rpki-client