Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac6124cc-5575-3255-9669-120a73bc23a6.roa
File: ac6124cc-5575-3255-9669-120a73bc23a6.roa (raw, json)
Hash identifier: s8xzypEXhyN5D2+mVMaOsumhIQadOsSlq8Yw23QGjF8=
Subject key identifier: 76:06:ED:62:C6:45:CA:A2:A1:3D:C9:D7:5D:A5:1E:F2:74:B7:CC:22
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC215551F4BA9A2AD9FC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac6124cc-5575-3255-9669-120a73bc23a6.roa
Signing time: Wed 16 Oct 2024 14:26:37 +0000
ROA not before: Wed 16 Oct 2024 14:26:37 +0000
ROA not after: Tue 14 Jan 2025 15:26:37 +0000
asID: 36850
IP address blocks: 204.85.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c2:15:55:1f:4b:a9:a2:ad:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:37 2024 GMT
Not After : Jan 14 15:26:37 2025 GMT
Subject: CN=8e191ab3-cae5-456f-bb9f-61105053327c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:8d:1c:4f:36:3f:be:f7:6a:55:e1:77:c8:
14:83:83:78:c3:a2:1c:a1:da:fc:d6:45:6e:7e:c0:
33:09:1a:10:33:75:13:30:c5:52:9d:ff:d9:85:d9:
4d:99:4a:22:e4:5c:d0:fc:af:f1:30:4b:51:a4:df:
a4:14:d0:1e:85:99:e5:a2:04:c5:af:69:88:ab:1d:
b8:45:ec:20:e8:75:be:3c:ad:a7:46:a8:b5:53:c1:
7b:8c:0c:42:d1:7c:3a:f8:55:8e:fb:f3:88:d6:c1:
79:c7:4f:8b:34:4b:76:90:06:89:b6:13:27:e2:43:
6b:5a:50:6f:46:6b:b0:37:e6:67:c9:9b:e4:f5:79:
41:e5:2c:fa:58:06:ed:c1:85:75:1b:c9:70:87:cc:
01:f8:90:01:58:86:3b:2c:8a:9f:c8:21:00:83:c4:
20:4d:c9:43:ce:de:60:9a:3f:35:a1:0e:a7:5e:69:
e6:a5:9d:22:f2:29:b9:01:fc:22:36:70:2f:c0:52:
70:e9:45:ac:48:c7:91:95:d6:62:2f:ee:b8:2a:97:
69:55:14:42:63:dd:4f:96:c5:a4:7d:3f:83:81:10:
c9:f0:0c:b9:c9:98:32:12:45:f5:9a:45:5f:ee:0c:
f5:a2:da:c8:ac:9e:b8:b4:d7:f1:94:88:d4:44:97:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:ED:62:C6:45:CA:A2:A1:3D:C9:D7:5D:A5:1E:F2:74:B7:CC:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac6124cc-5575-3255-9669-120a73bc23a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b0:30:e3:82:93:2a:d6:ac:cd:19:d0:b7:54:b7:10:40:25:
b6:40:81:2c:2c:72:41:db:54:73:af:15:bd:12:5c:69:f8:08:
64:b5:d8:bc:c9:01:de:f5:2b:bb:3b:2c:27:48:28:f6:4e:f7:
6b:ad:c3:1b:99:42:22:56:e7:d1:26:40:1f:16:2a:40:d3:ea:
4a:d1:8d:bc:2e:b0:44:63:eb:e2:ea:6d:1a:a9:84:12:c8:66:
dc:3c:e2:14:94:fa:c0:ed:f4:fa:f6:b8:13:26:98:f2:2f:a6:
6b:e4:59:65:f8:54:a3:b6:7e:87:40:98:76:96:fe:af:cb:b0:
1d:57:98:5e:07:98:bb:a7:65:6e:3d:9b:f9:98:b7:b4:bc:26:
1e:9e:e3:c0:80:65:62:58:b3:9d:ff:0f:33:6c:93:08:08:af:
a6:62:1b:76:4b:6a:0f:10:82:7a:dc:09:25:d3:da:a2:e1:b8:
6a:1c:2a:7a:63:a8:5e:c5:1f:af:fb:26:4d:8a:05:6e:8f:b9:
a0:da:84:92:57:2c:4c:77:c5:ab:1e:c9:0a:70:7a:df:aa:78:
5a:e1:eb:0a:38:7c:ad:9d:03:12:e3:41:06:ce:68:30:f5:9d:
2b:fd:d1:49:4c:a5:34:02:0f:aa:8f:b1:8a:9c:73:23:cf:b1:
e2:94:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:31 2025 by rpki-client