Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5adc9ab-8589-3482-bb88-696ba74b3946.roa
File: b5adc9ab-8589-3482-bb88-696ba74b3946.roa (raw, json)
Hash identifier: fEZRKoMLpLAjncPJmZlAuKIbGRVTGJIl3OCecood4Mc=
Subject key identifier: 10:21:73:B6:0C:93:01:7D:32:E3:A2:82:63:17:D7:0A:02:6A:4D:5D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF482E4D7A5768AFC0874C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5adc9ab-8589-3482-bb88-696ba74b3946.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:82:e4:d7:a5:76:8a:fc:08:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=f7714fbd-5df4-4ddc-a881-1d09a599765f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:da:e1:6a:df:94:7b:b0:9e:ee:31:d4:f7:
dd:f2:eb:64:c3:6d:f6:33:8b:c8:f4:d6:31:ce:70:
4b:b1:e4:bb:77:08:b1:92:74:c4:b7:48:d3:c4:66:
14:21:b7:f5:37:9e:4f:a4:96:ff:23:9c:7d:7e:0b:
57:12:0a:d6:35:be:85:8e:4f:98:ca:6f:a4:27:14:
e2:22:f6:1f:2c:ac:f3:5f:32:22:a8:ed:15:7c:47:
74:c0:88:92:75:69:61:4e:16:6a:b4:dd:df:77:e1:
57:b1:4b:de:9f:d0:ec:a8:4d:26:5f:d9:53:28:96:
00:a4:13:91:ee:c0:95:a4:de:4f:53:b1:9e:18:7d:
ae:dc:cd:51:a9:3a:6e:77:08:b1:c1:02:fa:b2:0c:
e5:f2:83:18:39:a3:b6:6b:d9:86:b6:2b:88:63:2c:
fc:74:74:94:3c:05:92:59:83:0f:48:12:f3:ef:59:
0f:75:b3:64:a4:1b:33:5c:92:c8:8f:46:3e:2c:9d:
f9:c2:7c:d4:f6:0a:ca:6d:a5:20:2c:8b:80:da:f4:
18:a0:13:a3:3d:40:f7:91:b6:b4:1b:c6:9a:e9:1e:
cd:56:8d:2d:19:23:c6:6a:63:2e:58:df:a4:3e:11:
22:51:7a:42:67:91:38:05:55:5f:85:b6:e3:3b:b8:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:73:B6:0C:93:01:7D:32:E3:A2:82:63:17:D7:0A:02:6A:4D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5adc9ab-8589-3482-bb88-696ba74b3946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d4:6d:cc:27:81:ca:b7:50:74:69:1d:bf:08:03:16:c3:c0:
6c:f8:17:b6:d7:33:5f:46:eb:72:9a:c0:89:c0:43:37:dd:2e:
59:85:5a:3c:38:26:3c:82:ae:cf:14:68:b3:f3:0a:41:8f:b4:
e3:c7:db:d5:d1:04:5e:b3:3c:5a:83:21:65:36:76:7b:7f:0b:
63:45:e4:b8:82:91:83:8d:bc:9e:74:ce:02:2d:73:d2:d8:b5:
7b:8c:f0:a2:75:49:c8:2f:8d:5f:d4:7b:0d:2b:69:ff:f0:0a:
b7:ca:4e:aa:97:84:6c:44:02:e2:99:98:0c:0d:c0:89:c8:d2:
74:0c:33:1c:76:7f:bf:d6:d2:96:23:0c:9c:04:b1:25:78:50:
5a:fd:9b:ae:ae:dd:9d:7e:b1:57:95:70:ec:4a:86:d3:99:15:
7a:01:f8:d1:2e:b2:15:79:76:52:49:36:59:01:25:ce:34:d8:
8e:14:20:8d:b5:b5:63:7b:ea:34:b6:f7:32:e6:d2:64:4b:69:
c6:30:2f:5f:ef:51:47:0e:bf:ed:26:58:b6:4c:39:d6:c0:21:
4d:87:9f:7a:e6:21:b8:8c:92:07:43:65:ca:6e:eb:16:1a:25:
e6:47:0a:bb:19:66:a4:6f:ff:0b:54:88:b0:77:20:ee:96:53:
dd:fb:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:47 2025 by rpki-client