Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3254045-209a-3876-a0d6-745b9870f86a.roa
File: e3254045-209a-3876-a0d6-745b9870f86a.roa (raw, json)
Hash identifier: GRPIhan0yCIjYds+K0lbEb/izyy0RmsbAlER1r/lDlo=
Subject key identifier: 31:0F:BA:DF:C4:5B:84:7F:0D:38:1E:C9:68:65:1D:B4:D3:AB:C6:BF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4833ED660C255B04E4840
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3254045-209a-3876-a0d6-745b9870f86a.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 128.109.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:83:3e:d6:60:c2:55:b0:4e:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=dabe52a7-a124-49a9-86da-aef0df00b121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:0c:06:26:ed:f4:fc:2b:5d:4e:f2:84:f7:
aa:6b:d8:17:78:b9:a8:e8:03:bf:73:24:b4:b2:1d:
b5:9a:7b:dc:12:c9:67:c4:bc:89:26:dc:b2:96:dc:
c5:eb:3e:c2:d6:43:af:3c:87:21:2a:5b:54:fe:ec:
9d:f0:5f:30:a8:be:0f:14:de:95:5d:f3:98:aa:8d:
9b:ef:15:f0:b0:78:60:16:99:9e:32:75:84:8b:a3:
3c:3e:f6:97:9a:f8:48:4a:a9:ca:7c:7b:31:c5:77:
1e:de:89:5e:fb:5b:27:79:a6:e8:ae:97:54:68:f4:
bf:b6:38:47:cd:21:ab:a7:bf:69:ed:1d:46:77:81:
2c:ff:41:5c:71:93:4d:9e:3d:de:04:58:f2:7d:ea:
f3:5d:95:45:fa:38:9b:1b:0d:ad:9c:de:36:19:2d:
74:54:72:2b:fd:05:1c:94:b4:36:11:13:ed:ad:ee:
b0:cf:60:68:78:71:2a:13:25:31:1c:73:d1:2b:27:
77:ff:00:00:07:45:a3:1c:2f:13:ba:9c:b2:ae:71:
10:36:52:ee:82:43:b6:81:e9:44:b4:cd:10:1a:36:
3f:48:0d:53:0e:dc:8e:ef:95:16:91:7c:20:09:f3:
c7:ee:98:7e:3d:1b:1c:7e:2d:14:ef:2d:7e:eb:6c:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0F:BA:DF:C4:5B:84:7F:0D:38:1E:C9:68:65:1D:B4:D3:AB:C6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3254045-209a-3876-a0d6-745b9870f86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:cf:ea:ab:1e:b1:af:5b:f2:15:ae:ce:45:32:32:c1:92:4f:
06:c3:0e:88:19:b9:57:5d:c0:7d:4b:db:d9:29:db:b0:13:2d:
c0:84:14:b3:46:7c:3e:88:70:4a:32:cd:28:e7:16:f0:e1:af:
69:99:38:c3:f8:84:73:30:25:47:14:d6:83:a9:0c:ff:54:2a:
fc:bc:29:d2:31:01:b6:62:ec:44:25:89:2e:fc:61:78:0a:cf:
b4:e7:c2:bb:25:76:dc:b9:a3:bd:50:54:be:6a:2a:05:4e:b4:
e4:be:4c:2f:2a:fd:94:66:5e:21:93:43:ac:28:8f:bd:c0:51:
8b:a9:2d:ec:8b:89:be:3b:dd:6e:2a:06:24:77:bf:b2:35:35:
dd:2c:57:f3:bb:5a:78:7e:3a:d7:a4:8e:60:de:e7:c2:ca:60:
72:d3:05:7a:be:8c:7f:90:7a:29:92:0f:cd:d9:47:95:86:e2:
2b:fb:b2:e4:fe:05:12:6b:39:84:a2:a0:b5:99:6e:e9:5d:af:
b1:0c:c3:a1:76:c5:7e:04:88:d5:14:36:64:6c:73:73:f3:5b:
12:d0:17:c7:0b:37:a3:35:85:d7:98:ca:83:48:3a:3a:fa:d4:
cc:17:0e:b9:df:70:32:fa:9e:50:8c:c4:3a:49:5d:28:46:4e:
13:25:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:57 2025 by rpki-client