Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8106a62-6c1e-3254-943c-bb80eb4f1be1.roa
File: f8106a62-6c1e-3254-943c-bb80eb4f1be1.roa (raw, json)
Hash identifier: /Zm2ntXhd3tT+BNDJCdo0RgzersPhe+wAyJGdCZiVMc=
Subject key identifier: 61:CA:9A:76:94:B7:6C:D8:1C:CE:2B:1D:AE:BD:56:CF:17:32:99:F1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC138B43CD42505EE36C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8106a62-6c1e-3254-943c-bb80eb4f1be1.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 204.84.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c1:38:b4:3c:d4:25:05:ee:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=33265457-3300-4da9-9004-3c919870d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:66:ee:5d:0c:83:e9:8f:45:c4:e6:40:92:
41:bf:d2:85:b6:75:0b:d2:2b:7c:4d:26:91:b7:48:
69:9a:62:9f:74:27:94:9b:e7:8f:7f:51:d4:0f:ee:
c4:aa:70:34:62:70:99:b8:a8:93:5b:e1:cb:ef:71:
5f:36:24:88:cc:0b:8d:31:74:73:98:18:ea:4d:06:
9b:74:4a:8c:1c:fb:77:44:f4:a4:1b:95:d7:44:87:
27:97:c7:b8:00:2d:3c:33:83:ef:9d:cd:a1:4b:5d:
00:9c:02:41:99:03:28:cf:6e:36:24:00:f3:d0:96:
dc:e0:ca:c5:70:f3:19:4f:86:0e:ba:8e:1b:19:1b:
17:99:83:ac:8c:d9:36:9e:0e:65:46:35:59:7e:69:
d7:44:b0:6d:a3:09:4f:c5:25:c7:2c:5c:43:7a:c0:
86:32:a1:fd:85:a6:3a:09:a4:22:be:62:21:79:a7:
94:d2:79:39:bf:b1:1e:61:d8:40:36:88:dd:89:85:
47:45:74:f6:8a:c2:e9:db:a9:ff:54:51:a0:a1:ff:
ac:93:5a:f8:1a:19:59:39:c1:34:69:b7:2f:5b:c6:
de:f7:19:dc:33:fa:f9:be:4f:65:37:54:00:a0:e4:
cc:46:8f:ca:b6:2b:c1:0d:17:77:8e:48:2e:80:09:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:9A:76:94:B7:6C:D8:1C:CE:2B:1D:AE:BD:56:CF:17:32:99:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8106a62-6c1e-3254-943c-bb80eb4f1be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:bf:6d:6d:6c:59:ba:48:b8:c5:e0:4c:09:2e:7a:c6:19:44:
50:59:48:6d:86:12:63:a7:d2:00:2c:71:00:4a:d1:57:48:76:
7e:c3:10:de:77:80:d8:51:73:27:72:3e:c6:db:13:bf:57:c6:
5a:09:04:df:72:52:eb:a4:83:0d:c8:89:b1:c8:7c:13:b6:16:
85:9c:8b:b9:94:09:0c:6d:24:b3:cd:49:cf:70:2b:d1:f5:2d:
47:a2:8b:0d:b6:b7:fd:b0:73:33:d8:c2:85:9f:3a:bb:80:df:
f3:76:c0:7b:48:59:3a:43:84:a1:49:22:46:89:eb:c7:f5:ea:
d2:64:7d:01:90:99:b2:ab:a2:4f:f4:4d:b1:7a:32:65:87:81:
34:17:77:81:b7:2f:3c:86:56:92:1b:6a:7f:34:b2:6d:4a:50:
1b:6f:d3:16:1c:b2:ee:68:7a:17:ec:dd:ba:fb:c1:de:be:ab:
f5:1f:65:1d:1d:10:20:a8:96:c5:57:9b:d5:07:98:96:13:17:
61:34:90:e6:ca:cb:d6:f1:e2:08:5d:9e:25:2a:d4:14:64:a0:
47:0b:75:f1:d2:36:8b:2e:e2:36:04:56:6e:ca:30:d0:ee:22:
a2:a7:24:f1:cc:63:91:dc:3f:04:2c:f5:cd:3e:48:f1:28:dd:
e7:7e:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:34 2025 by rpki-client