Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6b1aadea-f3cf-3638-8b9c-e7711aa8106d.roa
File: 6b1aadea-f3cf-3638-8b9c-e7711aa8106d.roa (raw, json)
Hash identifier: QO1tGUy6h1kTdLD9VPt2r6vODDx9rhDqdy6acIDqmBY=
Subject key identifier: B7:CF:E8:A7:DE:D7:63:BD:F8:D0:99:EA:E9:03:35:FB:3F:E9:06:FC
Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial: 010D0C9F4328584827D5DDAD96A5AF56F9D7DE40
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6b1aadea-f3cf-3638-8b9c-e7711aa8106d.roa
Signing time: Tue 10 Dec 2024 02:34:20 +0000
ROA not before: Tue 10 Dec 2024 02:34:20 +0000
ROA not after: Mon 10 Mar 2025 01:34:20 +0000
asID: 20057
IP address blocks: 204.235.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:d5:dd:ad:96:a5:af:56:f9:d7:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Validity
Not Before: Dec 10 02:34:20 2024 GMT
Not After : Mar 10 01:34:20 2025 GMT
Subject: CN=aaf38b10-b264-40a2-9ef4-307b253e5fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:af:24:37:5f:90:de:3d:0b:c9:e5:0e:cb:
31:30:ff:a5:64:7e:9a:34:3d:aa:01:98:a2:5f:82:
65:0d:ab:db:f3:8d:e8:ba:76:3a:56:7f:c9:3a:d2:
01:0a:2a:1c:ea:ca:3f:0f:bf:cf:f7:2f:5f:a5:34:
7f:2e:a2:81:6b:42:51:74:e5:03:bb:30:9e:f5:e3:
0a:95:c3:37:f4:e2:31:ff:4a:19:26:c5:04:8d:c8:
62:16:44:5e:e8:8c:92:d1:d6:0e:5c:fa:4a:a9:fc:
43:6f:5d:76:6d:9b:1e:d0:1a:c1:b2:f5:c8:18:aa:
92:cb:f7:38:9c:7e:bb:49:c6:c8:de:84:51:d4:1e:
f7:d7:bc:5d:b2:be:06:1f:c1:fc:5f:46:03:ec:b9:
1b:fd:f1:f4:61:c7:f6:e3:d3:20:b5:07:aa:a7:13:
c9:8d:ab:05:fd:65:1a:cc:45:27:41:98:83:04:ae:
73:cf:f8:d7:bd:d3:00:8d:27:ec:50:38:a7:1f:12:
60:61:bf:4a:22:2d:31:5a:3e:bb:89:96:74:f6:d9:
a4:da:fd:61:8c:80:da:e6:6b:b3:dd:c2:b2:b6:89:
3a:02:ae:e6:4f:3d:25:8b:4b:13:a8:1f:d2:19:e4:
e0:d2:cf:a6:e6:00:8e:45:bb:c1:cb:2e:0e:1c:b4:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:E8:A7:DE:D7:63:BD:F8:D0:99:EA:E9:03:35:FB:3F:E9:06:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6b1aadea-f3cf-3638-8b9c-e7711aa8106d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
X509v3 Authority Key Identifier:
keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:44:20:cd:cb:47:de:d3:0c:51:d0:1d:8a:6a:a3:2c:77:fb:
8f:13:46:5e:ba:8a:8a:3c:59:d6:c4:a8:da:e6:93:f8:62:31:
c8:30:36:dc:f3:47:c0:68:5f:c0:69:a5:69:f8:d9:4d:a9:f7:
94:2d:9b:24:be:e8:f6:b1:16:37:5f:4b:7c:5d:b5:ae:2b:c7:
66:78:2a:fe:c5:3b:ea:56:89:2b:07:a6:f2:45:87:cd:aa:3f:
7a:45:3d:c0:99:5c:6c:30:af:9a:c3:d3:3b:73:e4:65:76:9f:
bd:fb:35:c1:36:67:31:27:d3:ea:e6:2e:f1:87:10:ed:a0:fd:
60:ef:b9:7d:21:1c:c1:9e:c1:29:bf:30:28:7a:33:99:43:6b:
02:02:5b:a3:30:7d:0a:af:7a:86:0b:39:d8:fe:b0:a6:d9:ae:
c0:8f:98:2a:99:f5:3f:21:c7:90:00:ab:c9:d6:eb:82:41:f6:
94:d3:d3:5a:20:3d:41:5f:07:78:f1:05:0c:a1:74:95:d8:bd:
95:af:78:42:e3:00:54:2e:2f:ee:45:ff:bf:c0:2d:67:8a:af:
b4:b8:66:8e:31:c6:73:1b:20:f7:a2:a8:53:99:56:61:06:e8:
bf:ea:88:7f:ef:fd:d1:df:6e:5d:01:cd:d9:56:8d:52:2a:81:
05:58:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:02 2025 by rpki-client