Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa
File: 5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa (raw, json)
Hash identifier: Lke/Ka4cQnKb0dgpTECT+rNB+Q1en2xqidPYz7N1HEQ=
Subject key identifier: 2A:62:3A:18:7D:9C:2A:25:96:A7:17:E8:4B:88:D2:58:D2:AA:07:D0
Certificate issuer: /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial: 010D0C9F4328584869606E3FDB1A8E37C65EFA80
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 8100
IP address blocks: 134.195.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6e:3f:db:1a:8e:37:c6:5e:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=438cd72c-bb78-44d5-bf41-25065fcb9099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:71:d3:17:27:c9:f5:7b:7e:27:a7:7c:e5:
a8:11:95:11:33:da:34:83:8b:ec:f7:36:5f:d3:be:
d4:30:20:82:57:cb:64:5a:ba:2f:c0:74:14:a3:b8:
a7:b0:2e:06:84:29:13:7a:4d:c8:33:35:4a:39:8d:
33:fc:55:40:73:31:6a:68:a0:eb:ac:18:92:7c:e4:
b3:6c:79:43:ac:71:bf:d1:2c:e8:2f:76:9f:54:be:
39:8d:5f:2c:12:03:dd:a1:ae:e9:9b:a0:66:bf:01:
88:ec:16:18:78:8a:c5:91:06:55:df:a5:cb:08:2b:
6f:e3:2d:15:31:8f:ae:c5:ae:df:13:4c:b2:9f:2a:
f6:7b:d5:35:2c:cd:d8:91:36:03:07:c3:9b:9d:7f:
8e:6d:b2:08:65:2d:50:bc:b4:b4:11:e8:d8:43:ac:
e4:00:d0:85:b2:2d:a7:cd:33:32:02:88:f9:10:43:
b9:03:75:ec:5a:43:c8:2b:c1:62:52:16:0f:50:0a:
b6:80:21:bd:1a:c7:e5:29:7e:77:4b:74:d1:9e:57:
ec:4a:ba:12:c2:8a:eb:52:d5:ae:22:de:cb:ff:ab:
1e:d3:25:67:21:14:11:34:9a:43:4b:33:51:99:31:
bc:e8:00:f4:9b:ac:23:3a:a0:17:2e:92:d1:88:08:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:62:3A:18:7D:9C:2A:25:96:A7:17:E8:4B:88:D2:58:D2:AA:07:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
X509v3 Authority Key Identifier:
keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e1:c9:9a:66:32:3f:5b:a2:31:37:29:2e:fd:b1:1d:57:70:
bc:97:ef:48:9f:9d:8a:77:47:28:fd:cb:1b:30:cf:2e:f8:0c:
1b:4c:a8:9c:64:aa:0c:80:d5:f6:3b:6e:05:e1:2f:58:d0:72:
26:f1:a1:78:40:d6:da:8b:af:6f:9f:03:15:18:8c:10:d3:bf:
bc:3e:5b:18:74:8b:09:0e:c9:1b:3b:93:7b:99:8a:be:a2:6b:
43:98:3c:46:1e:70:b9:0f:fa:00:d3:f1:5f:0b:f2:e8:3d:d2:
70:7c:d4:2b:3b:75:92:00:e2:3a:72:a7:1f:3d:d7:95:ad:53:
ad:c8:da:93:f8:90:d5:55:cb:25:fb:92:a0:ee:3c:82:1d:8d:
a4:3e:39:d7:ad:ed:74:d4:70:96:4a:1c:8b:e9:47:15:ee:b2:
d3:d4:35:20:f1:20:a2:b4:b1:33:0e:f5:1c:7f:60:dd:35:6d:
a9:36:ec:b9:d8:9c:54:28:ea:ec:05:ac:92:96:a7:89:21:04:
b1:f0:c3:31:7a:99:33:a5:1c:de:29:55:20:79:3e:b6:06:a4:
be:68:e7:a8:e3:e6:3a:33:91:4e:c3:d1:37:c7:c4:37:c3:ae:
50:5e:d6:90:b0:a6:6e:23:3b:17:87:cf:65:38:32:1e:b4:13:
a9:b4:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:34 2025 by rpki-client