Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/098eaae8-b344-3005-bdd7-40bab9c53425.roa
File: 098eaae8-b344-3005-bdd7-40bab9c53425.roa (raw, json)
Hash identifier: cQfH2EgB5XCYYCQ3C880O4B5vi932B6ayxf/sDLiFjE=
Subject key identifier: 40:F8:F5:00:EC:DE:06:43:6B:27:E2:E3:52:39:8E:EC:5E:44:28:76
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AFB28ED6869F6F5DEAF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/098eaae8-b344-3005-bdd7-40bab9c53425.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11426
IP address blocks: 174.107.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:fb:28:ed:68:69:f6:f5:de:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5cb58573-1855-4df6-85e2-7471d623e039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:2d:b4:53:f5:39:cf:d1:af:3b:1e:2b:d2:
1b:c1:5e:a5:c0:8d:75:9d:7c:2b:a2:f0:35:f0:55:
c1:2a:e1:24:c1:ff:76:44:52:f7:c5:c7:6b:8a:53:
00:af:8a:d5:c8:a8:1a:11:08:18:0f:0b:ec:3f:4a:
cb:c0:46:22:a4:ce:2e:ae:a4:b5:b5:2a:1f:b2:a7:
d5:4f:0e:37:9e:2d:3a:db:a1:b1:8e:ff:33:56:2a:
1a:b4:3e:68:20:d9:bf:0b:08:28:cd:5a:58:ba:ff:
02:11:0f:56:8b:69:6c:c1:f8:c3:72:6f:2f:47:54:
7d:05:08:b2:20:c3:21:67:9b:d3:aa:8f:4d:59:2d:
6e:5e:38:c4:a8:26:06:04:1d:3c:5d:6c:bd:9b:95:
e9:1c:29:66:9e:38:b0:11:3d:62:1f:78:70:01:6b:
3b:05:97:e3:f0:08:4e:bc:8b:eb:44:48:96:f7:fb:
76:fc:48:fd:d7:c9:fc:fc:81:e6:3e:f9:40:44:b4:
9b:a6:7d:a0:71:72:f5:61:78:e2:47:3e:10:6e:34:
c9:31:79:f6:f9:87:09:8d:51:1d:ca:ce:12:54:42:
7e:18:ca:96:9a:0b:39:c7:fa:60:03:68:2d:2c:65:
40:e4:e7:75:66:39:56:85:78:79:a1:4a:0c:62:89:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:F5:00:EC:DE:06:43:6B:27:E2:E3:52:39:8E:EC:5E:44:28:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/098eaae8-b344-3005-bdd7-40bab9c53425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.107.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8d:05:08:96:47:21:41:d6:02:47:25:77:1f:cc:c6:bf:4a:
12:0e:f1:c7:1a:8e:ed:a0:02:3d:cb:1c:4d:80:8b:ec:76:03:
cd:cf:e1:67:6f:00:7e:1c:87:46:8d:11:f1:34:83:39:8d:96:
73:1d:a5:03:4f:23:ec:33:d1:d9:64:85:05:eb:a9:c6:b7:5a:
29:bc:b3:ff:81:e5:23:c9:5f:03:5d:55:cf:b2:cd:6a:77:81:
f9:80:72:bd:88:66:04:be:29:04:cd:2f:8b:08:1e:43:88:f9:
0f:36:21:ef:00:df:f2:41:ea:9d:63:c1:96:33:39:25:a6:dd:
04:03:2e:1d:9b:a3:51:58:1e:ea:b1:9c:e7:73:ca:87:c7:3f:
0a:90:17:9f:0a:e5:2d:fb:9c:22:ff:1b:fd:3a:a1:52:8f:f7:
23:76:2f:aa:ac:24:3c:e1:fe:54:38:16:3f:65:2b:a5:54:77:
58:48:b6:1e:95:27:59:1d:07:6c:4b:57:46:1f:e1:1b:bb:46:
47:dc:be:32:72:cd:d6:b9:0f:99:57:16:0e:4c:2e:1c:45:2a:
c4:21:4e:bc:78:19:f0:ac:db:76:eb:59:4e:7f:2b:a0:0d:05:
3e:dd:67:7f:e1:c8:d2:ec:4b:d7:51:60:8e:e0:42:46:f8:b5:
1f:c1:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:01:41 2025 by rpki-client