Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38372a1e-29aa-3000-bfe1-d206c19d2f16.roa
File: 38372a1e-29aa-3000-bfe1-d206c19d2f16.roa (raw, json)
Hash identifier: IZea9z1YHsotm07XLXlnueFigFa2n4anaDlakG5rdKs=
Subject key identifier: C3:E9:76:A1:E9:89:7C:75:22:19:FD:9D:77:57:22:6C:A8:B6:B7:B4
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848302544C32CF7629E3FB1CA40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38372a1e-29aa-3000-bfe1-d206c19d2f16.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 18779
IP address blocks: 172.120.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:44:c3:2c:f7:62:9e:3f:b1:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=44755ac5-137d-41ed-971c-0097ea009d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:a1:1f:20:1f:fb:98:ec:b1:3b:c4:8d:2e:
d4:c1:28:e6:82:90:9b:5b:c8:d7:97:34:25:03:54:
ec:2f:32:b1:8a:1a:a6:d5:65:4d:57:af:7e:b8:b6:
80:5d:18:35:0c:3e:bd:8e:05:bd:de:da:0f:e5:a2:
42:04:9d:a2:9a:55:62:fd:c5:88:d9:b8:24:d8:2e:
4d:2e:4f:92:a1:7b:df:2e:0a:a2:9c:49:5e:bb:a1:
6c:66:dd:53:21:0f:45:63:5e:80:a9:45:a2:0a:c1:
c4:48:65:e7:ea:37:e9:dc:8f:08:12:9c:0a:c8:0c:
c6:c9:fb:f7:d9:26:1d:b4:36:02:2a:5e:4c:81:e7:
a8:6b:e9:d9:96:ca:2f:7c:a0:ed:19:72:9a:b6:2f:
4d:dd:8a:ee:2e:c3:89:6b:c0:79:31:45:1e:aa:c1:
23:f2:1b:c3:e4:20:32:ee:fd:26:f6:2b:08:97:1e:
d6:69:7b:97:cb:c9:d1:de:74:fc:a5:1d:b6:3f:13:
71:c9:74:64:aa:9c:15:a1:23:6a:f1:bb:34:88:fd:
e7:39:25:9a:1f:70:06:1f:ee:27:66:d8:07:c8:40:
1e:8a:97:2e:fa:9f:25:b4:c2:e3:17:6f:8d:31:87:
a7:10:b2:80:d8:a8:f3:01:fc:cd:ce:e1:02:7a:6e:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:76:A1:E9:89:7C:75:22:19:FD:9D:77:57:22:6C:A8:B6:B7:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38372a1e-29aa-3000-bfe1-d206c19d2f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b6:c3:77:c0:28:af:38:16:32:9f:0e:5b:c2:9f:80:ca:9f:
1c:68:51:ef:92:ee:2c:83:bf:90:d6:e1:0b:3c:7a:91:1c:f0:
ff:41:1a:9a:28:03:5c:dd:57:d8:fc:43:57:51:1c:9d:bb:48:
5d:06:78:82:a4:98:cc:9f:0f:e5:cc:bc:4d:87:42:bb:1a:ac:
87:60:e3:c4:6e:1f:8e:0e:4b:e7:c3:4b:3c:82:73:2e:9e:2c:
9c:03:5c:00:aa:8f:1d:89:60:78:0d:00:ef:37:2a:c9:4c:fb:
12:8f:bb:98:f2:0a:d7:6f:06:c6:da:ac:0b:42:14:b6:5a:d9:
88:e2:6b:c2:89:5f:04:bf:d4:c8:e6:5a:1d:2b:c0:b2:44:ea:
7e:3c:7d:7d:4c:20:8e:69:5f:21:1c:66:41:c6:06:3b:87:b9:
f9:f8:da:56:a0:1e:ec:ae:78:69:24:f9:1d:38:95:2a:0f:1a:
f6:9e:bf:5d:a2:28:2d:d8:ae:ca:26:83:a1:b0:5e:29:98:40:
3e:5e:b6:f3:b0:b6:fc:af:99:ba:88:29:4b:82:05:2d:bc:6f:
1f:9b:9f:fc:30:60:1b:a3:5f:8f:df:2f:65:cf:97:24:30:08:
24:a2:3c:e8:60:57:b4:f2:a4:7c:cb:46:0c:2e:f3:a0:74:6a:
45:d7:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:12 2025 by rpki-client