Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/9859a9d3-4e88-3bd0-9b46-5ff850a8f746.roa
File: 9859a9d3-4e88-3bd0-9b46-5ff850a8f746.roa (raw, json)
Hash identifier: k4s5Ystvp87Jl/4TR66PHhg6E6DLMDi4mEGjz40CNws=
Subject key identifier: A8:69:B9:CD:9B:CA:2A:24:D3:E1:02:EC:20:3E:7B:31:48:FA:0F:65
Certificate issuer: /CN=25ad5b03-90df-485a-8924-5b355c4ba415
Certificate serial: 010D0C9F432858449B0F78C2B5A119D94FD04900
Authority key identifier: 61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/9859a9d3-4e88-3bd0-9b46-5ff850a8f746.roa
Signing time: Fri 19 Jan 2024 14:00:31 +0000
ROA not before: Fri 19 Jan 2024 14:00:31 +0000
ROA not after: Thu 18 Apr 2024 13:00:31 +0000
asID: 137909
IP address blocks: 142.202.137.0/24 maxlen: 24
2602:803:1000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:9b:0f:78:c2:b5:a1:19:d9:4f:d0:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ad5b03-90df-485a-8924-5b355c4ba415
Validity
Not Before: Jan 19 14:00:31 2024 GMT
Not After : Apr 18 13:00:31 2024 GMT
Subject: CN=b30ea8cc-9a85-4da3-8d24-0cf70652ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:08:00:9a:46:be:75:5a:ae:ae:8a:7e:a7:
da:67:7e:d9:fe:87:d8:58:d9:eb:b0:85:90:10:ab:
e2:6a:04:0b:de:14:26:10:f2:95:3d:4f:e7:4a:1e:
7d:3e:20:85:26:b0:e0:f1:17:4f:cb:75:bd:63:cb:
a9:c1:93:32:10:1f:89:6d:38:00:79:cd:e2:61:c0:
4c:81:0b:8b:ce:3f:c7:02:06:61:44:b4:e7:d3:7f:
5f:78:d1:44:a7:d5:9e:0e:49:c2:f7:f5:26:b4:d9:
43:57:0e:db:3a:53:71:32:d3:ce:58:9c:ef:d6:07:
0e:d5:e2:77:ec:88:3e:19:e6:7e:97:f7:5e:ea:4c:
c0:f6:3a:7a:9b:eb:be:f1:a2:2f:4f:08:d2:80:22:
38:ac:23:d6:53:0b:8f:b9:5d:f4:ad:1f:75:92:39:
76:cb:af:7c:37:54:ce:48:c3:f8:50:3a:50:c6:6d:
d1:a9:cb:d8:08:5b:9b:25:a2:70:c1:08:7b:c6:1b:
f4:dc:96:29:91:f2:85:26:5c:c5:39:3a:83:aa:16:
cf:a4:fc:e5:16:94:71:57:50:fb:3b:94:01:37:5f:
36:b3:ca:6d:a2:5f:46:7a:51:ac:99:9c:bf:95:c1:
48:f6:13:77:8a:6e:2e:10:78:53:41:1d:76:12:52:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:B9:CD:9B:CA:2A:24:D3:E1:02:EC:20:3E:7B:31:48:FA:0F:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/9859a9d3-4e88-3bd0-9b46-5ff850a8f746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.crl
X509v3 Authority Key Identifier:
keyid:61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.137.0/24
IPv6:
2602:803:1000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:64:b6:fb:a1:cf:da:e9:08:38:d6:40:61:b5:70:a9:2c:01:
b7:40:7f:81:1c:dd:69:00:61:ad:51:f8:df:0a:9a:5b:ed:22:
57:6a:48:79:1a:94:ba:32:61:8e:62:47:a9:23:38:4e:0b:9d:
0d:6f:90:11:67:c2:e4:4b:28:6d:55:1a:84:4c:d5:62:e5:32:
31:aa:be:99:61:64:2d:c6:e4:04:23:2f:36:32:70:e5:bb:92:
af:ab:ae:9d:ab:cc:73:50:09:66:f5:10:97:b5:de:5d:ed:df:
82:e4:f0:73:9c:5a:50:60:2f:7e:f9:4e:f6:c8:ac:d5:47:11:
72:30:b4:3a:69:5b:d2:4f:d7:fa:44:3c:d6:11:c9:29:78:27:
9d:4d:57:f8:7d:3f:7c:3a:68:24:c8:71:38:ba:33:cb:cb:6f:
67:2c:29:e8:8d:83:05:b1:93:bf:7d:8a:5f:81:a2:96:73:b9:
fd:ce:48:13:91:0f:23:e0:df:a9:65:ab:e0:50:7c:30:16:95:
da:d2:3d:25:c1:81:ac:63:c4:ea:2e:4c:a5:df:6e:f1:4e:7d:
5e:d4:2b:cb:58:df:df:53:e1:52:86:de:01:97:f5:fd:5b:3f:
a2:01:45:0e:37:63:9d:e7:0d:7c:bf:42:46:b0:aa:60:da:f6:
1f:76:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:02:04 2025 by rpki-client