Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/1d161e3b-14a7-3bb5-b723-78abdea0766c.roa
File: 1d161e3b-14a7-3bb5-b723-78abdea0766c.roa (raw, json)
Hash identifier: 4zQ/wycHcwW/rbuL2VMhIOYl8X6GC/Uo78fYPnvmc20=
Subject key identifier: D9:C9:85:A1:16:6E:19:42:0C:63:1C:64:DA:FB:9A:5F:EB:09:D4:1E
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F4328584838855F207BC5889FF4B5B680
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/1d161e3b-14a7-3bb5-b723-78abdea0766c.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 212238
IP address blocks: 128.254.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5f:20:7b:c5:88:9f:f4:b5:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=41ca6d05-59ca-4beb-b699-99eb0a58a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:0b:74:c6:48:d2:12:c5:5d:a5:ae:52:1b:
16:05:de:c3:08:86:d6:29:03:f0:8a:b3:24:66:3c:
e3:c2:b0:d0:25:15:54:9a:bb:83:de:45:97:0b:24:
37:9d:41:07:11:be:30:09:fc:72:4e:09:95:51:f1:
23:65:e0:4c:e3:b3:11:c2:6a:f0:2d:94:95:16:51:
57:61:0d:f1:2e:d8:fa:c2:22:83:d7:75:15:aa:a7:
55:06:0f:f8:cf:66:f2:bc:f4:91:bc:e2:f4:54:a9:
25:65:7e:71:da:3e:a2:e6:b4:a5:87:c0:8d:da:4b:
fe:50:3c:36:58:91:27:c0:32:fa:56:17:9d:96:51:
3c:4b:8d:5c:32:ed:a1:b5:1e:8c:03:67:05:99:aa:
73:ff:c4:c6:22:28:7b:f0:54:a9:5e:4f:42:33:80:
ec:6c:20:f0:54:d5:c2:c9:ab:73:cf:99:57:4b:3d:
b2:5e:13:1b:2a:d9:3c:2d:bc:1c:19:bf:6d:34:ec:
46:44:17:89:a1:76:e2:a1:0b:04:1c:6f:2f:47:f1:
41:c3:39:d8:71:70:f6:32:89:7a:b0:e5:cc:33:a2:
79:14:ca:c8:04:aa:e5:41:08:da:67:1c:53:0c:3f:
53:0f:12:c6:6a:4b:c2:bd:22:63:cf:6b:14:80:1c:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:85:A1:16:6E:19:42:0C:63:1C:64:DA:FB:9A:5F:EB:09:D4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/1d161e3b-14a7-3bb5-b723-78abdea0766c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ca:4e:96:42:0b:27:d5:b4:f7:49:38:7c:1a:57:8b:d5:a5:
d3:fc:67:79:aa:44:3f:e4:b8:03:0b:f9:5f:08:fc:19:78:7f:
c5:1b:6b:af:c9:5a:e1:b1:3e:fa:6d:ff:b2:94:3c:da:ab:ca:
93:13:55:33:c2:24:5f:a8:6f:96:71:1e:ba:0a:83:bf:bf:f0:
9a:d5:cd:55:8b:0e:0b:9d:c8:ef:85:84:93:f6:e5:6e:8f:da:
e8:21:e5:6b:6f:7a:f8:ac:c9:87:ae:f4:49:7e:2c:5b:22:d4:
eb:bd:89:87:e4:17:20:42:e5:d1:1b:78:a6:ae:37:e1:f3:06:
7b:fe:ed:00:d0:a1:4d:42:2e:18:63:b4:4a:fe:08:f3:3d:57:
c4:05:4a:58:cb:64:3a:21:21:8a:6d:db:40:d7:b3:c6:79:18:
42:e4:8e:e7:6f:17:3b:90:ec:fb:60:aa:4f:b9:7a:83:e6:ef:
56:1c:72:26:7b:0a:bb:21:cc:e7:b0:eb:18:41:1c:a4:12:a5:
0a:c3:e8:59:1e:c2:1c:e9:51:c0:46:a7:d0:32:75:39:88:17:
83:2c:ed:af:24:30:ef:80:41:3e:c9:12:49:dc:9b:aa:89:da:
ab:93:ca:9a:47:38:21:dc:0f:99:c1:2f:13:fa:59:16:e2:2b:
78:84:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:43 2025 by rpki-client