Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/b1ca1624-e75c-38a0-afcc-a29f4241c603.roa
File: b1ca1624-e75c-38a0-afcc-a29f4241c603.roa (raw, json)
Hash identifier: JBnHBwbR0r7df6jxywTlVCxcRC2Ekw6OASYqZvTzI88=
Subject key identifier: 8B:8B:C3:C8:04:9C:51:52:5B:15:F0:52:8C:E7:DB:0F:C1:BF:ED:C0
Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Certificate serial: 010D0C9F43285837B1F6D9B718B07383BE5FC200
Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/b1ca1624-e75c-38a0-afcc-a29f4241c603.roa
Signing time: Wed 21 Oct 2020 04:00:00 +0000
ROA not before: Wed 21 Oct 2020 04:00:00 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 11377
IP address blocks: 223.165.113.0/24 maxlen: 24
223.165.115.0/24 maxlen: 24
223.165.118.0/24 maxlen: 24
223.165.119.0/24 maxlen: 24
223.165.120.0/24 maxlen: 24
223.165.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:b1:f6:d9:b7:18:b0:73:83:be:5f:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Validity
Not Before: Oct 21 04:00:00 2020 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=0be02a54-d591-44c9-beda-46045c2e63f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:88:cf:55:7d:5c:c5:2a:d5:82:2b:77:c0:
fd:92:d0:da:03:63:5b:a2:2b:10:1e:ac:33:f0:24:
5c:58:15:77:31:75:08:ff:d4:bb:21:13:b3:c5:2c:
32:36:82:6a:92:7b:6e:f2:8f:0e:98:cf:c2:62:5d:
d6:26:b5:f2:7b:57:68:af:99:d6:f5:cf:01:e7:f8:
c6:2e:38:b7:59:ae:d5:08:e3:31:75:8e:b8:04:b6:
93:3d:63:1b:45:b3:0d:05:93:6a:5d:78:ca:4b:51:
43:7c:37:bc:1c:d3:3a:99:09:a8:35:84:0c:b7:f7:
5f:11:8f:28:d7:98:92:f7:00:b1:5c:16:0d:8d:da:
5b:48:f0:db:d7:b8:83:cd:c9:be:12:e7:ea:e6:cb:
24:60:86:76:8c:34:22:98:7d:28:89:62:e2:85:40:
64:8c:2c:91:d4:80:61:f4:62:96:85:c9:b9:9b:84:
7f:de:a1:1b:3a:2b:0c:5b:18:60:78:a3:b4:f8:7a:
65:9b:fe:a3:48:8d:d1:cf:ec:b4:cd:d5:9b:d9:09:
2c:a3:8b:36:6c:48:bc:a2:5b:1c:f5:76:16:c2:62:
19:41:5e:ec:48:3b:fd:2f:6f:f0:4b:a6:96:6f:76:
a9:fc:eb:a3:a5:a2:0a:7e:e2:b1:42:bc:df:9d:0f:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:C3:C8:04:9C:51:52:5B:15:F0:52:8C:E7:DB:0F:C1:BF:ED:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/b1ca1624-e75c-38a0-afcc-a29f4241c603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl
X509v3 Authority Key Identifier:
keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
sbgp-ipAddrBlock: critical
IPv4:
223.165.113.0/24
223.165.115.0/24
223.165.118.0-223.165.121.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:37:71:de:0e:2a:79:d7:3a:7f:78:ba:25:77:9d:3c:74:fa:
0c:3a:0f:e1:d2:79:ac:b5:f4:3e:ea:30:e4:14:cb:33:63:21:
02:2a:92:4f:ef:72:c5:51:11:9f:36:f4:54:a4:a2:e0:75:b9:
49:0c:d4:39:39:4c:c7:fc:5f:f5:b3:d7:2c:9f:77:9d:d7:d2:
c5:6b:4f:a1:7e:75:77:37:2e:c1:c3:bf:29:bb:f0:6a:58:66:
f2:d3:2f:7e:b6:9d:6e:ee:34:41:e5:65:e0:a5:41:b5:61:d0:
ce:6c:c2:0f:4e:97:81:4f:4c:41:fa:c2:f1:cc:5a:80:11:50:
38:ee:0b:bb:80:80:36:de:9d:17:18:61:96:c3:db:50:9c:f7:
02:e8:11:f2:b9:31:c9:e3:1c:0f:d2:ba:47:29:48:6f:62:9a:
23:14:db:a4:e7:60:da:25:97:24:a3:94:59:e1:33:34:10:4a:
47:de:57:95:2e:94:18:7b:a5:2a:aa:2c:b5:0c:66:61:df:71:
6c:23:a8:07:f1:f5:97:16:43:69:33:29:90:19:4c:b1:d5:35:
b5:51:29:da:a9:f3:c5:bf:eb:4a:3e:07:17:dc:2a:8c:a7:f0:
1f:29:b1:37:80:01:2f:ab:b0:a8:62:2b:99:b1:33:7e:d8:4f:
93:39:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:14 2025 by rpki-client