Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa
File: 24a8393a-2a24-319d-9aac-f20b199c318a.roa (raw, json)
Hash identifier: B98raoHe/4qpvUwu2CDNDBf+96fgeWgXo4YRP1Md6gU=
Subject key identifier: BA:B6:78:92:D8:17:AD:18:D6:7B:68:48:51:13:D2:6B:0B:AF:76:32
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837EA52F112B3527A74DDAAD000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 173.182.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:ea:52:f1:12:b3:52:7a:74:dd:aa:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=6e26784f-a9f7-4e2e-92aa-e985b6a67178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:f2:3c:e6:a9:78:72:b6:c2:97:fb:b0:a4:
79:ce:d3:49:ff:15:fa:04:32:d0:55:c4:1f:15:03:
e1:06:07:ad:45:c6:45:b9:27:df:d5:09:cf:d8:1e:
36:54:ca:6a:12:37:e7:57:39:70:ab:e2:84:a2:6d:
dd:ac:52:49:48:b9:f6:62:f2:bf:95:53:5e:ab:82:
37:7f:40:42:b7:55:da:f0:cc:36:f4:96:f9:24:91:
17:8e:ae:d4:8d:44:ae:82:28:8f:47:21:a3:a1:e5:
c5:ab:42:c3:76:c2:d9:60:84:05:d6:6a:f7:33:40:
84:be:96:f9:a4:a5:32:e7:7e:13:b2:8e:dc:39:2d:
86:b3:9c:3d:21:c3:a6:2a:56:60:d4:11:f6:32:6b:
ac:4f:4d:99:f8:ca:03:07:a5:25:47:7d:c0:bb:7d:
0e:df:53:08:40:2a:53:2f:3f:c3:18:6b:e9:4b:5d:
8d:ca:f1:9f:d4:56:7c:a3:2a:0a:29:73:f6:3b:b6:
ba:41:9a:ec:25:db:fe:a6:31:d2:65:83:91:fb:e3:
46:7f:61:24:10:f8:06:85:19:f1:c6:af:ec:e8:35:
d8:45:d8:ae:1c:68:e6:fe:fb:bc:fd:96:fa:1b:cb:
de:48:1a:c3:21:47:15:ba:d7:9a:02:9c:50:0c:53:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:78:92:D8:17:AD:18:D6:7B:68:48:51:13:D2:6B:0B:AF:76:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
173.182.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a6:61:08:2c:09:94:30:25:14:f6:f3:b4:bd:53:87:00:33:
f9:93:5b:6a:87:45:0e:64:e2:4a:70:8b:ca:36:93:19:1f:9c:
79:6a:e0:24:e8:e0:c1:cd:80:03:87:24:a6:3e:07:01:9d:dc:
95:57:e8:c2:5d:34:3a:7f:9c:83:9b:a7:16:7d:2b:52:f9:ea:
45:34:07:61:93:47:64:f4:95:4e:2c:cf:ea:91:82:a7:11:3a:
8f:33:52:f2:e0:4b:ea:55:af:46:1f:62:24:a9:be:63:ce:88:
3d:ed:f7:d7:63:6a:ff:81:98:69:d6:9b:8b:ec:0e:f4:fa:af:
2a:e0:24:5b:fb:70:2d:0e:c7:60:c1:6c:2d:00:53:9c:a6:2e:
71:23:69:c8:30:57:5a:7a:2e:f3:90:6d:9d:ea:85:a4:00:9b:
e5:bd:0e:21:dd:a9:bc:2d:2b:2c:fb:08:1d:5f:24:f8:7b:ec:
c6:60:e6:98:59:d1:84:23:dc:d9:a4:f3:d8:ee:a6:05:cb:50:
74:48:22:26:9e:b8:8b:25:2e:7b:78:0e:2d:60:ea:5a:49:5e:
c4:22:e7:a6:9f:f6:57:41:9e:60:8a:ce:ae:9e:6e:9a:b2:69:
5c:d9:ce:74:6b:c5:be:e0:32:2b:1c:c5:04:45:77:7b:b3:97:
8a:92:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:45 2025 by rpki-client