Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/485406fc-5725-3c6b-86da-cbcc51489a6c.roa
File: 485406fc-5725-3c6b-86da-cbcc51489a6c.roa (raw, json)
Hash identifier: 3f6Rk/YVbiwebtuz8m+1/166zhJXQmvNwZ5c1Vgvdig=
Subject key identifier: 97:0C:1A:67:84:16:57:71:3A:A7:C8:42:BF:D0:11:B8:33:D1:07:8B
Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial: 010D0C9F4328584620287C981DBE5481F8C48AC0
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/485406fc-5725-3c6b-86da-cbcc51489a6c.roa
Signing time: Thu 06 Jun 2024 23:00:27 +0000
ROA not before: Thu 06 Jun 2024 23:00:27 +0000
ROA not after: Wed 04 Sep 2024 23:00:27 +0000
asID: 26677
IP address blocks: 172.99.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:20:28:7c:98:1d:be:54:81:f8:c4:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Validity
Not Before: Jun 6 23:00:27 2024 GMT
Not After : Sep 4 23:00:27 2024 GMT
Subject: CN=9659c538-f64d-4a27-b643-2b48e74aa78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:fa:07:3c:7d:bf:bb:90:9b:c0:7b:73:9d:
e7:4c:d8:33:92:b8:06:89:88:ec:bf:8a:de:c4:b4:
d7:9d:02:c2:38:8f:28:ba:3c:5a:d5:d4:87:6f:1c:
c2:5e:36:69:fa:65:65:70:29:bf:04:66:97:e9:db:
9f:fe:37:08:e7:0e:12:18:1e:4b:75:9f:86:b1:90:
1f:82:de:4d:5c:85:e6:cd:71:ff:18:a9:c5:f8:c6:
64:13:71:63:9a:c6:45:59:83:19:bb:0e:96:a7:e1:
8b:e4:be:24:29:43:4a:1d:bd:6f:81:27:b6:e4:b4:
31:ec:76:a9:ac:fd:79:94:34:1a:73:b4:ed:c3:33:
e9:48:28:d6:07:4b:de:7a:bc:b1:a6:d9:ed:b4:90:
27:ec:3a:e2:26:a4:b7:a3:d6:0c:11:6c:db:1f:1a:
af:0e:bd:f0:54:de:dd:fa:30:55:24:04:b7:15:e3:
4f:98:a3:a7:bc:7c:39:d5:64:11:f8:29:1f:44:65:
68:92:3f:46:88:fd:ef:dd:74:98:b1:bc:8c:45:21:
9a:62:41:64:64:98:04:e5:de:ba:7e:8b:4f:10:80:
e5:10:2a:e2:69:76:2b:56:64:b1:07:ec:8e:f8:b7:
02:1a:f8:61:e6:27:81:aa:27:1d:e9:7c:bd:8d:bd:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:1A:67:84:16:57:71:3A:A7:C8:42:BF:D0:11:B8:33:D1:07:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/485406fc-5725-3c6b-86da-cbcc51489a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
X509v3 Authority Key Identifier:
keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b1:55:78:30:f4:b9:ea:a2:09:86:48:77:57:f7:35:d0:b3:
bf:62:12:92:30:55:09:04:18:b1:19:62:9b:3c:5c:b7:c0:42:
e4:e1:75:31:b1:6c:f7:d8:9c:47:b3:83:4b:f7:2b:45:d3:b9:
4f:ea:67:f8:94:96:79:57:a6:b3:de:24:09:c7:36:3b:85:72:
98:a1:e0:39:de:45:05:e4:4b:60:fe:64:d4:ac:ae:41:f5:de:
2c:a4:64:6b:a6:56:48:7e:9f:6e:3f:02:6c:43:39:f7:00:61:
c0:80:dc:d3:6f:1d:d4:78:9b:dd:d2:10:f6:6a:8f:d8:b6:a5:
86:5d:ee:f8:20:cf:9a:cd:70:31:11:64:b4:2c:02:11:4f:fc:
1e:90:e0:da:d0:66:e6:53:9d:3a:86:2e:f9:4e:6e:72:54:b4:
5e:70:cd:94:09:1c:e9:a0:78:77:08:58:20:d6:b8:72:13:43:
35:db:c7:45:c9:aa:b7:bb:46:c0:a7:15:49:e6:a3:40:cd:93:
9b:9a:10:a3:61:ce:31:74:a1:21:33:11:c2:cf:8b:4d:3f:2e:
59:90:1e:b4:04:97:75:e4:fb:8d:40:ce:bc:6a:34:a5:8f:f9:
e0:bb:7e:44:9a:a0:06:34:9d:6b:51:da:25:65:31:55:95:da:
f1:39:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:05 2025 by rpki-client