Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa
File: b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa (raw, json)
Hash identifier: OVWX+YI5ELKJZQ5pL20NmQmPVO7IxVcFAnJKPh73jAg=
Subject key identifier: 5F:4C:84:85:CC:D5:65:DE:96:78:77:DC:76:E5:42:75:7B:2D:06:D6
Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial: 010D0C9F432858458DD34E9F95C9881661039280
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa
Signing time: Mon 15 Apr 2024 13:00:35 +0000
ROA not before: Mon 15 Apr 2024 13:00:35 +0000
ROA not after: Sun 14 Jul 2024 13:00:35 +0000
asID: 26677
IP address blocks: 172.99.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:8d:d3:4e:9f:95:c9:88:16:61:03:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Validity
Not Before: Apr 15 13:00:35 2024 GMT
Not After : Jul 14 13:00:35 2024 GMT
Subject: CN=322c4e68-7189-4b4b-851d-1463d03bcb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:60:a4:64:ae:10:37:6b:e8:6f:e3:29:91:
e3:6e:12:9b:f0:1b:43:02:01:65:72:5b:d0:76:16:
95:48:ca:31:90:dd:12:f6:25:db:43:d2:2b:53:5d:
3f:6d:94:ff:a3:76:c4:6b:c5:af:78:95:ed:e2:82:
d4:12:d0:09:84:1f:57:1d:ab:87:6b:fc:0f:9d:ac:
df:fb:0c:91:25:00:aa:a1:82:a7:05:b9:e8:ae:56:
df:88:7b:89:e2:90:4b:95:16:90:30:24:74:d9:51:
ec:01:5f:7b:4b:d6:04:4d:96:d2:e2:7a:98:23:cb:
f8:da:31:3d:59:7e:b6:fa:ea:8a:6b:53:dc:3f:33:
b3:b8:d7:76:bf:b2:2f:da:d2:37:2f:98:9f:42:7d:
73:30:43:96:8c:8b:f2:5d:cd:7f:89:1e:bb:96:dc:
ff:86:71:57:75:22:e9:08:6c:a3:67:18:95:38:9c:
53:7d:b0:be:67:78:5e:4a:3d:13:cd:94:ac:25:ac:
e4:79:e5:84:52:93:ac:e3:a3:5f:01:ae:d6:b7:22:
2d:b1:2e:31:32:a8:32:4f:8f:49:db:d7:ae:fb:31:
91:d6:fa:2c:fd:ba:b6:58:e4:da:b3:91:d0:a7:41:
7d:29:ba:59:20:d1:ef:b8:0b:7f:3d:bb:e6:21:e0:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4C:84:85:CC:D5:65:DE:96:78:77:DC:76:E5:42:75:7B:2D:06:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
X509v3 Authority Key Identifier:
keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c5:8b:85:78:ae:4c:46:7d:5c:94:af:f9:9f:fd:d9:ab:1f:
38:80:13:a4:58:1f:03:71:39:b4:91:b7:45:ab:a0:89:40:f4:
6b:4f:bf:35:f5:be:5f:05:54:17:30:83:ae:23:38:89:e9:a9:
29:33:ec:e8:da:fc:51:f5:6f:79:e9:cb:2b:7f:dd:57:b8:02:
34:90:8f:eb:c6:06:9d:dd:ca:39:dd:6b:8a:fc:a8:e0:1c:07:
4b:e5:7c:7f:f0:c8:78:15:0a:8a:28:26:f8:2c:2f:d2:6a:7c:
15:d4:75:e6:6e:69:63:68:e9:de:aa:0b:ce:f9:86:5a:0d:a6:
98:b9:4a:79:95:4b:bc:78:f8:3b:b8:8a:76:7c:57:70:3a:63:
cd:2a:1c:05:c4:c3:7d:09:1d:b6:5e:d0:13:23:b1:4c:77:69:
47:a7:e6:65:1a:a6:a7:d9:74:9d:36:3c:f8:3c:27:8e:81:f9:
3c:3c:f6:50:88:d6:98:2b:75:f8:36:d1:c9:c4:86:16:a3:23:
97:7a:58:f1:c1:33:9b:59:62:0c:4c:b3:9b:e1:a9:8e:32:83:
a0:1f:57:26:eb:f5:7e:ff:c1:bc:0c:6e:33:b3:7c:78:35:9b:
91:b6:b1:14:7f:ec:93:f6:e6:7a:e4:da:0d:39:6d:ff:8a:b8:
5e:49:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:00 2025 by rpki-client