Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa
File: 1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa (raw, json)
Hash identifier: 13h4ZXw6Z41l7S+QJzF5EoK+nXCmUtG+bfVBgIBdd7E=
Subject key identifier: ED:9E:1B:DA:5E:34:CF:86:ED:08:EE:DD:B8:62:71:D8:8A:21:A7:46
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285848090FB84DDFFEC6E9580FC0E0
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 12956
IP address blocks: 74.112.232.0/21 maxlen: 21
74.116.95.0/24 maxlen: 24
199.19.28.0/22 maxlen: 22
208.78.48.0/21 maxlen: 21
208.91.192.0/22 maxlen: 22
2604:25c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b8:4d:df:fe:c6:e9:58:0f:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=aa2d3fba-cb09-478b-8583-522e04c2e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:18:10:11:99:eb:2d:42:c4:4c:62:28:25:
f6:7f:ba:02:ff:f0:0c:d3:0b:d8:14:f4:a4:3e:e3:
a8:74:9b:ba:90:bd:d5:1d:7c:af:a3:d9:84:3a:65:
9a:f8:73:01:e1:4e:c9:18:f7:94:96:d1:68:ac:9b:
43:54:6d:e1:40:91:c4:aa:89:87:23:c8:03:77:37:
28:ed:15:ad:b7:e1:70:92:62:5c:40:03:4c:7e:51:
25:94:87:e6:57:73:dc:80:7d:ef:f3:89:03:8b:8c:
0b:56:63:0a:95:e1:de:e3:7f:de:fe:9c:76:a8:54:
5d:87:41:88:be:66:16:c8:a5:f4:58:02:0a:0f:80:
9d:4e:82:74:2a:5a:13:95:c7:29:97:ea:71:55:55:
81:33:7a:fc:3a:4a:f8:35:c1:2a:c7:73:04:bd:ff:
5c:70:03:83:d1:e0:c1:c0:d1:49:6d:72:03:7d:46:
fd:ab:e4:87:a2:1a:82:5d:3f:a7:48:99:7d:53:65:
b4:86:2c:31:af:ed:98:c2:51:95:91:0f:90:ab:bd:
99:c6:6c:2a:91:67:d9:2f:5b:3b:30:eb:1f:4e:93:
ef:2a:78:bb:4f:ac:e3:c0:bb:27:3d:0f:98:3e:a3:
0f:8b:e8:40:54:e3:9e:80:ab:63:8e:b9:9c:24:95:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:1B:DA:5E:34:CF:86:ED:08:EE:DD:B8:62:71:D8:8A:21:A7:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.232.0/21
74.116.95.0/24
199.19.28.0/22
208.78.48.0/21
208.91.192.0/22
IPv6:
2604:25c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:12:a8:ed:0c:52:df:d5:a9:05:8f:79:ce:fe:d1:f7:aa:44:
af:31:dd:23:5e:de:84:95:09:df:7e:fc:fb:0f:e8:e3:a8:b5:
a5:b8:25:e7:59:65:bf:d1:d5:da:f8:01:b6:e5:41:73:b2:04:
fd:11:10:1f:b9:4a:02:08:dd:e9:24:fc:75:56:2d:d0:02:79:
c2:20:e4:2a:7d:91:68:37:6e:9c:33:da:03:3f:3a:31:7f:19:
76:3f:4d:47:79:28:40:30:fc:8f:11:5a:a0:b4:af:61:80:36:
ff:53:fb:5f:b6:f5:a8:15:af:a7:0d:da:91:b0:29:67:64:3a:
a9:69:37:00:05:22:a9:1d:d2:a1:b6:0e:09:98:51:ab:84:c5:
91:cd:c3:88:d0:3c:c8:37:84:9f:bb:b1:67:90:7d:e2:eb:6b:
b5:e3:df:12:81:4b:cd:7d:bf:a3:90:71:1d:eb:cd:6d:a8:77:
6c:6a:4c:3e:0c:f6:5c:4c:90:79:cc:0f:20:8a:94:25:8a:b5:
d9:31:46:97:ab:76:6a:f5:e9:23:a4:9d:60:88:f3:d6:9c:40:
92:fb:f4:f0:e3:22:5c:b6:8b:8a:d1:fe:1e:90:02:e4:41:17:
c5:e5:e4:54:ff:02:82:39:e6:e8:ca:a8:6d:f6:60:5a:58:d7:
eb:4c:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:10:34 2025 by rpki-client