Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f1db926-1780-378a-970e-409f4609140a.roa
File: 0f1db926-1780-378a-970e-409f4609140a.roa (raw, json)
Hash identifier: 4no/FNa+Tqcl1deMPMHRgsVawzoUBc7ZPw02HgslA4o=
Subject key identifier: D8:8D:3F:1D:BF:BC:15:64:7A:A5:12:12:F6:8A:49:2F:5A:52:3D:63
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847FDE4D20373F17C43191FFC00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f1db926-1780-378a-970e-409f4609140a.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 203963
IP address blocks: 216.24.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d2:03:73:f1:7c:43:19:1f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=0ce46a9b-1a72-4b15-877e-0062632b04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:02:86:bd:38:87:34:2a:1a:9c:ae:9b:ef:
9c:91:bc:bc:a9:be:75:c9:71:44:77:53:cc:f9:7e:
00:49:c4:50:fc:9f:69:97:9c:f4:09:27:f0:d0:2a:
99:43:ae:5a:ac:14:73:db:19:ae:37:ba:62:d1:0d:
d1:b8:9f:c2:81:dd:56:25:38:cc:87:23:87:aa:d8:
1c:9e:6c:57:cf:df:99:37:da:48:86:4b:19:25:6c:
98:63:15:33:38:f5:f5:3d:f7:66:f3:87:ca:e2:ce:
e0:a0:67:05:1d:5a:9c:2a:50:be:98:8a:df:2c:54:
5e:8a:ad:cc:22:9e:eb:60:55:1d:f6:a0:f9:a4:34:
f9:cd:82:cd:68:2b:7f:97:aa:90:50:28:f1:ee:cc:
50:b2:de:a1:12:e5:56:63:66:ab:a9:d6:fa:12:ac:
05:52:55:f1:55:a1:f9:06:ab:8c:ed:48:9b:bd:a9:
f5:10:ec:ff:f1:58:05:c8:db:54:5a:8c:12:d5:42:
7d:6f:58:37:26:00:3a:83:33:6f:01:03:1d:67:76:
cd:d1:4b:17:d5:1e:48:ad:11:8a:da:c3:ce:2b:5b:
80:0a:de:06:89:37:8c:ba:cb:99:0b:80:58:1c:ee:
d9:94:29:08:b2:5c:b5:d1:1d:30:40:4a:eb:2a:98:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:3F:1D:BF:BC:15:64:7A:A5:12:12:F6:8A:49:2F:5A:52:3D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f1db926-1780-378a-970e-409f4609140a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:be:46:a5:af:82:91:96:39:a7:66:ed:c8:6e:d0:18:4d:14:
8c:16:5e:f0:44:d1:4c:d9:10:0e:c5:b4:7d:27:b1:8e:d4:51:
e5:86:98:22:73:21:b3:fe:86:d6:0f:8b:26:35:8a:0e:d5:03:
39:3f:52:9c:41:65:4b:bc:2c:f8:59:6c:6e:e4:39:72:50:ee:
6b:a5:e8:c9:66:54:1d:7e:6c:ec:91:39:0e:be:76:86:26:95:
3a:1d:44:1f:ff:c3:56:2a:59:cf:84:fd:24:30:66:96:c4:17:
ce:b9:b8:b4:84:bc:31:bf:a0:ef:a4:45:8e:4f:5e:6e:3d:3b:
7a:d3:28:26:bd:38:9c:2f:b3:25:87:da:17:fc:a9:76:a8:fb:
cf:f7:95:fc:91:2c:10:99:52:c9:4e:61:a1:08:92:5b:fb:1c:
ee:9e:8b:68:4b:89:fd:2d:46:db:f3:79:d4:9e:67:89:4a:69:
a9:51:37:25:bb:a5:1a:7d:52:ac:46:c8:cf:de:15:55:93:ee:
62:9b:f3:81:9e:8b:da:1c:75:c0:6f:71:c6:8c:59:92:04:94:
1d:b2:32:14:e6:6d:60:30:7d:ab:51:a9:d3:be:d8:40:25:08:
8e:dc:3a:b2:1c:33:5c:db:87:c0:a6:f6:05:b6:d0:e4:b5:77:
87:3e:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:27:10 2025 by rpki-client