Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3add7876-9b1d-3324-af89-9a7f9b7052d5.roa
File: 3add7876-9b1d-3324-af89-9a7f9b7052d5.roa (raw, json)
Hash identifier: 8yx3Wdm0kBW/3WgtuAnbiBNaquX8UC4ggZW1TNaaqDU=
Subject key identifier: 3F:E1:61:20:B9:4E:B5:4B:14:ED:2F:87:F9:04:F4:1A:5C:42:94:42
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847C33151A2A9C73316CFEAC780
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3add7876-9b1d-3324-af89-9a7f9b7052d5.roa
Signing time: Mon 04 Nov 2024 01:21:57 +0000
ROA not before: Mon 04 Nov 2024 01:21:57 +0000
ROA not after: Sun 02 Feb 2025 01:21:57 +0000
asID: 25846
IP address blocks: 140.228.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c3:31:51:a2:a9:c7:33:16:cf:ea:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 4 01:21:57 2024 GMT
Not After : Feb 2 01:21:57 2025 GMT
Subject: CN=7bd09aaf-5cd9-4bdb-aff7-2259c96dc87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:5f:98:b9:4b:73:21:83:1e:4d:97:bd:bc:
9c:dc:f9:21:b6:3e:ad:bb:61:27:2c:d6:7b:70:22:
9b:2d:4a:77:d3:e5:b9:b8:8b:e5:a6:f8:90:fa:4f:
c0:ad:0f:2c:82:62:38:c9:c9:0c:b1:80:0c:98:94:
c5:10:16:86:99:71:95:85:75:1c:dd:9f:83:c9:ad:
cb:60:09:80:0e:34:e0:7d:c5:b1:78:a7:20:db:d8:
16:1b:38:4b:11:21:b7:6e:4d:74:79:73:b3:36:4a:
d0:34:9b:27:e4:1b:db:b0:e3:e3:ea:b5:7e:80:5d:
65:75:ed:6a:89:64:42:2b:3b:32:c3:c5:67:be:b4:
64:8e:50:c5:60:4b:27:fb:c6:13:6e:f5:86:5f:e0:
34:1a:09:63:da:3b:27:73:5f:68:24:48:83:33:2a:
4b:22:ca:2a:b4:3e:e2:c8:8f:74:6b:14:c3:c0:73:
da:90:52:02:41:e6:55:fa:c7:53:17:98:60:8e:85:
d8:9e:ff:c1:47:55:62:ef:cc:90:f1:e1:10:37:13:
90:72:f1:88:9c:d1:d9:25:37:38:18:4a:f7:8b:c8:
de:8d:81:84:2a:55:58:23:13:11:24:50:90:46:95:
0e:0c:ea:79:dd:b5:b5:49:39:87:0c:dd:eb:cc:da:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:61:20:B9:4E:B5:4B:14:ED:2F:87:F9:04:F4:1A:5C:42:94:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3add7876-9b1d-3324-af89-9a7f9b7052d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.228.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4c:ff:32:32:1e:15:7b:40:af:88:2e:c7:b2:e4:49:88:ee:
a8:2e:cb:ff:da:d3:f1:28:d4:d6:43:d3:5f:37:ac:ba:c0:72:
af:f2:db:6e:91:21:29:b9:e1:5b:e4:e4:0c:db:8a:57:ae:8b:
83:33:2e:aa:36:1a:4e:1f:90:eb:fa:90:63:8f:13:2b:86:0e:
fb:9a:b1:bb:9d:25:8e:01:0c:36:f9:7b:40:85:7c:2c:1c:c3:
50:6a:61:ce:0c:00:5f:b7:69:43:29:a6:86:ef:0f:45:24:65:
6f:6c:b9:93:6d:bc:98:0d:30:2f:53:74:8b:a7:0c:97:ea:04:
25:e2:70:21:dd:da:11:6f:64:59:f7:ad:01:60:5c:bf:b4:ed:
5e:f7:bf:f0:ab:e1:6d:10:e0:0c:04:ba:26:80:09:76:fa:d3:
af:55:a3:b6:84:4d:1e:ec:69:9b:1d:8f:89:b5:0f:69:48:69:
c3:11:01:ac:a4:40:11:5a:f5:1e:45:cd:66:16:88:33:15:19:
66:f7:0c:04:a3:50:c2:9f:8b:e5:f6:b7:eb:d2:ff:c8:f6:ce:
90:80:75:50:93:28:18:a1:1a:20:28:3f:d3:fc:69:b2:5c:74:
25:0c:41:5a:42:9f:9b:b2:0d:65:00:be:4e:36:92:d2:61:20:
6e:9a:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:58 2025 by rpki-client