Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4cb2ec31-5627-3593-a4ff-e1b0ef1d1400.roa
File: 4cb2ec31-5627-3593-a4ff-e1b0ef1d1400.roa (raw, json)
Hash identifier: 0uPLN+LxxRLn2BAT4kTbfEDkCNoIPQtAZav8kX+D9Dw=
Subject key identifier: 88:6A:8D:48:B0:0A:B5:B9:93:48:96:99:C6:D4:6E:95:F1:EA:D4:DA
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584555FD8CFA928061961A685000
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4cb2ec31-5627-3593-a4ff-e1b0ef1d1400.roa
Signing time: Tue 26 Mar 2024 13:00:35 +0000
ROA not before: Tue 26 Mar 2024 13:00:35 +0000
ROA not after: Mon 24 Jun 2024 13:00:35 +0000
asID: 399122
IP address blocks: 200.229.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:55:fd:8c:fa:92:80:61:96:1a:68:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Mar 26 13:00:35 2024 GMT
Not After : Jun 24 13:00:35 2024 GMT
Subject: CN=11dace75-88e9-4b7a-90e7-67e74ccfee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:e9:89:9f:d3:db:ea:82:85:1f:60:e8:90:
8c:e5:c7:b9:b8:48:39:fb:5f:0b:ca:9e:49:01:19:
58:c7:94:93:fe:36:88:61:16:4a:17:e2:e0:da:44:
0e:42:1e:c5:eb:af:4e:8b:68:4a:ea:ed:54:b7:57:
57:d8:52:ac:e5:20:ee:e0:c9:f0:fa:68:b9:86:8a:
42:e2:20:01:b1:2c:79:b1:f0:59:ac:82:a1:2c:7f:
eb:ba:1d:8d:7f:6d:a9:c5:76:1f:6a:5b:74:21:fa:
13:4c:c0:7d:31:f6:14:71:a1:c4:e7:d5:0c:59:d1:
eb:c9:2c:20:1e:0b:74:c8:70:bd:a6:79:d5:49:84:
23:35:59:47:d9:19:07:a0:a5:b0:21:17:d0:6d:ed:
bc:00:84:98:17:3a:99:f6:15:75:df:5e:1c:08:93:
81:96:bf:28:15:57:b7:52:a7:7e:16:5e:9a:17:c1:
5f:67:82:af:46:df:88:7b:c3:a7:28:d4:a4:8a:4c:
3c:6e:30:0a:e2:21:3f:ac:b2:b9:91:6b:72:28:20:
bc:3d:29:f4:3c:6c:05:24:da:18:0b:ec:7f:85:3a:
8c:9a:42:cb:32:b3:aa:71:9c:75:02:e1:3d:f5:b3:
8e:40:1b:b8:c9:ff:04:ea:16:a4:18:8e:97:f6:34:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:8D:48:B0:0A:B5:B9:93:48:96:99:C6:D4:6E:95:F1:EA:D4:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4cb2ec31-5627-3593-a4ff-e1b0ef1d1400.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:17:4e:1d:55:ff:2f:7d:b6:be:7d:e0:8b:11:e7:03:d6:70:
41:3d:50:42:ec:cb:c3:ea:f0:9a:16:4c:71:14:b9:77:5a:60:
4c:a4:4a:86:45:b0:0e:69:1e:e3:55:d8:e5:50:36:22:f2:65:
b7:06:87:35:f3:14:3b:33:6f:16:16:b0:61:76:c8:b0:e2:a8:
8f:ee:fc:42:d6:e8:86:b7:72:1b:ea:c4:9a:e3:a0:b5:c9:de:
cf:9e:97:cc:a4:31:cc:28:dd:49:50:f6:ce:a4:e0:ca:6d:58:
96:d5:3d:dc:a0:2a:92:d0:a2:fd:f0:94:e0:88:78:b4:35:7a:
04:46:7b:34:53:6c:11:29:99:42:37:94:01:7e:ca:cf:e8:3d:
bb:59:ca:7c:b2:67:fc:49:fb:33:af:4b:af:56:58:5b:10:d7:
86:82:b1:b6:bf:25:4d:f9:97:dc:cc:39:9d:cc:c0:37:ae:54:
37:bf:ba:d5:26:e6:ad:6a:74:10:45:93:0d:34:72:38:e1:02:
82:93:f4:35:43:e4:c3:4e:d3:f6:9b:2c:9b:76:b2:92:36:f8:
10:c5:80:03:7d:3c:d4:a5:d1:79:ba:ff:7e:0b:7f:34:25:4d:
59:a8:c0:4e:da:75:b0:67:e4:5f:26:07:23:99:9b:c4:e4:0b:
eb:ba:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:25 2025 by rpki-client