Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87f640b9-ce86-3a19-92d8-a256bd6b2fad.roa
File: 87f640b9-ce86-3a19-92d8-a256bd6b2fad.roa (raw, json)
Hash identifier: a/MCn97Ne2Rc0mPtPOloqwmJVH/EEGvTCtHkXAC3jKA=
Subject key identifier: 71:D1:96:FC:2E:E9:23:FE:C3:EA:4E:2A:00:3B:B5:77:3A:40:3D:E0
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285843816E756A8AA041DF93C55040
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87f640b9-ce86-3a19-92d8-a256bd6b2fad.roa
Signing time: Tue 10 Oct 2023 16:54:02 +0000
ROA not before: Tue 10 Oct 2023 16:54:02 +0000
ROA not after: Mon 08 Jan 2024 17:54:02 +0000
asID: 834
IP address blocks: 149.19.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:81:6e:75:6a:8a:a0:41:df:93:c5:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Oct 10 16:54:02 2023 GMT
Not After : Jan 8 17:54:02 2024 GMT
Subject: CN=29d125ba-3709-45c3-8514-81bf332b3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:3c:60:c4:73:5e:b6:d2:70:60:b0:95:1b:
b7:93:4f:c3:53:88:ce:06:14:8c:76:ea:28:7a:c1:
06:51:44:83:85:33:d0:58:fb:4c:07:6c:c0:03:46:
c7:b4:40:4e:ee:8a:a5:8e:4c:f5:18:a3:88:0e:8e:
27:9b:cd:2d:df:e1:13:60:f8:97:12:00:58:34:c7:
bc:e9:16:b8:4e:69:9e:35:f6:8d:0e:7f:ca:06:0c:
74:0e:59:1c:a4:ed:69:89:e3:2f:ec:06:e2:98:4e:
b1:75:01:10:4d:9a:70:a8:7e:af:21:4b:1d:b7:fb:
e0:34:62:9b:3f:61:d3:6b:db:a7:d0:ee:56:24:d9:
6f:07:b3:dd:22:d8:a2:d9:78:1b:5e:dd:67:5f:92:
99:ee:4b:69:b3:33:0a:5a:0d:c7:8b:d9:ba:eb:3b:
9a:58:05:db:ad:9a:d7:44:e1:cf:dc:50:98:a6:2d:
5e:11:bf:74:10:da:cc:64:a6:8e:49:ff:f8:24:8f:
4d:e5:10:75:dd:2f:71:df:0b:91:cf:a0:ce:a7:b1:
59:0e:a4:05:89:4d:31:1b:65:26:6b:07:70:89:a2:
65:b3:92:38:c3:87:85:04:38:4a:cf:91:ac:45:7d:
01:30:c4:ad:a4:52:68:bb:6a:05:2d:d9:8e:17:b0:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:96:FC:2E:E9:23:FE:C3:EA:4E:2A:00:3B:B5:77:3A:40:3D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87f640b9-ce86-3a19-92d8-a256bd6b2fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0d:0a:81:9a:fc:f6:6c:2c:cf:5e:7d:a3:da:59:57:4d:6a:
ca:da:8a:15:53:35:51:58:28:7c:ff:f6:6e:16:34:27:ac:2c:
5f:f9:dd:70:af:59:e0:92:8b:32:3c:b4:d9:e9:c8:9e:b2:b6:
37:6e:01:22:f2:2c:be:e1:5b:24:a1:31:6e:91:92:b4:22:6f:
b1:05:87:57:1f:57:1f:72:33:63:aa:66:93:c0:65:f6:c1:8d:
46:6b:63:98:e9:6a:42:4c:60:fe:d3:32:fb:34:c0:a8:ca:52:
a4:13:60:63:2b:fd:fc:80:a3:e0:a1:c2:24:c1:9c:8d:c5:33:
05:7a:65:fa:80:d0:1e:80:05:7f:80:dc:46:e4:84:e3:35:ed:
43:f9:07:fa:77:cb:1e:dd:4a:21:9d:25:8a:09:19:5f:f9:7b:
e3:fb:56:c4:9b:23:14:d5:de:4f:02:13:be:6b:b2:62:c6:20:
33:13:6e:d9:8f:4c:e8:6c:fa:e6:65:2b:ac:44:05:b4:b6:23:
18:37:cd:69:2f:1a:94:7c:3e:40:3b:33:6d:41:c2:7c:0f:6f:
f6:9a:95:74:55:d4:04:be:93:a9:c7:9d:87:51:f3:a8:00:d5:
0f:c1:7b:44:14:7f:18:ea:6a:94:b7:ea:18:ff:12:6d:0d:9f:
b9:41:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:40 2025 by rpki-client