Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af1d7d42-71f3-387b-b8d0-e8005f305d3d.roa
File: af1d7d42-71f3-387b-b8d0-e8005f305d3d.roa (raw, json)
Hash identifier: 6MiL8TXBOOyi2okHqnsBhSjulzWl6K2j70BxGUs6S8E=
Subject key identifier: 34:1A:52:16:4D:45:64:E8:BF:12:9C:0C:6A:81:73:05:76:03:A8:D1
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847B5314E8142FCF839AC1A5D10
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af1d7d42-71f3-387b-b8d0-e8005f305d3d.roa
Signing time: Wed 30 Oct 2024 01:00:32 +0000
ROA not before: Wed 30 Oct 2024 01:00:32 +0000
ROA not after: Tue 28 Jan 2025 02:00:32 +0000
asID: 47890
IP address blocks: 200.229.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b5:31:4e:81:42:fc:f8:39:ac:1a:5d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Oct 30 01:00:32 2024 GMT
Not After : Jan 28 02:00:32 2025 GMT
Subject: CN=63daa6de-b484-4c59-830f-43f4886d6352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:8c:b6:62:fb:04:6c:e2:b2:d8:d5:da:2d:
ea:66:23:ef:e3:cc:b4:cf:33:97:1a:03:63:78:51:
27:48:67:7e:dc:4e:32:72:fb:3c:23:d3:55:52:d0:
b6:c8:5d:6f:10:ac:e2:2f:60:a4:a0:9b:24:00:7d:
e7:dd:1c:d3:78:1d:22:84:25:f3:d2:d5:7a:55:02:
5c:cd:89:2b:4e:76:34:8e:1b:de:58:77:6e:d8:86:
c0:f8:df:b4:b6:09:e7:f5:a8:f1:37:f3:d3:dd:7d:
25:4d:40:c9:3a:8a:5a:6d:d0:c2:82:e0:5e:15:b0:
4d:a7:7b:a5:1e:38:ea:19:26:82:b1:e5:0b:9f:70:
d3:10:a7:85:cd:19:bd:a8:ef:16:f0:4d:0b:c4:b9:
ba:15:dc:65:d7:f8:94:09:6a:1f:85:ce:f9:d0:4e:
2b:88:c2:0e:78:ed:0a:2e:18:5f:cf:d1:3c:79:74:
e3:01:14:8d:4e:56:a2:18:75:07:0a:39:b4:84:1d:
fb:df:57:55:c2:9e:be:0a:16:c8:0d:32:70:8a:fe:
f8:36:1a:33:79:07:4a:30:b5:75:ee:cf:8b:dd:8f:
23:d5:24:58:ff:7f:00:91:64:05:51:52:b8:be:be:
b5:34:41:b6:79:38:a1:4a:97:f5:d7:93:b3:6b:fd:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:52:16:4D:45:64:E8:BF:12:9C:0C:6A:81:73:05:76:03:A8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af1d7d42-71f3-387b-b8d0-e8005f305d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:74:81:ec:05:10:02:a7:cd:2f:0a:7e:27:8a:69:d5:72:21:
25:bf:d6:c5:ef:b3:7e:6d:4c:db:6e:bd:ae:97:10:1a:5a:e9:
23:65:c6:6d:af:c2:6b:73:04:0f:c2:d8:c2:b9:b5:c3:d8:dd:
e3:df:6a:35:69:84:40:90:19:c5:ee:6a:19:ff:fd:37:9c:d0:
f8:20:4b:e1:aa:df:7f:eb:61:b7:63:e6:5a:53:8e:56:fd:06:
4b:c9:51:3f:50:ba:0c:bb:90:03:d6:87:26:a7:71:78:9c:95:
8d:68:89:04:77:4d:a6:55:60:c2:9d:4f:d1:8b:60:ba:0a:91:
88:fd:d2:17:68:88:67:c1:69:f7:bf:5c:d2:5c:43:28:2f:a5:
be:9e:d2:31:b2:98:27:df:73:fd:8e:f5:fe:a9:fb:64:83:78:
02:91:a4:98:24:ed:1d:69:8b:7e:cf:f3:f1:40:03:d7:42:48:
98:5d:43:f7:d5:fd:0b:aa:54:ae:90:b4:31:5b:dd:b0:41:5e:
f1:af:34:4e:9e:9a:05:0e:22:7f:65:15:c4:d2:a2:17:0b:bf:
40:c1:a4:f3:15:2b:41:2d:89:e7:ef:9a:63:b6:22:0b:e7:0e:
00:24:5f:a4:46:e9:ee:ee:be:ac:b3:3f:c7:96:b6:4d:9c:e6:
bd:a3:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:55 2025 by rpki-client