Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa
File: d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa (raw, json)
Hash identifier: 54SxggjQXNbWdyBqaCYjFDzlzqzDDE5Z0CRjVI06cpM=
Subject key identifier: EB:33:E2:38:82:7F:57:21:8F:AF:2F:4B:D1:D9:0A:50:1A:F9:D6:3F
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F432858483B4FF80AF1542E1FCA53FF40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 14315
IP address blocks: 200.229.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:f8:0a:f1:54:2e:1f:ca:53:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=7509f2d5-4943-4b53-82f2-576dfc876ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:24:38:b6:46:0b:4e:4d:12:e1:c7:18:2c:
15:c6:6f:ef:da:f2:51:d6:fa:29:82:58:96:a2:34:
1f:e3:d6:37:13:53:7f:4c:3b:51:13:a4:7a:b7:e9:
02:22:48:f2:a1:60:2a:a7:33:02:3b:c2:b8:21:91:
11:15:17:86:81:f2:50:2e:65:81:e4:d0:bc:29:91:
c6:10:49:d5:d7:27:94:8b:ae:56:6c:ab:03:74:54:
de:1f:18:a4:ca:61:7c:35:d6:f2:53:28:ef:0c:b4:
b3:28:82:0e:ce:bf:d5:79:7f:82:c1:10:29:ff:8e:
eb:db:a3:01:c0:17:ea:f0:91:28:b2:ad:7a:af:21:
a5:76:79:b0:ba:99:67:11:4f:5c:a3:41:d0:cc:9a:
df:69:86:ff:9d:94:1e:11:8d:bf:a9:5b:75:d0:69:
19:26:0e:49:0c:7f:b4:9f:9e:bc:3a:c4:6c:d3:15:
4c:19:11:52:26:ab:ce:1e:42:82:18:51:cf:94:a6:
f1:17:e0:99:4f:07:36:d0:3d:bd:0b:a4:fa:60:b8:
f4:92:d6:e5:9d:57:2e:0d:74:f4:a2:7e:d4:30:1c:
ec:15:2c:b3:35:84:ac:c1:c8:1f:61:57:f7:d1:97:
55:b8:8d:c2:f2:9d:01:e4:2f:7d:f6:9f:06:a7:a0:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:E2:38:82:7F:57:21:8F:AF:2F:4B:D1:D9:0A:50:1A:F9:D6:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:20:7b:fa:b0:de:fd:48:a2:52:f3:56:dc:d3:1b:63:91:ab:
60:a6:aa:5e:fd:65:1c:9d:d6:28:b1:26:b6:12:8b:6f:79:05:
57:0f:29:c1:df:a9:81:b6:e9:8a:93:8a:d2:ca:ec:e4:8e:7b:
4d:7b:a4:68:69:92:95:05:3a:92:f0:bc:18:dc:5c:c2:a5:c1:
24:03:ba:e0:3a:09:a0:6a:b6:12:75:48:26:43:b5:fd:a9:2a:
ef:79:08:3c:35:4a:ee:d3:0a:3e:bb:f3:06:74:90:ab:47:db:
59:8e:cf:20:0e:45:b4:5f:53:e1:f6:89:f4:0f:a3:62:b2:3e:
b3:92:85:56:cf:41:e6:01:cb:2e:53:23:da:7d:c1:3d:98:fd:
b0:a4:9a:60:5b:37:16:6b:c9:54:a2:41:c9:a9:4c:92:64:91:
91:3d:a6:c5:61:15:a5:ee:36:fd:01:8e:e8:74:7e:6d:06:93:
31:c6:f1:6c:35:a9:17:5a:d1:1a:0a:bd:32:53:bb:d9:65:7b:
00:1a:9c:40:6c:c3:56:83:9c:87:24:1c:8b:22:44:bd:18:d2:
2a:f7:a4:14:c7:11:dc:e0:4e:9f:01:ad:8f:40:dd:b4:74:65:
91:21:6c:e4:a8:49:47:d5:53:0b:7b:98:aa:a1:e2:dd:e1:26:
b8:0a:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:51:31 2025 by rpki-client