Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/25d60670-9651-37e1-8bc0-eee3e1506e0b.roa
File: 25d60670-9651-37e1-8bc0-eee3e1506e0b.roa (raw, json)
Hash identifier: /97R++l+8oq2/u6MaVshIXGx1qXBuYrRibf71D82ylc=
Subject key identifier: 16:C6:0D:8F:0C:39:A4:34:A6:D8:22:88:29:B9:7C:FC:A8:B7:C9:E4
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F4328584692DA1E42DA7FDF685D9DB700
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/25d60670-9651-37e1-8bc0-eee3e1506e0b.roa
Signing time: Thu 18 Jul 2024 01:00:24 +0000
ROA not before: Thu 18 Jul 2024 01:00:24 +0000
ROA not after: Wed 16 Oct 2024 01:00:24 +0000
asID: 13213
IP address blocks: 206.130.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:92:da:1e:42:da:7f:df:68:5d:9d:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jul 18 01:00:24 2024 GMT
Not After : Oct 16 01:00:24 2024 GMT
Subject: CN=9864c81a-7572-41d5-ab05-f5b9f584f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:f3:64:1f:68:53:83:08:23:af:2b:cb:19:
c0:21:c1:38:47:b7:7d:90:64:7c:f3:ee:45:4f:b9:
f4:a8:3f:34:96:89:24:45:3a:b5:91:de:1b:77:a2:
60:f3:ff:26:88:8f:f7:75:07:7d:09:1e:ac:a4:6f:
ad:3c:79:c6:a8:a6:36:ae:cc:84:a3:97:a3:7c:91:
62:7a:66:28:cb:46:a0:fe:fb:dc:43:8e:71:72:a8:
35:f2:e2:49:2d:c0:f9:78:b9:9a:9c:99:cc:88:94:
19:51:e4:59:9b:ad:aa:5f:fd:bb:59:54:88:25:47:
ad:8b:c8:3d:4d:28:9b:67:68:5b:f1:a5:ff:28:50:
2b:6a:11:11:44:03:17:e6:75:52:9b:fd:6a:75:10:
d0:49:d6:5c:be:a2:9b:eb:c7:76:c4:4a:f4:e5:69:
1b:d1:2e:f9:a9:65:90:3e:1b:87:5a:06:5d:2a:76:
dd:82:71:ea:29:7b:37:dd:c7:bd:5b:64:ee:b5:da:
3e:02:9b:23:c5:a7:47:d5:48:ae:8b:6f:17:1a:e5:
91:b9:70:bf:53:26:f5:59:b6:71:88:9b:eb:8b:f6:
48:ef:8f:ad:5b:8d:6a:20:45:fc:c6:8b:74:7e:1d:
c3:e2:5b:80:ca:42:dc:87:62:e0:3f:7b:05:79:e1:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:0D:8F:0C:39:A4:34:A6:D8:22:88:29:B9:7C:FC:A8:B7:C9:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/25d60670-9651-37e1-8bc0-eee3e1506e0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:09:c0:f6:a8:34:51:ff:a8:49:c8:18:5b:33:c2:89:8c:37:
48:02:78:5a:9b:08:58:a2:0e:53:d9:21:22:04:23:ab:8c:41:
2b:55:54:80:22:a4:49:66:21:3e:63:ea:29:44:0c:85:ea:10:
6a:13:c3:3b:4a:55:24:50:2f:ab:ee:37:fc:ad:37:f4:69:75:
dd:5c:7f:cb:0b:be:f1:7d:2d:a2:49:5d:46:cc:86:71:61:bf:
3a:ad:1f:af:30:8a:42:90:32:39:9e:3d:6d:55:96:04:36:78:
20:50:01:92:4e:2c:3e:b1:4b:f0:95:ab:a3:ea:e1:a7:5a:1a:
40:eb:61:02:e1:0a:f3:2c:0e:df:24:90:87:82:17:0b:e4:de:
ab:82:68:09:61:10:c6:60:3c:34:bd:99:90:24:38:c1:f9:17:
a2:02:4d:b2:10:0b:94:fd:1c:06:c0:d4:64:57:14:bf:5b:cd:
af:6a:3e:10:32:c8:a6:cf:bb:3e:1d:9e:3f:5f:48:29:e9:34:
2e:77:7a:a5:56:a1:1c:e9:af:f6:3b:a1:22:48:74:9a:fc:0f:
cf:11:7a:67:01:ec:cd:05:2e:02:28:95:9d:1d:d9:9e:ef:0a:
e9:60:7d:88:90:c1:a6:eb:f0:33:a4:53:fb:45:d3:0c:5f:b9:
98:db:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:58 2025 by rpki-client