Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/1f378a69-e151-3e04-9312-474c5656e7df.roa
File: 1f378a69-e151-3e04-9312-474c5656e7df.roa (raw, json)
Hash identifier: GtOBvy81HOvPojJ8gYs7gY+BQDplCV/umfpMpIELPK0=
Subject key identifier: 4A:BD:07:6B:BE:5D:9D:C4:5C:F4:6A:45:09:CC:CA:2A:17:04:7C:A1
Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial: 010D0C9F43285838258E26F5F1267DA736B0AE00
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/1f378a69-e151-3e04-9312-474c5656e7df.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 53587
IP address blocks: 168.235.240.0/20 maxlen: 32
45.61.192.0/18 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:25:8e:26:f5:f1:26:7d:a7:36:b0:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=fc100563-8dac-42d2-ab8b-c77f44f9ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:3d:0a:02:0a:1f:d4:85:05:07:72:41:5f:
97:1a:d4:b2:6d:ce:04:ba:15:19:c3:87:85:bb:50:
db:f7:68:da:47:0b:30:10:62:a4:f0:cb:26:63:7e:
82:42:fa:69:fe:5b:62:18:aa:6b:b6:a8:f2:88:35:
4b:aa:38:d6:2a:1e:e8:7d:61:33:dd:2e:c9:85:14:
44:71:3b:a0:b8:4a:6a:10:9c:c5:40:a7:71:66:cb:
24:bb:33:53:75:a0:ab:47:f7:20:dd:b0:3c:54:32:
24:d1:64:da:ee:b1:a2:e8:fe:d8:0a:a8:07:fe:e7:
5b:44:cb:d4:31:d7:28:e5:81:e8:6c:2a:b1:dd:24:
fd:1c:63:5b:f8:15:15:80:94:e3:90:0f:18:6d:27:
21:93:95:ef:d7:e6:96:da:71:55:ce:eb:90:26:95:
1d:fd:2b:2e:95:a8:2c:9e:2e:50:5c:0a:c8:bd:b1:
70:25:70:cf:ec:cc:82:10:95:fc:cf:99:84:0d:97:
5a:95:66:d3:2d:41:b2:79:bd:e3:ad:fd:bf:11:43:
82:41:ea:a3:9a:b6:65:94:1c:52:79:71:a1:12:bc:
a7:14:c7:85:73:f2:8e:ad:46:c6:ce:13:38:39:26:
bd:cf:56:6f:b2:9e:dd:18:9c:1d:60:a4:59:f6:57:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:07:6B:BE:5D:9D:C4:5C:F4:6A:45:09:CC:CA:2A:17:04:7C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/1f378a69-e151-3e04-9312-474c5656e7df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
X509v3 Authority Key Identifier:
keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.192.0/18
168.235.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:e9:3e:2d:d5:27:8a:0b:ef:bc:46:35:72:96:55:76:e9:9b:
0b:db:a5:92:bd:56:87:ff:0e:09:07:f5:a7:2a:d8:01:d7:7a:
4c:76:f2:80:1b:b4:03:9e:95:c9:87:29:7d:4b:81:00:9a:55:
a7:51:76:c4:bd:c9:e4:b8:ce:75:66:1f:85:15:d9:25:a4:6a:
68:59:db:b4:05:6c:f6:49:d0:7d:a6:64:28:2c:cc:40:de:cd:
71:76:01:52:be:d1:41:b7:6a:62:5e:38:74:3c:64:02:de:fc:
23:4e:27:4f:33:44:4e:75:7b:3b:40:82:a7:15:35:28:f4:4d:
95:9d:9c:1e:67:22:9e:6c:8c:20:53:e1:04:ed:91:46:8c:0d:
69:a2:ec:a4:df:29:dd:86:bb:3e:cf:ad:e0:54:29:65:28:3a:
af:41:94:6b:27:73:cd:16:70:9e:f3:84:93:69:a9:51:31:ce:
c9:42:19:3f:98:66:bf:d4:0a:a9:11:dc:b8:1f:71:3a:fb:e2:
c5:2c:f5:2c:3a:db:ce:5e:d1:61:df:b6:16:e0:14:45:8d:9b:
88:d2:7d:55:00:00:b0:58:99:d2:29:71:63:e0:4b:b7:9f:60:
4c:56:d7:a1:2a:b6:0e:e5:5f:db:a7:e5:52:ac:a1:d7:d6:1a:
d6:8c:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:22 2025 by rpki-client