Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/10aa5158-c19b-3147-8b59-779517b87f1b.roa
File: 10aa5158-c19b-3147-8b59-779517b87f1b.roa (raw, json)
Hash identifier: byobWMmKwTR84YO7GGEHl5YZCfXi7DrdN2Atgkcxjxg=
Subject key identifier: D4:40:E5:43:68:0D:48:96:3B:03:36:79:6F:E8:4F:F5:D6:39:17:B0
Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial: 010D0C9F432858464546E0A9385EEC25E71D7E00
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/10aa5158-c19b-3147-8b59-779517b87f1b.roa
Signing time: Thu 20 Jun 2024 06:06:36 +0000
ROA not before: Thu 20 Jun 2024 06:06:36 +0000
ROA not after: Wed 18 Sep 2024 06:06:36 +0000
asID: 834
IP address blocks: 165.140.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:45:46:e0:a9:38:5e:ec:25:e7:1d:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Validity
Not Before: Jun 20 06:06:36 2024 GMT
Not After : Sep 18 06:06:36 2024 GMT
Subject: CN=198d894e-0a16-48e0-93bd-53fe2a0cec69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:17:c1:eb:2a:42:07:f3:44:f0:13:df:f3:
10:00:44:16:37:87:e8:41:72:09:58:53:9d:18:fb:
52:5d:54:44:a4:46:52:61:eb:ad:69:e8:46:14:7b:
32:c0:0b:e4:8f:06:98:78:9b:89:79:68:9d:6d:53:
25:08:30:1c:f9:58:82:9b:5a:aa:33:6e:2d:d1:3c:
d0:96:63:0e:f6:93:10:c1:1d:09:40:59:27:57:15:
18:0f:0e:18:25:d4:09:dc:f2:df:45:da:55:f5:2b:
42:84:0b:d7:cd:07:40:a8:83:9d:63:4c:50:11:c6:
9c:b5:fd:86:a1:ae:73:17:fb:26:d1:18:63:e4:68:
17:a8:cb:ea:64:2f:b2:ea:d9:a5:9c:7e:dc:94:ed:
b1:cd:0d:6c:c2:d0:15:ed:f9:00:97:2d:9a:cb:40:
6e:f6:a5:fc:97:4b:cc:5a:cb:0b:bb:68:5d:99:34:
d6:da:5a:9c:37:39:0b:28:ff:ce:c9:47:b4:81:6b:
d9:6d:cd:56:de:65:4d:de:4d:ed:a7:4c:c0:23:fb:
10:0f:fb:aa:6d:0a:0d:75:6a:4b:90:da:c5:52:48:
b9:d4:4b:bc:28:e8:f8:6c:e1:c5:9f:69:24:68:4a:
3e:ae:cc:4a:fc:a2:a6:da:c0:56:15:a2:64:ba:93:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:E5:43:68:0D:48:96:3B:03:36:79:6F:E8:4F:F5:D6:39:17:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/10aa5158-c19b-3147-8b59-779517b87f1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
X509v3 Authority Key Identifier:
keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:67:0a:9e:b2:8d:36:4d:7a:d8:d4:0e:2e:18:a3:71:1c:6e:
55:bf:67:ce:9c:53:16:9d:15:68:88:f7:5b:c4:42:00:ef:9d:
34:22:02:d1:ac:26:c6:ec:f9:12:72:d5:f3:b0:cc:44:4f:4d:
b9:61:4c:9a:15:2d:bd:9e:ed:2b:3b:b7:e4:1d:01:9f:06:53:
ad:51:9f:4f:30:f5:75:dd:d2:ca:6b:d9:3b:e8:31:9a:e0:2e:
7a:b7:f0:94:f4:d8:ab:8d:17:26:b2:1b:9a:0c:57:c8:7a:41:
d1:4f:52:94:2a:54:54:c7:b5:0c:b6:11:ad:c1:f2:d6:f6:65:
9d:a9:bd:71:08:f7:b9:51:08:79:72:a1:1a:5d:d0:c2:d2:de:
ef:ee:17:1e:f4:e9:b3:2c:8a:a6:bc:3d:b1:4e:6d:66:ad:0b:
83:a3:eb:79:82:17:80:5a:66:8a:1e:7e:42:49:12:15:e3:f3:
c1:5c:14:d8:7e:d1:b8:ce:90:e6:ed:23:50:73:f8:80:bf:5a:
1f:b5:d3:9e:88:fb:3d:3b:50:76:53:76:eb:be:ce:94:fe:e5:
fd:7b:09:45:ce:db:6f:a0:37:39:2a:fe:90:93:0c:7d:6b:e4:
64:86:fa:64:44:e5:41:f7:16:09:f4:fe:3d:e6:96:da:82:8c:
4d:07:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:07 2025 by rpki-client