Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cf663bf2-7415-39a7-ac03-763fe195d079.roa
File: cf663bf2-7415-39a7-ac03-763fe195d079.roa (raw, json)
Hash identifier: QvN+NPbxOSEVujj7tp+sDYMCcF0uc7OYMtrx1+Maw5s=
Subject key identifier: 00:10:DE:98:6D:C7:30:21:F1:8F:BB:14:96:0A:57:93:81:DA:8B:D8
Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial: 010D0C9F43285847FD2FC573DE3BE3B8CC38A280
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cf663bf2-7415-39a7-ac03-763fe195d079.roa
Signing time: Sun 24 Nov 2024 19:55:43 +0000
ROA not before: Sun 24 Nov 2024 19:55:43 +0000
ROA not after: Sat 22 Feb 2025 19:55:43 +0000
asID: 834
IP address blocks: 165.140.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:2f:c5:73:de:3b:e3:b8:cc:38:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Validity
Not Before: Nov 24 19:55:43 2024 GMT
Not After : Feb 22 19:55:43 2025 GMT
Subject: CN=82eeb284-f336-42ad-87fd-7e9641df80bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:f4:a9:d8:2e:0e:83:a5:3a:2e:17:d1:a3:
85:ee:fc:8b:08:8b:6c:af:c6:70:74:95:51:08:bd:
06:31:70:18:c2:21:5e:5d:b2:a7:79:09:b4:45:eb:
d8:8d:3e:71:9d:7e:a3:89:56:8b:de:f6:68:96:90:
cb:9e:cf:77:be:8b:65:cd:68:4a:5f:f9:e9:45:b6:
2d:68:ca:7c:0f:98:28:bd:b5:6c:ad:77:19:0a:4c:
8d:4a:6a:5b:bc:ae:de:41:cf:61:46:02:b9:fc:8e:
09:9f:ef:f6:e7:fe:c1:fb:a3:ec:20:4d:60:5a:ef:
e1:d6:04:70:ac:bb:6c:d2:96:61:a1:ed:d8:4b:8e:
be:8a:c8:4c:f7:39:b5:7d:18:55:96:d3:f5:fd:c2:
77:fb:ef:d9:67:3b:53:d5:a9:17:08:65:34:79:bf:
24:80:e7:2b:92:3e:38:75:e4:eb:8d:09:40:55:fc:
75:e0:e8:ea:37:c3:08:e6:59:d1:1c:02:46:67:a5:
1a:34:8c:73:f0:f5:ef:92:09:a2:a2:28:4e:3e:3e:
47:13:a0:01:65:36:c9:5a:0d:49:a3:cc:ba:0c:cd:
a7:66:b4:51:9b:55:6b:09:85:94:c2:92:c8:fe:b1:
d1:26:7a:62:b1:0b:52:aa:08:60:49:94:8c:c0:ce:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:DE:98:6D:C7:30:21:F1:8F:BB:14:96:0A:57:93:81:DA:8B:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cf663bf2-7415-39a7-ac03-763fe195d079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
X509v3 Authority Key Identifier:
keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:41:26:c0:58:a2:2a:4c:bb:b8:97:ec:21:e0:7c:3d:7c:d0:
54:b1:bc:be:24:49:b3:88:d8:53:96:88:bf:88:f2:67:22:0b:
62:d9:1a:76:7c:27:87:65:de:c9:6c:93:d1:b7:6d:d8:bb:c3:
03:1e:5d:92:96:49:f2:17:b5:ad:ee:76:ea:20:7b:86:8c:c3:
05:85:3a:5b:bd:1c:dd:b3:12:22:f6:be:a6:56:ef:bf:79:8d:
85:71:ee:9b:99:d3:34:6f:ea:df:24:5a:36:70:6d:ea:5c:54:
35:8e:38:c3:16:38:5f:0b:b5:50:15:37:37:47:2b:75:ba:d1:
c7:13:25:ac:db:20:00:d0:80:67:cb:f8:38:93:c2:69:be:5d:
30:3d:bb:45:90:c4:80:21:a7:c3:c9:dd:4b:1c:69:db:83:57:
c0:a7:e2:d0:ab:12:30:b9:8d:59:50:0a:a1:47:6f:61:71:64:
38:65:1b:9a:3e:fc:3f:9c:11:15:fd:dc:9e:50:95:33:83:3b:
4a:59:d8:e6:8e:5d:82:68:0d:a4:3b:c1:1b:10:1b:4f:79:db:
c3:6e:b6:2f:48:31:46:68:f1:19:8d:c6:b3:74:eb:fb:98:35:
00:f7:2b:d0:6f:ef:ed:c7:7b:cf:a1:a0:4e:e9:6e:62:fa:75:
42:3f:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:34 2025 by rpki-client