Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/684888bf-e240-37a4-9ead-d452dd808759.roa
File: 684888bf-e240-37a4-9ead-d452dd808759.roa (raw, json)
Hash identifier: rrSaI35SrPCTtAosiWz9si/CDUWy4jZCi+ON8AdgsT8=
Subject key identifier: 72:39:0B:9F:DE:10:91:0E:44:87:42:C5:A3:40:F9:4F:44:16:F6:BF
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847E78F666787B595CB1F2A8700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/684888bf-e240-37a4-9ead-d452dd808759.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 834
IP address blocks: 184.174.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:66:67:87:b5:95:cb:1f:2a:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=8c4fe846-af28-4095-87eb-9b7ed92eb639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:d9:3a:df:94:76:88:de:90:48:f2:28:9c:
41:7f:df:a4:6f:d4:70:48:11:65:95:e3:81:21:f3:
37:15:d6:4a:06:ab:3b:09:73:7c:d1:d6:37:4b:3b:
13:9f:1f:e9:04:cd:56:73:b8:d2:50:56:75:0a:5a:
2f:eb:b6:1c:1e:01:f9:22:27:ec:2b:a2:14:e6:6c:
e3:56:38:23:24:f0:da:db:d4:ba:44:9a:72:aa:55:
af:43:1a:1c:ae:fe:fd:b5:dd:50:30:9b:b9:3a:85:
69:b2:ff:7b:1c:c6:55:fc:3e:3f:6d:1b:48:99:a9:
92:3d:0a:bf:8b:f8:ba:cc:c3:0d:f8:e1:08:e3:f2:
f7:16:ef:38:b0:37:a3:d1:a0:89:76:4c:46:7c:fe:
8a:c3:c3:5c:d4:4c:79:dd:11:f6:4b:61:66:9b:d2:
f9:bf:fa:7d:c6:ff:65:cc:40:68:90:67:45:b0:1e:
cc:17:7c:bf:dc:2a:d5:00:2d:7f:9e:a7:6a:78:d7:
8b:dd:b9:06:f7:6a:a7:d4:0d:7b:02:38:3f:43:4d:
d9:62:d2:70:a4:56:16:2b:66:5b:ff:72:6e:de:32:
1c:d8:1d:55:95:a7:75:fb:9f:1d:2f:77:32:f0:da:
75:6a:b1:78:03:0a:c0:0b:b2:cc:88:d1:23:13:7f:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:0B:9F:DE:10:91:0E:44:87:42:C5:A3:40:F9:4F:44:16:F6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/684888bf-e240-37a4-9ead-d452dd808759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
184.174.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9d:fa:a6:c9:d7:12:76:9b:41:80:4c:0a:18:29:db:d1:23:
a3:a6:bf:e2:09:d4:97:c9:08:84:2d:c1:37:aa:ca:39:21:d1:
38:3a:ba:74:46:6b:5a:25:05:db:19:53:d6:24:03:5a:e8:8a:
66:b8:43:50:87:46:af:a1:25:cb:2b:ac:72:07:76:8a:27:4e:
3d:96:5d:81:42:80:50:46:fd:4b:b1:c7:0d:b0:55:bf:b2:ab:
f1:19:d5:21:a6:40:26:d5:26:5e:ae:29:78:79:0d:d6:65:70:
a6:37:47:d5:6d:2c:fa:4f:27:e4:e1:59:1f:1e:ec:f5:e0:12:
cd:f6:42:e6:3b:00:63:58:1d:18:d2:e1:c4:78:71:27:01:78:
f0:5e:59:66:32:3f:2a:8d:52:52:64:93:2a:80:85:53:f7:76:
3b:08:34:f8:20:02:df:11:3c:6a:a2:46:7d:86:c6:0b:d5:ca:
77:45:ad:6a:69:8f:9a:06:17:5c:11:eb:69:30:b5:7d:bf:06:
ee:28:c0:1d:35:13:1b:d1:50:55:9b:ac:39:8d:6a:a5:51:7f:
7b:84:d3:d5:3c:f0:d1:d4:55:49:c3:be:86:92:84:8e:2d:97:
5d:51:c5:b1:90:95:11:7e:1b:2a:2d:3c:2c:65:aa:73:27:10:
a3:10:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:29 2025 by rpki-client