Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2d502a-3587-3d89-9f4d-66f4a8b2373b.roa
File: ec2d502a-3587-3d89-9f4d-66f4a8b2373b.roa (raw, json)
Hash identifier: WW41U72cMaNai1K6wp8cllWC5mvv4DJISI+riRwBBWM=
Subject key identifier: CD:73:C4:04:F3:82:4C:7E:22:2F:F4:ED:B3:20:1F:88:B3:91:F3:08
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285844798F29AD5D52EFE8FF094280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2d502a-3587-3d89-9f4d-66f4a8b2373b.roa
Signing time: Sun 07 Jan 2024 14:00:20 +0000
ROA not before: Sun 07 Jan 2024 14:00:20 +0000
ROA not after: Sat 06 Apr 2024 13:00:20 +0000
asID: 397441
IP address blocks: 69.171.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:79:8f:29:ad:5d:52:ef:e8:ff:09:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jan 7 14:00:20 2024 GMT
Not After : Apr 6 13:00:20 2024 GMT
Subject: CN=439b0c8e-575b-4cc1-9de5-71e51605d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:d6:dc:59:d1:4c:f7:b5:ee:28:50:14:f6:
a0:1a:e0:37:81:19:c1:8e:1d:45:ff:b6:54:f2:6b:
d1:41:75:95:a8:3d:42:88:e8:d9:30:6f:f2:ce:d0:
0f:5a:78:36:be:70:27:b9:18:e7:89:cb:c0:00:1d:
cb:85:7b:18:e3:fa:e9:35:13:68:d2:dd:09:36:3c:
e6:a4:58:a2:ad:29:c1:11:c6:31:0a:77:f8:7a:b0:
d8:dc:f2:c0:e3:df:50:bb:dc:16:0d:34:b6:02:9b:
ca:38:40:5b:51:24:c5:33:fc:39:22:85:00:ee:46:
62:69:de:73:82:69:fb:f6:0a:0d:e3:ef:c5:81:5a:
4d:b5:4a:63:4c:54:6b:9b:4c:7a:7d:23:52:d1:83:
29:4e:8f:84:b2:7f:f6:2f:ac:16:1b:6b:74:a3:ef:
19:f3:b1:8b:02:87:49:9f:f7:ed:f1:21:d1:52:cf:
7b:06:bf:ea:0a:87:51:87:9c:ac:22:29:2f:25:61:
c7:ad:0e:32:6a:62:c3:e0:01:35:7c:c9:7d:b2:d2:
d5:d0:bc:16:d6:48:3d:19:28:3f:0d:9c:6c:c5:5a:
83:bc:7d:fd:c8:23:ee:a2:49:2e:59:5b:fe:80:d4:
10:51:28:d0:06:ea:48:21:2c:50:f8:a2:a0:e3:2d:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:C4:04:F3:82:4C:7E:22:2F:F4:ED:B3:20:1F:88:B3:91:F3:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2d502a-3587-3d89-9f4d-66f4a8b2373b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
69.171.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:56:26:4a:5b:78:e4:37:de:85:e5:92:a5:ce:38:68:47:35:
d7:12:df:0e:28:db:80:f9:25:21:19:db:41:92:73:7e:2f:fa:
d5:07:83:7c:01:57:ef:be:6b:9c:be:de:00:6b:76:d1:66:2d:
af:97:03:df:27:94:c9:34:0b:e7:11:a1:d8:3d:e3:e8:63:dd:
e1:03:d0:46:5e:40:14:31:30:63:5a:b2:25:eb:aa:1c:da:5d:
78:9b:18:68:78:ac:04:ca:7c:ce:05:eb:de:ed:3a:1e:ce:ae:
f6:d3:6d:a6:7e:16:2a:7d:5f:0d:76:9e:68:87:33:50:ea:36:
db:8f:dc:c0:b6:8a:68:07:a4:fd:f3:3b:02:47:f3:f4:5a:4e:
c6:fd:66:fa:e5:c9:89:00:3f:b7:08:a8:ba:bc:6e:4d:05:7b:
8f:e9:dd:db:d3:88:f4:27:62:ef:0d:ba:0a:eb:4e:4b:ae:52:
58:ed:e9:bc:1d:53:08:4d:d5:72:79:a6:0e:9c:6c:06:ca:e8:
90:ca:ad:1f:15:07:80:2a:03:c0:68:bf:df:e4:b9:7a:c3:d9:
6f:d8:e9:50:d1:14:b7:f3:20:9e:6c:5c:d7:72:5e:ac:7c:33:
d4:47:43:3f:a8:b6:22:46:83:b6:55:b3:4f:06:e8:88:b9:49:
3d:3c:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:53 2025 by rpki-client