Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7ef655fe-e91d-315f-b2bf-f8955d9eb54c.roa
File: 7ef655fe-e91d-315f-b2bf-f8955d9eb54c.roa (raw, json)
Hash identifier: iKuBPwdswvhfcX0vBJFLy1LYP28KI1DUMBgsrV9ZHCo=
Subject key identifier: 4A:26:0F:4B:29:45:4F:30:FF:56:2D:DA:C0:4C:BD:FA:70:CF:EA:D6
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285846CC154BFA1C17B63F95A3E600
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7ef655fe-e91d-315f-b2bf-f8955d9eb54c.roa
Signing time: Wed 07 Aug 2024 13:00:39 +0000
ROA not before: Wed 07 Aug 2024 13:00:39 +0000
ROA not after: Tue 05 Nov 2024 14:00:39 +0000
asID: 16509
IP address blocks: 52.129.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:cc:15:4b:fa:1c:17:b6:3f:95:a3:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Aug 7 13:00:39 2024 GMT
Not After : Nov 5 14:00:39 2024 GMT
Subject: CN=c77f2fb8-ca12-4c50-be02-5fb0994b3727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:96:bd:60:3e:42:b7:50:e3:d4:b7:8d:81:
dc:b7:82:14:a5:79:78:3d:15:34:be:6f:17:67:d0:
90:d8:30:e3:89:2e:a3:f1:d3:92:ac:a7:57:e1:46:
42:0c:fe:82:5e:7f:f1:10:a7:f2:a5:bd:ad:50:e5:
8c:ef:56:2e:09:5b:94:84:38:9f:97:99:1b:5f:ae:
95:66:44:13:6c:e9:31:69:87:90:56:d8:96:b9:55:
c2:b8:7e:8d:f7:52:e9:5f:81:f0:42:50:9e:29:d4:
a4:62:03:bc:a4:aa:4e:77:84:18:36:c3:b4:5d:0d:
23:3a:64:13:b2:a7:3a:63:f2:49:03:b6:88:4b:00:
be:7a:04:5d:71:92:a6:14:44:c9:ee:93:23:14:12:
bd:df:47:ee:01:41:f5:ab:a1:d7:e1:10:54:8a:78:
14:16:40:82:1b:6d:31:86:22:f1:f8:3f:2a:e0:51:
26:6b:9b:9a:87:8e:38:79:75:20:9f:b3:81:6d:33:
ad:82:36:f1:dc:92:3d:28:b1:e4:83:dc:2e:8f:43:
95:2d:35:bf:be:f7:d9:1c:59:fc:6f:47:b8:34:eb:
7a:28:65:ad:d2:ac:aa:6a:cd:7c:7d:84:ed:fe:89:
07:0e:70:e3:f8:98:36:d2:02:06:76:47:83:b0:b2:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:0F:4B:29:45:4F:30:FF:56:2D:DA:C0:4C:BD:FA:70:CF:EA:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7ef655fe-e91d-315f-b2bf-f8955d9eb54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:2a:9c:6a:9b:d0:18:90:92:f4:39:eb:b7:d8:26:92:11:1e:
64:b4:92:a3:04:20:7f:6b:41:46:ce:c9:3d:dc:9c:50:a1:dd:
66:39:fc:52:ec:50:b3:7b:f7:e7:d3:81:cd:82:af:eb:16:ad:
29:6a:ea:33:67:03:e2:0a:13:fd:f8:9e:fb:d7:05:74:fe:32:
7a:35:b9:47:34:f8:72:3e:5d:4c:f8:8a:2e:9c:2b:d0:65:24:
60:07:db:97:89:76:21:d8:5a:5c:6b:36:c0:c7:9a:89:b5:7a:
a9:aa:1f:f7:da:4e:2d:62:f4:ec:61:3e:f9:54:85:ae:8e:48:
be:13:20:1d:c1:ff:03:fb:19:fe:85:3b:6c:f2:c6:33:19:c4:
3d:81:0f:2d:2f:40:d0:cd:b6:5b:b5:d1:1e:ff:02:1c:80:38:
78:38:42:7e:a5:ea:41:61:14:8a:03:2d:59:96:52:8e:99:8b:
75:67:4f:ea:b3:57:c7:8a:95:e7:9b:58:92:f7:e4:70:46:bd:
db:f4:82:5e:67:7f:1a:59:73:81:b6:c4:0e:eb:d4:15:29:aa:
59:d2:98:b4:74:45:1b:12:97:63:54:e7:85:09:a9:f8:cb:10:
fc:fc:a1:b2:49:d8:65:43:a7:cd:af:0e:3e:93:b9:1d:60:57:
2d:18:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:54 2025 by rpki-client