Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/14af22d5-951e-3b54-802a-0ec304199a7c.roa
File: 14af22d5-951e-3b54-802a-0ec304199a7c.roa (raw, json)
Hash identifier: YvlQ0p1s+cXQx3/L1KL9vUTdXOLyFMjf+IDA1oLQjsY=
Subject key identifier: 00:DD:99:4C:B8:81:22:BF:BC:7F:FE:FF:38:7A:08:AF:6C:DE:3A:CA
Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial: 010D0C9F4328584423E934DCC83861EF91689C00
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/14af22d5-951e-3b54-802a-0ec304199a7c.roa
Signing time: Thu 07 Dec 2023 21:42:19 +0000
ROA not before: Thu 07 Dec 2023 21:42:19 +0000
ROA not after: Wed 06 Mar 2024 21:42:19 +0000
asID: 16509
IP address blocks: 170.200.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:23:e9:34:dc:c8:38:61:ef:91:68:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Validity
Not Before: Dec 7 21:42:19 2023 GMT
Not After : Mar 6 21:42:19 2024 GMT
Subject: CN=6bb70819-d61c-45cd-ae8d-2a31c88ba8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:ad:98:ee:51:34:4a:e9:fe:b0:f4:a6:ec:
81:92:39:ed:86:54:8c:69:23:e9:3c:1c:35:5e:7c:
57:a8:74:2d:e4:e8:15:19:1a:78:a6:72:df:02:fe:
04:d7:35:3e:85:4f:82:5b:69:4f:64:b7:cb:db:f9:
c5:74:2b:7a:e3:1c:32:03:02:ab:cb:e2:52:51:90:
3d:ce:67:82:ae:0e:f4:f4:59:1a:a0:ec:3b:79:00:
90:e9:a2:00:ba:a3:19:64:79:0d:33:6a:91:a3:d4:
a2:03:c5:49:63:a4:dc:39:a0:ce:2a:de:db:76:4f:
c6:dc:98:18:16:83:b9:35:1a:ae:63:80:e8:7a:16:
67:68:4b:ed:28:88:e2:3d:77:0f:73:83:b3:df:01:
87:b9:fa:09:b7:d0:d6:04:84:13:4b:fa:88:df:95:
19:4b:c8:1b:a9:d7:5f:cc:56:79:0c:b4:a3:50:3e:
87:04:b3:56:9f:ff:c6:89:12:8c:14:1d:63:84:42:
17:78:6c:b1:2a:eb:5a:a1:38:ff:af:94:71:5d:c9:
77:2e:b6:be:18:c0:a0:00:37:2b:03:ab:c1:47:ef:
c2:03:6b:0f:7a:00:41:77:89:3d:a0:3d:03:4b:30:
0a:35:52:84:46:ba:bc:11:11:28:5b:fd:5c:6d:3d:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:99:4C:B8:81:22:BF:BC:7F:FE:FF:38:7A:08:AF:6C:DE:3A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/14af22d5-951e-3b54-802a-0ec304199a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
X509v3 Authority Key Identifier:
keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
sbgp-ipAddrBlock: critical
IPv4:
170.200.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c9:c9:fd:72:68:d5:0f:6b:e7:fc:e7:ed:eb:8d:5a:1f:43:
55:e2:5d:e4:39:a8:c4:50:3f:1e:4d:0d:39:9e:b0:c6:70:56:
8f:a8:68:ae:4e:ad:35:d9:8c:fb:2e:c2:59:00:ae:d4:85:5e:
66:75:3d:c9:16:a9:a1:91:2e:86:11:90:23:11:dc:1e:31:e7:
93:5f:4e:cf:b4:ff:1f:51:d5:f1:9f:65:09:c3:b6:3e:2b:c8:
65:58:e2:fe:44:ea:6e:e9:cb:10:24:8c:e2:35:cc:c1:e4:72:
12:86:17:6c:94:4a:36:16:18:a0:04:a9:35:43:fe:17:35:58:
c5:77:0f:18:8f:c6:13:e5:bb:e1:1d:65:48:0f:a4:72:af:f5:
cb:eb:6a:c8:6d:a8:b6:86:d1:0f:12:87:83:97:53:a8:9e:0b:
35:08:9a:77:51:96:d2:a2:88:98:89:ac:34:69:4c:86:5a:53:
23:d4:67:1a:ee:3a:16:43:a7:ec:f9:3a:4c:64:25:83:5a:1e:
80:0d:aa:4c:75:6d:9f:e4:9b:48:65:f0:29:82:02:d7:52:e0:
38:27:4a:a1:27:41:bf:00:11:f4:20:54:45:62:a9:c4:2f:3e:
06:32:4d:56:81:79:5f:99:8d:44:81:25:dd:2d:6e:13:d2:72:
94:e4:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:54 2025 by rpki-client