Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b347a72b-a3b5-30bc-a0cf-3357726887ff.roa
File: b347a72b-a3b5-30bc-a0cf-3357726887ff.roa (raw, json)
Hash identifier: haOOMWiuu21/PsHHHkD0wBd15AueRMc94lSpeCi9vWw=
Subject key identifier: 44:24:3F:94:C5:0B:33:C6:7D:79:8C:8D:46:ED:9B:7B:49:BE:69:12
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846C51A70475001A99EBC764040
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b347a72b-a3b5-30bc-a0cf-3357726887ff.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 20060
IP address blocks: 170.30.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:70:47:50:01:a9:9e:bc:76:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=c6fde6e4-a900-46da-aad0-545619e26d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:f4:a7:dc:d5:00:86:d0:52:ff:5c:b5:cf:
1f:d1:1a:4a:61:79:ba:0a:49:ae:73:21:bd:3f:f6:
08:83:b7:72:4c:73:a9:8b:27:41:ea:65:fb:2a:cd:
bd:c2:37:25:b9:99:5c:26:71:31:f5:4d:9a:aa:6b:
ec:ca:f4:2f:af:b0:f1:5f:2c:03:58:44:41:06:54:
83:39:1b:a3:ac:68:03:ef:01:7e:3b:e7:cc:e8:08:
33:9e:a0:43:77:19:f9:11:78:1f:bd:8f:ec:a6:f5:
14:58:3c:c7:72:d3:7e:dc:27:ca:02:ba:2b:e6:f9:
56:0f:9c:ba:02:e9:29:47:21:3d:76:ea:c4:07:71:
a3:c0:02:61:0a:41:94:b1:84:7d:4d:ba:1c:5c:e3:
5b:a6:a6:7a:b5:9e:33:ce:34:9d:b7:14:7f:d9:d3:
1c:30:f9:48:a6:1e:d3:e9:9d:6b:72:9d:93:bb:3b:
b8:99:22:c5:73:94:0d:ad:fc:d2:f9:94:a3:19:3b:
98:49:36:96:8e:bb:9d:7c:22:fd:4f:d9:35:57:4e:
80:94:bd:8c:46:d8:4a:fc:63:1c:81:ed:b9:99:e2:
87:e7:51:96:21:e1:ef:55:84:80:ac:46:02:82:8a:
9e:5c:14:b4:bb:89:7b:2b:02:0c:09:4f:83:f3:8f:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:24:3F:94:C5:0B:33:C6:7D:79:8C:8D:46:ED:9B:7B:49:BE:69:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b347a72b-a3b5-30bc-a0cf-3357726887ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:96:32:8f:60:de:b4:9f:bc:66:0a:63:1a:f6:5f:c9:f2:c4:
a6:73:72:43:95:ed:66:b1:a1:36:13:5c:30:81:f0:87:1d:de:
fb:62:f3:d2:7a:da:47:87:47:f9:bd:74:2d:0e:cc:2d:ef:80:
4a:b8:7d:fe:f4:73:2d:17:57:53:78:95:f3:75:e4:4c:d7:75:
fe:37:6f:1d:92:6b:3f:af:a4:b3:f4:f5:27:03:63:29:da:5d:
71:38:95:f2:1b:45:c1:f2:0c:f7:2b:3b:b8:17:2c:16:1c:3b:
64:9f:3d:32:3a:ee:60:f4:28:f6:40:a0:83:56:d8:c2:a4:07:
d0:f4:b3:2a:9f:47:20:9d:6d:c7:65:17:1c:4d:08:30:0d:9f:
17:0e:04:4c:bf:bc:32:50:6a:69:d4:32:fb:11:a7:9a:bd:cd:
f5:ad:92:09:c7:7b:35:2d:4f:b0:c0:35:f1:ff:2c:5a:6d:02:
23:05:77:4a:94:42:f2:6c:f0:04:1f:ca:57:47:b5:04:52:84:
98:69:88:4d:9d:ec:b3:17:0b:19:ce:42:49:46:0c:db:fa:d1:
96:4c:bf:ae:fa:af:26:70:78:77:bd:54:0e:d1:6b:3d:0f:f0:
13:ea:af:23:bd:3b:79:09:dc:6e:82:31:45:22:c2:57:06:cb:
d3:be:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:30 2025 by rpki-client