Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/29279b92-4780-376d-8457-6ae22815ab4a.roa
File: 29279b92-4780-376d-8457-6ae22815ab4a.roa (raw, json)
Hash identifier: nidiUB/wveamXT5l8TUCeWOautG5lt0xwJ7X0IpiOZs=
Subject key identifier: F6:90:F3:EF:45:E1:83:05:CF:E6:F3:5F:B4:29:81:F4:40:B4:BF:88
Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Certificate serial: 010D0C9F4328584367DA6226523477F0C0520D60
Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/29279b92-4780-376d-8457-6ae22815ab4a.roa
Signing time: Sun 01 Oct 2023 13:00:25 +0000
ROA not before: Sun 01 Oct 2023 13:00:25 +0000
ROA not after: Sat 30 Dec 2023 14:00:25 +0000
asID: 26395
IP address blocks: 159.222.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:67:da:62:26:52:34:77:f0:c0:52:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Validity
Not Before: Oct 1 13:00:25 2023 GMT
Not After : Dec 30 14:00:25 2023 GMT
Subject: CN=0d645ab8-14f9-4f0a-8495-495ca94a600b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:f3:ea:07:bd:95:6a:20:ba:29:90:fe:3a:
8a:b0:53:2a:60:d2:71:3f:2d:b8:a0:8f:f0:a0:e8:
dd:39:e2:1b:ca:e1:ee:45:79:0a:38:32:d0:74:70:
15:fe:bf:14:b8:63:6c:c4:6c:bc:60:7e:06:66:0e:
05:f1:ea:cb:fa:45:52:05:0d:47:25:b0:39:e0:c7:
6f:5b:c1:20:a4:7b:01:51:21:de:1a:eb:9a:46:16:
42:d5:a6:c1:da:51:ae:fe:f8:9c:2f:9c:d1:89:28:
ca:3a:49:13:41:42:29:b1:0b:75:2e:cf:ee:ce:24:
88:86:d1:51:df:02:37:33:62:8b:bf:2f:e4:80:63:
cd:da:32:0a:cd:34:cf:e0:4d:60:50:fc:95:80:34:
18:36:53:50:91:05:fa:a5:f5:8a:b7:95:32:6e:43:
af:a9:ca:f7:a4:94:fb:7d:bb:d2:f1:7a:e3:90:1c:
e4:d9:95:64:59:27:a4:4c:80:0b:50:97:d6:5e:9f:
ff:5b:e4:78:f3:44:78:be:bf:61:eb:ea:07:07:4f:
e8:ce:84:37:3a:7c:b3:45:70:ed:d0:25:8b:c3:bd:
39:47:ae:3c:2c:68:ad:f5:18:19:60:f4:32:9b:cc:
fb:cf:af:5c:e9:ce:98:67:59:1c:d1:d7:5b:e0:f2:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:F3:EF:45:E1:83:05:CF:E6:F3:5F:B4:29:81:F4:40:B4:BF:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/29279b92-4780-376d-8457-6ae22815ab4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl
X509v3 Authority Key Identifier:
keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
sbgp-ipAddrBlock: critical
IPv4:
159.222.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6f:1e:25:87:81:3c:2f:8b:32:7e:9e:47:35:7b:df:3d:29:
2c:df:0a:45:c1:13:5e:fa:b0:a8:18:9c:ba:17:96:45:75:8c:
2d:ee:03:85:46:e5:ca:2f:e5:27:91:94:10:55:1c:5a:e8:e4:
b3:e0:dc:ef:16:69:fd:d3:df:c6:19:24:63:4e:94:18:42:06:
11:c4:cd:73:a5:9c:43:b3:f5:ed:03:2b:63:49:1c:1d:ef:27:
d4:21:86:cb:f7:3c:9f:18:34:db:5c:aa:21:ca:30:7d:16:f2:
1e:13:4a:3f:8b:39:5a:0f:b9:b9:90:83:87:de:4b:72:bd:12:
be:37:a0:b9:be:06:68:cf:d5:a3:9f:88:13:d7:e1:9f:67:4d:
2e:7b:21:74:3d:fb:4b:7e:f1:bf:eb:ce:45:64:0b:03:bb:3b:
2f:1b:cf:6a:5a:47:95:32:0a:44:13:d5:a8:4b:d0:af:7d:7a:
a5:e8:08:f6:b8:d1:f4:c3:79:4a:c8:85:27:77:ab:e0:8e:dc:
2b:7b:ae:bd:40:38:dd:3f:6c:ec:db:ed:c4:9d:88:ca:80:fb:
d7:80:b9:eb:b6:a8:26:82:93:42:3a:bf:14:48:36:a8:77:3e:
80:54:7f:ff:ec:70:7d:6c:a9:d1:79:49:93:34:3f:9c:2d:9f:
83:9f:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:30:58 2025 by rpki-client