Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29d761af-de4f-3fc0-b49f-e56c8c8dd50d.roa
File: 29d761af-de4f-3fc0-b49f-e56c8c8dd50d.roa (raw, json)
Hash identifier: bnCMOUEhggmJ6tMFrvWdOadj+K2BfQY/g66un2YXi0U=
Subject key identifier: 7F:4E:D3:0D:3A:FD:EF:C8:8D:21:4F:0B:9E:85:1F:D7:78:DB:AE:71
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B5A37E312A961B385684F80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29d761af-de4f-3fc0-b49f-e56c8c8dd50d.roa
Signing time: Thu 05 Dec 2024 15:15:29 +0000
ROA not before: Thu 05 Dec 2024 15:15:29 +0000
ROA not after: Wed 05 Mar 2025 15:15:29 +0000
asID: 376
IP address blocks: 132.213.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:5a:37:e3:12:a9:61:b3:85:68:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:15:29 2024 GMT
Not After : Mar 5 15:15:29 2025 GMT
Subject: CN=122fe9e4-52b2-4926-bed4-8ed053c603a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:68:2a:7f:d9:24:01:c1:58:0a:74:42:80:
0c:5e:be:73:0e:07:5e:51:3b:bf:09:04:63:bb:26:
f4:7d:1e:4f:23:4f:ac:c3:bb:0a:59:b2:ab:30:a1:
e0:0d:21:2e:cb:45:76:24:26:b0:f5:93:37:90:9a:
3f:39:d7:7a:07:5f:1a:5a:61:16:8e:8e:d3:c7:65:
64:09:9e:9e:fb:a7:98:60:34:c4:9e:36:72:bd:42:
14:c4:1a:a9:4d:b7:34:fe:7c:2e:c9:50:53:2d:4a:
7d:2f:0b:cf:2b:55:13:54:d7:a6:df:e5:60:72:90:
da:e1:a2:23:e1:ba:4f:55:36:46:1f:88:fc:bc:c4:
f3:2c:32:1c:e9:6c:dd:91:bb:e1:a2:22:81:e1:94:
0c:ae:f6:25:7b:45:b8:ec:14:60:5d:21:a8:12:88:
4e:6b:f4:6f:26:3f:1a:b2:08:9f:93:4b:33:61:f1:
35:bc:29:04:67:2c:4c:aa:7a:39:a9:b6:ad:41:52:
70:ee:0f:b9:79:17:f5:86:3c:4c:67:b6:07:07:f8:
d9:1a:59:9c:0a:aa:b8:8f:5e:17:16:94:48:1d:79:
49:70:fc:22:29:45:21:70:30:77:a6:aa:11:ed:8b:
7e:1e:55:35:cc:a7:08:12:95:ef:3a:67:50:66:d9:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:D3:0D:3A:FD:EF:C8:8D:21:4F:0B:9E:85:1F:D7:78:DB:AE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29d761af-de4f-3fc0-b49f-e56c8c8dd50d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:e8:b8:33:15:07:fa:f9:16:ff:ef:69:c2:c8:df:6e:54:92:
52:c0:aa:bb:75:f8:35:fb:fb:93:51:57:9e:8a:45:55:17:f7:
19:15:c9:6a:8a:db:1d:58:aa:b0:9e:ed:c8:69:43:04:60:41:
03:e1:2c:0e:29:90:72:9b:65:66:0b:ce:f2:01:5e:0c:31:40:
bd:f5:72:8b:f8:fa:ba:31:d0:d5:75:b8:c5:93:8d:27:a2:2f:
dc:96:f0:20:f3:14:8d:63:e0:32:42:61:56:90:47:d2:49:d7:
30:ba:fe:fa:ec:01:b9:49:ee:02:d9:fa:bb:cd:06:ff:20:f4:
28:e9:f0:3b:75:f7:ae:13:55:7c:05:c6:d1:2c:a7:bb:61:10:
b6:f0:d0:7b:20:d1:24:3c:bb:a8:1b:2d:e8:7e:a7:aa:2c:48:
8e:3c:e9:f1:f4:4a:7a:d6:df:c2:24:0b:5c:9b:fd:ae:31:a9:
82:e1:e3:b4:63:92:98:1d:76:a2:bd:f7:b4:27:c2:a0:2f:95:
48:e9:61:4e:07:4d:91:ac:53:ea:b4:65:37:61:00:68:f0:db:
4c:bb:e4:63:28:ee:31:00:17:a7:d3:92:86:f5:6b:50:a8:10:
7c:d4:f1:35:e0:5d:78:b0:74:4b:d6:ba:59:33:aa:b1:b2:1c:
98:2f:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:28 2025 by rpki-client