Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b76d0157-6d97-3b94-b790-cc8a5f452a3e.roa
File: b76d0157-6d97-3b94-b790-cc8a5f452a3e.roa (raw, json)
Hash identifier: fshMmgslwj9ozTcBaNaigLrOcK9uf8hD2QpuUPZvlH0=
Subject key identifier: 0D:07:42:9A:CA:94:DE:D6:CA:0D:F6:03:87:44:CD:4D:10:CD:41:AE
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6313F37AE3379E8DE4BEF0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b76d0157-6d97-3b94-b790-cc8a5f452a3e.roa
Signing time: Thu 05 Dec 2024 15:33:21 +0000
ROA not before: Thu 05 Dec 2024 15:33:21 +0000
ROA not after: Wed 05 Mar 2025 15:33:21 +0000
asID: 376
IP address blocks: 132.213.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:63:13:f3:7a:e3:37:9e:8d:e4:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:33:21 2024 GMT
Not After : Mar 5 15:33:21 2025 GMT
Subject: CN=cdb19329-2dde-4b41-bcc5-60249ad7c01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:9f:01:8b:7a:8b:a3:40:ba:c4:43:be:3b:
bd:aa:0d:68:85:ff:b6:d7:f7:60:8a:c5:84:92:0c:
a4:c9:14:38:26:56:c3:6e:b2:93:98:4e:ba:94:38:
ee:83:52:7f:b2:e9:d7:ce:b5:d5:01:d8:11:fd:37:
18:0c:48:15:19:9f:c1:35:df:3c:b1:6e:5b:1d:25:
0e:8f:d6:8d:60:fb:a7:35:23:aa:06:e3:c3:e5:45:
6e:bd:c4:0f:16:39:a5:49:25:71:e9:bd:59:2b:98:
03:ff:5d:44:50:d4:dc:83:0b:39:10:01:12:09:b0:
e8:70:d5:c2:5b:c1:f0:6d:6a:56:d6:5b:98:3d:db:
ec:fc:af:09:41:66:de:c6:75:c2:5f:21:c4:11:9d:
ca:0b:58:66:ee:28:87:ff:2a:8a:50:21:6a:c9:d7:
99:7f:d7:2e:fd:2c:20:86:58:2f:b0:f2:73:85:a7:
90:f1:8b:ad:56:79:37:9c:e0:5e:a3:68:11:3b:6e:
d9:91:92:0b:ce:87:fa:dd:75:ce:4b:6b:ff:99:56:
34:2c:22:99:a7:84:01:29:e8:5a:71:c4:25:3a:4e:
b9:35:72:34:8c:ba:1f:2e:b8:56:46:21:91:67:58:
31:59:a7:54:6e:08:23:cc:e7:d7:a3:7c:07:f6:10:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:42:9A:CA:94:DE:D6:CA:0D:F6:03:87:44:CD:4D:10:CD:41:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b76d0157-6d97-3b94-b790-cc8a5f452a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:6a:62:2e:11:f0:63:c4:0e:2a:8d:c7:53:a6:b6:2f:43:55:
5a:d2:84:d2:17:ce:d0:35:4a:9d:df:64:e9:80:fb:7e:0e:46:
f2:9e:44:1d:8e:84:fb:30:30:86:93:d2:e1:26:f2:b9:6f:02:
ca:3e:7b:94:dc:26:ed:a6:3d:ff:6d:60:60:4a:ff:68:40:94:
2e:72:6a:e2:8c:1b:c9:9f:57:0c:67:54:8f:cd:bf:b1:5f:a0:
c4:4d:d2:88:dd:9a:cb:fa:08:3d:65:66:a2:25:7d:3b:84:78:
88:b6:9e:2d:b3:25:bd:a4:2e:9c:be:5e:00:9f:22:cd:28:21:
6c:7c:97:38:a1:40:d4:8b:b4:8b:a6:51:a1:3f:0f:e7:c6:9e:
55:7e:3b:36:00:79:6b:53:be:ec:75:f4:9d:20:03:2f:51:6a:
b6:95:fb:f0:e8:6c:ca:21:58:cf:11:e3:64:6c:70:88:9e:a4:
59:cf:21:d6:b7:85:4a:d7:9e:8d:e4:01:a6:8d:48:e6:17:44:
69:64:da:6f:64:e2:7d:6e:5c:d6:ad:eb:06:38:9e:59:51:87:
f3:06:22:0d:9c:ba:e3:56:09:45:9c:a0:2f:99:12:16:d9:c5:
3e:49:a2:cc:8c:58:4d:7a:08:1a:06:3d:27:fc:c6:b3:66:3b:
24:d9:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:32 2025 by rpki-client