Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/32239576-0b27-3457-97f9-f81db5c17b03.roa
File: 32239576-0b27-3457-97f9-f81db5c17b03.roa (raw, json)
Hash identifier: qU7IjzXB9Sc8vFIqxcGSMgSE7XBFzvsGJ9knm6lhytQ=
Subject key identifier: C6:55:B1:92:F9:D4:FB:A2:8F:49:CB:89:79:E6:BD:2B:22:5C:D9:D3
Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial: 010D0C9F4328584845330FE876B6056BF41D3B00
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/32239576-0b27-3457-97f9-f81db5c17b03.roa
Signing time: Fri 20 Dec 2024 15:00:33 +0000
ROA not before: Fri 20 Dec 2024 15:00:33 +0000
ROA not after: Thu 20 Mar 2025 14:00:33 +0000
asID: 6498
IP address blocks: 199.249.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:33:0f:e8:76:b6:05:6b:f4:1d:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Validity
Not Before: Dec 20 15:00:33 2024 GMT
Not After : Mar 20 14:00:33 2025 GMT
Subject: CN=99f24b2e-1f99-4f70-8fff-8993ea8b68d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:65:28:d4:2d:cb:10:c6:7e:35:1c:74:cf:
28:1e:c9:f2:1d:37:d3:66:97:82:54:22:80:2f:a0:
3c:10:9c:67:2a:0c:22:6f:ba:66:83:9b:8c:05:4c:
d2:e7:18:59:8b:1a:e4:ea:4a:33:3e:41:e5:ae:b4:
43:f0:84:e9:16:15:70:57:53:44:8d:d5:d6:05:9c:
a6:8c:01:60:ba:3e:df:3d:49:5d:9b:03:f5:52:10:
f2:0b:59:8d:e4:33:a5:d9:ec:24:08:d7:9f:53:14:
4e:7b:90:a7:8c:2f:52:d3:95:bc:94:45:fc:18:96:
fc:32:6f:34:77:66:74:de:34:ae:e9:90:13:e5:56:
ba:28:22:51:5c:4d:76:06:8b:68:13:1c:24:ab:55:
16:c3:5a:1d:e9:9a:fb:7e:d1:f5:ec:f1:d1:e2:73:
b5:aa:22:a5:1a:59:5d:27:3d:ed:32:7f:6b:b4:17:
68:09:2c:fa:40:c3:6f:47:82:3f:ed:fd:50:ef:a5:
2c:09:65:99:f6:9f:98:7a:a9:ac:8d:9b:5e:b9:1f:
4a:7f:6b:69:93:f4:83:d5:14:e1:36:52:10:5a:ca:
d0:47:a3:78:64:ca:f2:76:79:ef:58:1b:e1:77:6e:
eb:da:0d:52:bb:c5:7a:3e:42:47:6b:13:a8:e9:05:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:B1:92:F9:D4:FB:A2:8F:49:CB:89:79:E6:BD:2B:22:5C:D9:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/32239576-0b27-3457-97f9-f81db5c17b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
X509v3 Authority Key Identifier:
keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:8e:f4:27:12:e9:20:d4:ef:32:cb:83:e0:7f:a7:10:e0:6f:
0b:1c:07:d8:3d:1c:d8:1c:a5:77:96:5f:eb:9b:bc:db:fc:dd:
40:9a:c8:7c:ff:7d:d6:17:2d:74:32:38:99:54:44:89:40:00:
a0:d6:ce:89:bd:3b:05:67:12:3a:c3:1e:63:8f:fe:89:6b:66:
69:5d:0a:61:6e:37:2d:cb:fc:5b:24:d1:f3:25:47:ce:a0:be:
03:46:7e:1e:45:ab:0e:c1:d1:9c:4a:69:1f:1d:a9:ea:e1:f8:
1e:ea:df:93:c9:bb:c5:37:b9:f3:f4:bd:7a:55:90:40:42:1c:
0d:f0:c4:07:d2:67:83:2f:55:c3:1b:73:2e:b4:ab:a7:66:35:
ec:b2:61:39:b6:01:a8:52:52:e5:7d:44:71:c1:b6:0b:13:c9:
16:10:27:92:83:eb:12:3a:9f:b7:d1:1b:2d:65:5f:76:25:2a:
4f:6d:85:14:eb:c8:0a:98:11:c2:5d:e9:fc:6d:4a:2d:6e:6f:
41:87:0f:1c:d7:75:12:ad:0d:c9:60:c0:2f:c5:c0:0c:f4:f0:
97:2c:10:e9:5a:54:bb:d3:be:1e:7f:4d:22:91:1a:27:4c:8e:
06:08:fc:d3:09:f3:0e:9b:19:15:0d:c6:22:c8:11:f2:8b:39:
fa:31:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:15 2025 by rpki-client