Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/76e656de-0cd9-3e67-b69a-cd38b0a7133a.roa
File: 76e656de-0cd9-3e67-b69a-cd38b0a7133a.roa (raw, json)
Hash identifier: UN3lH0LKsuMzn6RWIEX6pSrUM6kxCKFCW8zkY3lsChI=
Subject key identifier: 2E:69:D4:B8:3A:0F:9D:F8:3B:36:A5:32:91:E9:A4:D7:C2:AD:50:D8
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845B557419883348F57DED28C80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/76e656de-0cd9-3e67-b69a-cd38b0a7133a.roa
Signing time: Mon 29 Apr 2024 16:43:12 +0000
ROA not before: Mon 29 Apr 2024 16:43:12 +0000
ROA not after: Sun 28 Jul 2024 16:43:12 +0000
asID: 13576
IP address blocks: 216.106.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b5:57:41:98:83:34:8f:57:de:d2:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 29 16:43:12 2024 GMT
Not After : Jul 28 16:43:12 2024 GMT
Subject: CN=dda94a45-68d1-46ae-961d-6bb5fc04aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:b6:28:ef:2f:3c:dc:17:4b:27:ea:d0:6e:
76:05:54:a6:ad:3a:5b:73:fe:7f:7a:d2:11:8b:11:
6b:6b:41:31:71:fc:09:31:73:34:a3:72:2b:6f:d3:
6c:f1:ed:75:d0:46:04:7d:63:72:80:7a:45:c8:33:
48:31:7f:cb:47:27:1c:4b:7e:78:a9:3b:f8:f7:10:
5b:a2:1c:90:39:ca:ad:e4:61:92:e6:b9:7d:4f:0e:
1d:f0:de:da:49:b2:fd:8e:da:c3:94:a2:26:91:2d:
b3:fa:e1:2e:3d:d7:e0:4a:51:7d:5e:5c:2a:0b:37:
f4:62:92:cd:e6:d2:0b:3f:3b:2f:92:c3:4e:c8:19:
73:a4:5e:e6:60:19:f8:51:67:a1:2e:94:d3:78:10:
b6:c7:6a:53:32:00:14:87:b9:91:61:6c:0f:17:b9:
60:af:e5:e4:82:21:a0:4e:2b:5b:e7:58:69:31:27:
2a:a3:da:44:60:1c:df:77:fd:c9:42:c8:26:8a:be:
14:a3:1f:89:13:11:aa:b6:8a:fb:da:50:25:01:1f:
42:f5:cc:64:0b:c6:79:17:31:4d:dd:1a:30:40:59:
78:9a:5c:c0:97:15:53:5a:01:2d:d1:55:92:02:1d:
93:7c:60:cf:da:cb:46:85:c4:85:da:78:02:be:9b:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:D4:B8:3A:0F:9D:F8:3B:36:A5:32:91:E9:A4:D7:C2:AD:50:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/76e656de-0cd9-3e67-b69a-cd38b0a7133a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:9d:05:04:5f:f1:1e:77:b7:78:90:a3:ea:72:82:c7:55:51:
12:f6:90:5a:51:f6:89:b7:63:22:ca:54:59:bd:8f:60:a7:91:
6f:5b:52:c6:d3:9e:0b:95:2c:05:c8:61:77:4e:9f:a8:56:84:
d4:a6:09:1c:1c:85:ab:99:16:d7:10:bf:ae:14:3b:be:89:54:
c6:d3:4b:bd:6b:9f:c9:80:45:4e:6f:7f:14:9d:7e:a1:88:5e:
9d:37:c2:d1:dd:4a:57:4d:db:21:5b:54:38:78:a1:40:39:8b:
97:14:79:c5:cb:a4:e4:02:bd:ad:1e:ef:56:d4:4f:dc:8e:85:
1d:a1:8b:37:11:af:51:a9:59:5a:cf:2d:2b:14:37:da:31:d1:
de:3d:9c:24:d8:02:14:fa:25:12:15:7e:84:3b:35:0b:4d:95:
83:69:b7:a9:62:9a:5d:ad:e3:f6:b6:2f:5b:f9:17:8e:74:f2:
37:c0:ee:e4:a0:f4:ce:63:d9:36:1e:9f:d8:e3:ef:eb:e1:1b:
71:6a:af:aa:22:f4:6d:f8:a6:c9:df:03:02:2e:b3:9b:50:16:
81:57:4a:23:b6:01:ff:f8:19:c8:0e:39:d0:c3:6a:bd:b0:93:
8c:b4:ef:f5:f9:3e:54:87:23:5b:d9:20:3c:d5:57:0c:e3:56:
a6:2e:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:32 2025 by rpki-client