Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/62336774-6fda-3a90-998b-be769947ef3d.roa
File: 62336774-6fda-3a90-998b-be769947ef3d.roa (raw, json)
Hash identifier: 632M8cpANPn8SUjpB2MSh/5Vxo5ljfO8BPrAhkQIsz4=
Subject key identifier: 6F:96:AC:B5:42:B3:C9:4C:D6:0E:ED:F0:80:63:A8:BD:40:91:10:C1
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F4328584445E9787FC8EE4A0AAB4BD420
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/62336774-6fda-3a90-998b-be769947ef3d.roa
Signing time: Wed 20 Dec 2023 02:00:15 +0000
ROA not before: Wed 20 Dec 2023 02:00:15 +0000
ROA not after: Tue 19 Mar 2024 01:00:15 +0000
asID: 400304
IP address blocks: 204.9.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:45:e9:78:7f:c8:ee:4a:0a:ab:4b:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Dec 20 02:00:15 2023 GMT
Not After : Mar 19 01:00:15 2024 GMT
Subject: CN=60f5f156-f34e-4e65-8c23-50d2197f8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:03:f9:04:c8:d8:0d:45:62:0e:ab:3f:91:
3f:a3:3e:2b:c2:67:67:ce:e1:f0:85:3e:06:00:e4:
d4:55:a8:28:f5:3c:31:2d:07:84:97:18:e9:1b:ed:
f1:23:e4:21:c5:b6:ea:0a:0c:2c:e8:86:8a:39:16:
96:4f:b5:a4:d7:23:4d:fa:a8:bc:2a:36:4c:e9:7b:
72:40:b1:e8:ad:f0:a4:81:ba:af:77:eb:4f:91:71:
c0:7d:f1:81:dc:67:9f:81:1c:57:65:0e:51:c5:9a:
6e:9c:ca:a6:82:8f:3e:45:bb:67:12:2c:ba:1c:30:
f2:74:be:d5:bc:61:aa:b4:43:ec:88:40:d3:17:7a:
77:34:36:ed:c9:04:d2:9b:f9:c2:97:47:5f:5c:8c:
e2:9e:d4:fe:04:45:d4:b2:9c:ac:76:4b:ae:0d:1f:
57:2a:3c:53:97:bb:a0:44:3a:9c:fd:cb:d9:aa:80:
f7:3c:cc:e8:08:b9:2e:3a:78:ab:58:fb:94:47:da:
28:81:16:56:6d:78:0f:35:b5:2e:4a:7d:fa:b0:81:
3d:de:81:74:48:bd:57:00:8c:34:bb:0e:b2:46:48:
d0:e9:90:3b:24:a9:23:b0:7f:6c:0d:5f:c3:71:ea:
89:ed:00:73:fb:6c:e6:12:03:8f:cb:40:bf:78:41:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:96:AC:B5:42:B3:C9:4C:D6:0E:ED:F0:80:63:A8:BD:40:91:10:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/62336774-6fda-3a90-998b-be769947ef3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:25:07:5a:7a:57:a6:3f:8f:88:7b:4f:df:3f:ba:a9:26:ea:
e3:53:51:4d:57:3d:0e:fa:4e:0f:72:a7:cd:ec:d0:f9:fc:56:
d5:fe:d0:3c:a3:cc:c6:18:d3:d1:63:e9:00:68:77:05:d3:db:
92:e1:b4:8f:58:28:bd:75:99:c6:17:a4:78:13:7b:7e:a4:e8:
b2:65:42:ab:c6:37:0e:fc:84:bb:d8:ab:a3:71:28:f1:50:0d:
a9:10:44:4f:0a:2e:ba:d0:97:24:82:63:b0:68:2e:8e:1e:34:
fc:4b:14:51:32:d9:55:f7:27:90:32:f4:3e:ec:fc:3d:df:55:
60:b4:ec:56:8d:e2:a0:2b:3b:3d:f9:92:30:1f:35:32:3b:ae:
ea:e7:dc:6c:30:5c:79:f3:6a:9c:3a:98:5f:73:6e:fb:a9:b0:
b0:9e:35:73:96:e8:33:fc:da:7c:a1:23:dc:ad:2d:69:09:b2:
d6:cc:14:95:5c:e9:71:4d:02:f3:49:d2:27:84:9d:63:d3:33:
eb:e5:da:75:d6:28:8a:e0:f3:1c:ff:9b:e2:3c:0d:4d:ca:3c:
c4:4d:d5:7f:fb:5e:51:e6:ed:e0:0b:46:4a:15:2e:98:33:bc:
90:51:f3:70:8a:a7:0b:01:9a:ca:e4:96:d1:5b:e9:f5:ae:1a:
b1:e3:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:41 2025 by rpki-client