Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/68708e0c-947a-32c9-a64d-85a6cb4341e1.roa
File: 68708e0c-947a-32c9-a64d-85a6cb4341e1.roa (raw, json)
Hash identifier: P4pC5VDjIe0QskeTqn8cgmyJdm2nVrubR+yf7Fy2pv4=
Subject key identifier: 98:7A:89:FC:A7:12:09:EC:4C:F5:29:3E:9F:47:9E:C4:9D:86:77:65
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F4328584510FE1ACAF4D248A116816340
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/68708e0c-947a-32c9-a64d-85a6cb4341e1.roa
Signing time: Fri 01 Mar 2024 19:51:00 +0000
ROA not before: Fri 01 Mar 2024 19:51:00 +0000
ROA not after: Thu 30 May 2024 18:51:00 +0000
asID: 40545
IP address blocks: 199.190.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:10:fe:1a:ca:f4:d2:48:a1:16:81:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: Mar 1 19:51:00 2024 GMT
Not After : May 30 18:51:00 2024 GMT
Subject: CN=53b1b456-cf1c-443c-b4d9-e9db75ea342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:43:a4:70:0f:ca:77:2c:29:87:95:a0:ae:
4a:2d:3d:3c:32:3c:c5:c4:f9:44:cb:bc:3c:b6:ae:
21:3c:98:ec:1c:6c:5c:ae:b1:4d:2d:fd:b2:37:ad:
22:ac:ff:72:9d:6f:02:c0:91:cb:c1:69:8e:c1:12:
a3:d1:b6:c3:93:06:e6:58:66:29:f8:33:e4:c5:0d:
6c:ee:ce:0c:a4:53:c7:b8:9c:fe:77:7b:b4:01:7a:
e3:d3:34:b5:48:b2:2e:00:15:c9:72:8e:d9:68:7e:
e1:02:27:2e:27:f5:cb:fa:57:99:f8:eb:f5:fe:c7:
60:9e:0f:19:30:f6:a0:ef:c4:88:69:22:04:56:ce:
4f:c1:a5:e3:97:e0:82:ce:95:45:cb:a3:e6:b9:cb:
eb:eb:50:f8:44:74:56:8b:91:18:83:10:c1:d5:7b:
98:bd:59:c9:0e:ad:6e:d7:4d:88:98:d1:cf:7a:e7:
28:9d:06:42:17:4e:7a:e6:1d:20:15:d5:5d:e5:f6:
31:ba:ac:f6:0e:b0:50:d0:05:be:65:24:82:4c:94:
7d:d5:f0:20:f9:4e:9b:ea:89:05:ad:46:2e:37:a9:
d2:6e:c3:23:f4:3e:f8:20:87:7f:a9:2c:64:6d:59:
88:f3:43:d6:3b:d0:0f:4b:08:82:59:c5:92:91:ef:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:89:FC:A7:12:09:EC:4C:F5:29:3E:9F:47:9E:C4:9D:86:77:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/68708e0c-947a-32c9-a64d-85a6cb4341e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.190.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:32:6c:26:8c:16:3c:a9:44:19:1c:19:0d:96:f8:c8:65:29:
23:0f:2b:26:50:db:da:84:e5:17:25:18:19:27:6b:77:0e:56:
fb:85:7e:07:9f:9f:4a:30:fe:40:02:3e:55:14:7d:81:2c:6f:
97:38:48:38:21:7b:19:14:ac:62:64:f1:31:cc:42:70:16:e7:
7a:54:f5:db:0f:1a:d6:a5:df:7c:51:95:df:e7:5d:2f:33:e0:
3b:cf:ff:52:c7:96:d1:11:b5:e3:8d:98:af:d7:53:e5:3b:85:
24:e3:66:36:95:30:df:ff:31:c0:10:d2:bc:23:da:f0:87:69:
6f:1f:c0:df:80:a9:d8:29:a1:49:f6:48:a0:9f:7d:8e:1f:8c:
01:00:16:61:62:33:72:77:6d:d9:00:e2:74:9e:5c:dd:03:da:
61:80:f7:a9:7c:29:da:f9:a0:bc:50:d2:ee:2a:e6:47:08:1f:
33:c6:c4:19:62:ec:4a:76:dc:f9:ad:0f:79:da:84:c9:f3:93:
82:0e:ff:ba:dd:34:98:81:2e:d6:ae:fd:79:69:3e:e8:c3:55:
23:3c:6a:c4:e2:01:27:7f:50:c1:7e:c3:c1:62:26:42:9e:e9:
db:bc:6e:77:d6:80:39:5b:c6:96:42:c9:f3:82:66:87:5d:28:
2f:a7:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:26 2025 by rpki-client