Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/b628693d-ce78-32b1-93a9-c87edeaf33f8.roa
File: b628693d-ce78-32b1-93a9-c87edeaf33f8.roa (raw, json)
Hash identifier: Ns1hYwHvssl9wvhA9o7IppfdNLHMmWJMN5D88n+z6k4=
Subject key identifier: 47:94:DF:FA:FF:9D:C6:94:36:BB:22:6C:A4:70:46:9B:29:6E:A3:3A
Certificate issuer: /CN=43ff624d-a377-4e6b-aaf2-c18a45007d56
Certificate serial: 010D0C9F4328576D51CC73C042CFC17197B7FC34
Authority key identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/b628693d-ce78-32b1-93a9-c87edeaf33f8.roa
Signing time: Mon 20 Apr 2020 13:12:29 +0000
ROA not before: Mon 20 May 2019 04:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 8304
IP address blocks: 198.51.136.0/22 maxlen: 24
199.115.124.0/22 maxlen: 24
2604:8880::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:97:b7:fc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ff624d-a377-4e6b-aaf2-c18a45007d56
Validity
Not Before: May 20 04:00:00 2019 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=7f484fc9-184f-4855-8e95-639044a4f96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:22:31:2e:b2:e7:09:63:e7:8f:cc:0f:0e:
ee:87:c8:95:eb:d1:f1:5e:be:a2:7c:be:04:ee:ab:
d1:1c:02:15:11:34:5f:e1:bf:0c:5d:31:be:69:b1:
6c:16:96:30:ec:22:b3:0d:c4:74:43:fc:14:f5:4b:
bc:35:62:7e:ef:a8:8f:60:59:25:95:91:a0:2f:8b:
66:b1:da:1e:22:7f:5d:2a:91:98:d8:08:44:e7:9c:
e7:cf:f0:f6:57:96:0e:b9:1c:ab:8f:5c:55:2c:4f:
98:55:62:c8:ac:2c:97:1c:3e:89:9b:7b:4c:66:b0:
a7:15:57:6f:05:7c:97:c4:19:7a:2e:b4:21:98:68:
c7:d6:03:db:6c:71:ec:eb:4d:ad:ec:09:27:cf:04:
60:b6:de:ae:be:26:99:97:b4:61:95:1c:99:a0:b3:
22:f8:2a:df:1c:cd:e7:b6:e7:23:29:dd:23:c4:b3:
d2:1b:1c:ff:0b:47:0d:cf:00:ff:11:91:f0:15:2a:
aa:af:bf:55:64:c6:bd:f7:75:47:e4:ee:40:a3:a5:
b2:00:34:64:9b:cd:63:2d:80:3d:a1:44:d6:b7:7e:
e0:fc:dc:17:a4:f5:00:63:a6:e8:cb:4f:52:08:78:
88:74:0c:cf:fa:52:9a:45:7d:f0:42:8b:54:5c:aa:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:DF:FA:FF:9D:C6:94:36:BB:22:6C:A4:70:46:9B:29:6E:A3:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/b628693d-ce78-32b1-93a9-c87edeaf33f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl
X509v3 Authority Key Identifier:
keyid:CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.136.0/22
199.115.124.0/22
IPv6:
2604:8880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:51:f7:90:b8:7a:cc:ce:02:08:dd:3e:7e:92:1d:ac:03:48:
ec:42:63:9e:66:ec:05:cd:9d:82:80:d8:98:c6:20:ce:e7:0d:
7f:c5:64:ee:9d:a9:1c:14:d9:05:1c:ee:db:15:4b:42:46:cb:
fd:3f:9c:56:fc:9e:21:4e:f2:7e:c4:a4:2c:9b:38:08:eb:04:
06:16:80:89:f3:89:de:44:e9:ed:97:f7:e1:40:e5:db:de:24:
e3:82:38:89:67:6c:de:2c:62:73:7e:94:bd:55:aa:b3:bf:08:
91:88:02:27:29:f5:dc:eb:9d:e2:0d:be:21:6d:df:4b:53:47:
bf:18:f5:14:0e:60:ed:dc:a9:84:72:05:4f:7d:0a:6c:45:56:
ef:fd:7b:e9:a4:81:77:9d:71:8b:5a:b3:79:71:95:53:1b:94:
a9:0e:7b:05:15:27:88:0f:c2:be:2d:4f:b5:09:05:a0:c3:77:
bf:91:02:81:fb:da:d6:2b:70:f0:40:f0:5c:35:81:c5:1e:67:
55:04:fe:72:4f:ad:b3:3f:e7:26:4a:d0:af:92:54:e9:e2:00:
ad:34:ba:af:bf:e5:2d:3b:5c:94:13:4c:85:0e:5c:6e:1a:76:
a8:2a:2b:be:78:dc:b2:d0:8f:a5:5a:12:1c:9b:5f:b7:32:9f:
e1:f9:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:34 2025 by rpki-client