Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/45ac5476-4998-3b41-ace8-2be5f5786cb8.roa
File: 45ac5476-4998-3b41-ace8-2be5f5786cb8.roa (raw, json)
Hash identifier: dI+R77RrxlWfNp1O1UIpGWvKWiYOs5eYI5+QWZXsxxg=
Subject key identifier: 1D:C9:40:41:5F:83:29:A7:11:45:12:65:FB:C6:66:6A:B0:59:08:9D
Certificate issuer: /CN=58551ca9-c834-4e94-9452-385a3685aa05
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730FEF9CE9
Authority key identifier: A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/45ac5476-4998-3b41-ace8-2be5f5786cb8.roa
Signing time: Thu 02 Jul 2020 14:30:28 +0000
ROA not before: Tue 28 Apr 2020 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36198
IP address blocks: 23.181.64.0/24 maxlen: 24
170.39.64.0/22 maxlen: 24
2620:136:a000::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0f:ef:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58551ca9-c834-4e94-9452-385a3685aa05
Validity
Not Before: Apr 28 04:00:00 2020 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=6e96fc04-ca86-42c3-9d93-7359c499fb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:33:51:88:47:f1:9a:2d:bd:a6:7b:16:b7:
f0:4c:4f:6a:47:cc:75:48:7b:52:39:52:d8:47:5a:
fd:51:a2:42:64:a9:43:52:63:77:f3:a8:a7:f9:b8:
9e:88:ca:97:8b:f2:2f:91:23:d9:e9:7e:03:0d:03:
e6:07:dd:9b:84:0b:d2:e3:17:2a:60:6f:7e:08:a4:
49:0d:74:0d:ff:1d:7c:6b:68:0f:35:31:9a:41:80:
55:89:fe:43:a0:9b:73:3d:3d:d8:9d:3b:ae:d5:69:
bc:80:42:60:4d:89:4b:38:95:6a:0c:e2:d2:56:77:
3c:42:c8:72:05:b0:40:eb:19:bb:df:3b:52:cb:7a:
2a:6e:f1:f3:a9:a8:37:5b:e1:76:39:36:62:4a:d7:
6e:04:77:5a:56:aa:ff:8d:20:ec:ad:72:27:24:52:
83:60:f5:db:8d:51:7b:f3:8e:e6:a0:7d:38:83:93:
9e:37:1d:e8:8b:ff:ae:9c:20:69:4a:8f:c4:90:36:
09:ab:bd:23:f2:c2:92:5f:15:0e:83:cd:72:25:8d:
b7:f7:d7:0d:93:39:2d:bd:49:f7:b7:69:a9:d1:26:
da:75:7b:b7:24:04:c8:2d:98:b8:b1:38:f7:82:fb:
47:cb:d0:d0:3a:89:f9:54:70:8c:36:15:5e:b1:fb:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:40:41:5F:83:29:A7:11:45:12:65:FB:C6:66:6A:B0:59:08:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/45ac5476-4998-3b41-ace8-2be5f5786cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.crl
X509v3 Authority Key Identifier:
keyid:A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.64.0/24
170.39.64.0/22
IPv6:
2620:136:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d9:ef:3c:06:f6:6c:d7:8b:45:c5:8f:43:4f:ef:f2:ab:81:
2b:4e:3d:0b:a9:94:52:d2:a2:34:5a:0f:c1:9f:36:93:ad:6a:
15:f3:a4:e8:86:5f:50:6a:26:21:d7:2f:c3:63:db:16:82:d1:
a3:1a:06:7a:89:dc:0e:12:79:9f:89:df:f5:cf:c1:10:97:1b:
0d:14:9a:7f:d1:a0:a5:7a:32:0f:62:04:78:86:d9:49:42:23:
83:64:72:97:47:19:03:10:94:cc:73:1d:b4:8b:b4:0e:2a:cf:
48:d4:77:fb:9c:3b:e2:9f:9d:56:a3:9d:52:73:bf:78:f5:ac:
8a:57:fd:90:dd:84:ef:73:a9:46:d2:be:e7:70:ea:1b:69:18:
4f:71:5b:a7:a7:b5:d2:c3:da:4e:40:06:d9:a2:bd:a6:38:15:
76:ee:e6:f5:62:cc:4d:e8:d1:1a:1f:fe:da:6c:d1:41:a5:6f:
b6:6e:d9:b7:26:a5:ca:9d:e3:1d:2e:00:fb:74:8e:78:ba:44:
1f:7e:58:4f:88:4b:d6:95:fa:a3:bf:7f:b7:18:67:af:96:9e:
3d:f4:c5:96:db:86:12:f8:cd:d5:d7:56:54:18:a0:b7:19:e7:
94:03:f3:d4:56:87:01:a7:25:f9:5b:ce:f8:2d:71:b5:59:f2:
ac:50:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:55 2025 by rpki-client