Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa
File: ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa (raw, json)
Hash identifier: gMOHtOuYpw5pJdP4MkTF3okjwqx36X0A2JAvQlgRMRU=
Subject key identifier: DE:73:FB:82:CC:95:61:39:B0:7B:21:52:8A:D6:87:18:19:C4:D9:AC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B310BC50F1355ED09BEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:31:0b:c5:0f:13:55:ed:09:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c263361e-7de4-481d-8616-2e81e81414f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:a9:a1:3d:57:28:c6:e8:ca:0d:71:b2:10:
67:9d:91:48:15:e5:7e:e3:06:e6:72:56:b1:04:18:
19:cb:c8:f2:22:db:6c:07:c4:2b:98:45:52:0a:f6:
7d:2d:c1:c8:99:a3:68:fa:b0:c5:d3:c9:64:5f:1b:
2f:ac:2a:c3:1e:65:76:4f:ab:a4:b6:d6:c4:4f:f4:
ac:a4:2a:b2:77:e7:35:52:f2:de:4e:8d:5a:b2:ee:
b5:a3:e7:d4:5a:d1:b4:73:7f:cf:ff:e5:46:e5:89:
83:96:27:07:25:99:9a:ad:e2:c0:9f:07:88:04:7a:
9a:25:16:72:08:39:e4:b6:c8:0a:6a:e0:6b:4b:47:
20:e2:5d:89:55:ad:32:c4:3a:3b:a5:d1:60:70:bd:
10:f8:97:d5:79:36:d7:dd:4e:77:e6:8b:4a:dc:49:
47:05:a0:d6:9d:a7:3e:6c:2d:8d:5d:64:ed:0e:b8:
6d:27:36:d1:8b:4e:1c:2f:ff:8a:c2:09:38:4d:8e:
bc:d9:3c:b4:9f:31:b3:24:8a:02:d3:72:a3:8e:1e:
b6:1f:f0:eb:17:2c:65:a5:6e:7d:1a:2c:05:25:42:
97:20:fc:ea:33:70:c3:f9:71:3a:8c:9e:a1:5f:e8:
4b:ff:1c:87:92:e3:1e:1b:a6:4e:ca:9a:c4:bc:2d:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:73:FB:82:CC:95:61:39:B0:7B:21:52:8A:D6:87:18:19:C4:D9:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:24:08:18:46:06:0b:34:37:8c:14:a4:4f:4e:1c:6f:7f:7b:
8d:70:43:52:0d:e4:30:31:eb:80:61:6c:3f:b5:62:a7:c0:d0:
bc:b3:65:75:35:48:d4:56:10:e7:40:ee:b7:d1:d1:2f:3b:6d:
ca:d1:59:d5:13:2b:ef:04:73:67:31:a5:20:2c:11:a8:4c:e5:
fc:05:1d:39:37:a0:2c:b1:1e:6e:24:8d:f6:75:20:0a:68:0a:
33:87:0f:4f:88:a2:b5:3b:57:da:d4:52:2a:6d:33:c8:4b:ce:
ec:33:d2:63:85:03:3a:63:84:46:07:07:56:e1:56:b1:77:03:
2d:72:2e:92:5c:77:10:fe:41:3a:f0:66:b4:87:8e:71:60:76:
7a:bf:24:79:4f:8c:fc:92:75:20:d5:ea:3b:7c:77:aa:20:d4:
da:58:76:5d:90:c9:af:a8:db:71:d3:b7:38:df:14:4e:12:f5:
01:f7:e1:be:3c:34:90:bc:f0:ac:99:e6:ed:ca:61:03:5e:b6:
9b:68:62:52:70:a5:a9:ee:26:48:39:8c:61:de:02:ee:78:4d:
77:f0:f8:f4:0f:d8:84:25:fc:17:a4:dc:7d:e8:33:77:84:db:
e8:f9:e5:7c:c9:f2:0b:4d:db:f5:26:fe:d6:e7:09:1b:9a:79:
dd:2b:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:57 2025 by rpki-client