Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa
File: cd041f38-e509-3585-af7e-f77914fcf66b.roa (raw, json)
Hash identifier: M2CKY0VsovSNUhvlpp1kWFPPNUjKODv4R0JXKYhiqxk=
Subject key identifier: 5F:C4:E4:72:2F:F2:C7:89:1F:89:D1:81:97:F0:CE:99:F5:CD:1B:B2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA897D88870D3C375DA900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.247.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:89:7d:88:87:0d:3c:37:5d:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=91d64d07-01ca-43f2-beb5-349e5fd12a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:8c:5a:8d:b2:cd:0b:2e:30:c5:e0:19:46:
03:86:c3:af:3e:82:a1:5e:48:ee:47:11:fe:c9:dc:
99:17:42:ac:8d:27:61:a7:fa:ea:ff:8a:50:cc:42:
88:44:ff:ad:89:55:cf:78:9d:95:39:7b:2d:6f:f7:
61:49:bb:4b:91:cd:23:1d:b1:1a:e7:ec:01:20:78:
eb:9f:c0:0e:bd:21:b6:d4:5c:83:76:9f:b8:92:68:
4f:b6:dd:d5:7b:6f:59:02:a2:d6:be:b7:b2:71:bd:
f7:8c:19:d4:04:1c:30:07:b2:45:cc:8a:d4:c4:fb:
0f:0f:4b:e6:ca:cf:21:05:90:3e:76:34:b2:d6:d7:
19:7b:ab:e8:ec:ab:24:72:48:3a:1b:22:33:11:5e:
1e:6b:dc:22:fc:11:c2:d8:40:69:a4:f0:f4:c8:20:
a3:6f:9e:1e:e7:d5:7d:13:1b:e2:62:74:71:cf:b3:
ec:1e:4e:97:60:a5:3c:e6:bd:7c:2c:44:d5:bf:69:
42:34:40:c2:a8:36:60:81:8c:3c:8e:01:39:96:39:
a5:84:da:04:c7:2f:1c:89:68:e8:fe:c8:26:43:f8:
bd:3c:1b:a5:cd:28:46:92:dc:96:8d:80:92:2e:a2:
4b:e4:38:01:1d:c2:f7:b9:ea:a2:bf:f7:51:b1:3d:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:E4:72:2F:F2:C7:89:1F:89:D1:81:97:F0:CE:99:F5:CD:1B:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.247.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1a:28:c4:6f:b7:fe:35:e3:c7:8d:bc:8e:62:59:27:9b:1a:
e6:36:e0:eb:00:bc:00:3c:66:4e:13:eb:03:14:c9:9b:63:8f:
e1:03:e3:06:ca:1a:c9:05:8f:75:a7:56:d3:a0:ec:7e:c2:f5:
b5:16:ff:2e:b5:c5:71:4e:6f:62:70:76:7e:95:f6:46:2a:67:
38:f9:b6:34:34:54:70:50:4d:75:9a:10:79:7f:53:8a:eb:80:
6b:4c:c5:dd:e9:f9:0b:ee:da:d7:b2:d0:ab:b6:35:14:32:14:
3c:d0:ed:01:69:15:72:93:c3:cf:28:ce:bc:69:22:d2:dc:60:
f1:8b:b7:79:ed:55:6d:1c:f8:39:df:95:96:f0:89:e5:d0:fe:
0c:23:3a:ee:f2:1a:c8:bb:37:5c:0e:34:dc:c4:7e:1b:a1:bd:
e6:9a:8d:cb:5b:39:23:e3:e1:97:a9:63:8f:17:17:2f:a9:41:
25:db:e1:18:03:a2:d9:62:26:36:64:4b:69:b5:bc:35:f5:ad:
fb:ec:01:5b:20:b0:e2:e4:56:27:85:5d:03:24:26:45:cc:ff:
42:2a:02:9b:97:27:cc:60:73:da:43:a8:04:86:bb:ca:83:71:
a8:da:b1:b2:77:b8:45:fc:51:20:96:39:ff:0b:fd:cc:a7:e9:
6b:ba:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:08:48 2025 by rpki-client