Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/0f7b785e-cf68-3a1e-9c0d-5b0c4b473c90.roa
File: 0f7b785e-cf68-3a1e-9c0d-5b0c4b473c90.roa (raw, json)
Hash identifier: x+MH/RJpkm7lkjHjXVEzd/Om0n57JOYPIQE6s5nsS6U=
Subject key identifier: CD:88:A6:88:B5:D8:13:6B:43:5B:15:BE:E5:2D:DB:1C:3A:17:FD:91
Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial: 010D0C9F432858454D9D7ABF763DEE5E90D2E020
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/0f7b785e-cf68-3a1e-9c0d-5b0c4b473c90.roa
Signing time: Sat 23 Mar 2024 13:00:32 +0000
ROA not before: Sat 23 Mar 2024 13:00:32 +0000
ROA not after: Fri 21 Jun 2024 13:00:32 +0000
asID: 16509
IP address blocks: 170.10.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4d:9d:7a:bf:76:3d:ee:5e:90:d2:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Validity
Not Before: Mar 23 13:00:32 2024 GMT
Not After : Jun 21 13:00:32 2024 GMT
Subject: CN=94711efe-8e34-47d1-9ba7-93f02bab29c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:b1:7f:f3:20:16:f9:cd:7f:cc:6d:a2:11:
25:a5:fd:32:3e:96:66:90:e2:5f:e4:4b:62:68:a5:
cf:39:3c:6e:30:43:b0:eb:7e:1f:5a:ff:f3:f3:7d:
9b:73:6b:f1:d4:c2:cb:bd:79:8b:dd:46:ce:7d:8a:
e9:b1:1f:7b:2a:23:61:c0:ca:6a:e9:5d:3c:5f:65:
7a:cc:71:95:79:5c:6a:79:e6:ac:3e:be:da:55:c6:
44:9b:55:01:b5:34:6c:cb:0a:2d:4e:27:1c:e1:8b:
b0:1f:a9:a7:30:b9:38:04:59:8e:ac:4a:71:ce:85:
4c:66:c1:73:35:d2:22:5a:d0:04:ec:48:7e:d0:9a:
87:4b:98:cb:b3:ee:44:b6:5a:83:34:7a:b1:7e:bc:
b2:f1:b8:93:7b:2c:42:9d:ed:16:90:5a:1c:b0:2c:
43:be:bb:e3:b3:c2:09:7c:79:25:09:55:15:e7:18:
8a:eb:6b:9b:bc:58:5c:8c:95:71:9b:7e:95:b9:09:
93:af:13:fa:9b:d4:67:82:99:bb:c6:d6:81:07:24:
a8:8c:44:d0:82:8a:8b:af:21:f1:69:2e:5b:85:00:
7d:54:8b:4e:5f:fd:a4:16:db:d9:04:6e:2e:ef:bb:
a4:86:98:af:9e:3f:66:e6:4c:16:40:70:e0:96:d9:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:A6:88:B5:D8:13:6B:43:5B:15:BE:E5:2D:DB:1C:3A:17:FD:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/0f7b785e-cf68-3a1e-9c0d-5b0c4b473c90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
X509v3 Authority Key Identifier:
keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b2:40:0e:aa:31:f1:ba:5d:bb:ab:70:66:b1:06:de:4b:f9:
83:34:f6:ca:1d:d1:ca:27:b7:9c:d1:42:22:19:4f:24:6c:d0:
ce:ff:9b:f8:55:b4:8e:51:39:dc:1b:49:ed:91:60:25:10:18:
e7:4c:7e:d2:d7:0f:fa:40:cf:a0:55:d4:c7:d4:ad:a4:5d:55:
3d:b8:25:e5:05:b4:25:22:9a:45:81:e0:f8:19:3c:4a:bb:0d:
01:84:ab:88:22:f6:55:18:13:fd:11:f9:e2:69:39:7c:cc:71:
83:2d:83:c3:92:2a:6a:56:25:81:5d:ff:dd:9b:de:00:88:6d:
e8:14:79:ff:1e:1b:29:28:35:91:b2:04:31:0c:4a:6a:d2:1c:
09:64:05:7f:6c:89:1d:9d:38:b1:c9:a1:3f:4c:77:03:f8:d6:
81:4f:f9:95:c8:4f:15:f9:aa:ab:fb:8c:ba:05:a7:43:0d:3f:
64:1b:9b:b7:fd:38:69:0f:d0:99:ca:3d:1a:01:c6:42:95:ce:
7a:97:b5:e6:db:d7:dd:c2:fc:43:9c:aa:9e:9b:24:d5:34:01:
2c:b2:bb:47:e8:eb:32:2c:c1:e8:d8:9f:a0:a1:21:43:3e:bb:
53:af:0e:34:dc:8e:a5:96:67:39:c2:86:16:b7:75:6b:26:93:
e5:09:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:55 2025 by rpki-client