Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/660414b8-fc5f-39ab-8c94-cab27bba67df.roa
File: 660414b8-fc5f-39ab-8c94-cab27bba67df.roa (raw, json)
Hash identifier: 8t4FWrQHKF+p+SPhv5o3ne0v8ETp9xqrF1nIhByUqMc=
Subject key identifier: 91:85:2D:90:C2:8E:83:86:11:EA:08:55:D3:A3:0C:57:13:5D:FA:F4
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F43285848408C1D2D55581C522BBAD980
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/660414b8-fc5f-39ab-8c94-cab27bba67df.roa
Signing time: Wed 18 Dec 2024 23:00:56 +0000
ROA not before: Wed 18 Dec 2024 23:00:56 +0000
ROA not after: Tue 18 Mar 2025 22:00:56 +0000
asID: 399533
IP address blocks: 209.142.68.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:8c:1d:2d:55:58:1c:52:2b:ba:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Dec 18 23:00:56 2024 GMT
Not After : Mar 18 22:00:56 2025 GMT
Subject: CN=2a2925a4-b76b-484c-bde0-a10aa8eb3f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:66:d9:72:81:42:86:5a:f0:6c:a7:bd:cd:
3e:19:57:bc:5e:fb:30:55:d0:d5:bb:f2:86:62:0e:
d7:32:58:38:d1:3f:b7:07:e4:a7:5a:db:7e:36:ab:
b7:d6:bd:55:55:7b:f7:b0:14:a9:06:b8:5b:eb:99:
2e:fb:16:04:0e:39:2b:63:9c:8a:78:55:73:2f:32:
65:cf:80:7e:2b:29:2c:92:70:4a:27:b3:b2:0b:8c:
a3:17:93:19:68:39:ce:72:a7:6d:b5:8f:5a:b4:ce:
d0:f5:d2:50:99:69:05:65:79:01:85:e2:27:9c:fa:
e7:31:fe:a8:7f:50:5b:09:97:83:3a:51:36:00:4c:
be:30:6f:67:a0:24:6c:e8:9a:eb:c1:29:66:22:5b:
fd:0a:8a:34:b9:64:ce:6c:22:64:c9:b8:88:b2:7c:
7a:8f:e3:88:fc:e9:db:84:1c:f8:a8:b6:67:a2:6c:
83:15:ee:aa:b2:18:27:ac:de:c9:3e:35:90:6b:3f:
71:7e:6a:99:ff:99:d2:1a:d7:fa:36:9d:e0:32:75:
72:ce:a1:37:aa:18:02:63:6c:ee:31:15:2c:c8:94:
72:54:71:9f:20:40:8d:9f:6a:88:45:d9:8e:ca:f5:
b4:75:39:9a:50:01:2f:37:7e:a3:0c:cf:18:4a:72:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:2D:90:C2:8E:83:86:11:EA:08:55:D3:A3:0C:57:13:5D:FA:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/660414b8-fc5f-39ab-8c94-cab27bba67df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:34:bb:83:cd:df:8a:b7:cb:75:59:e9:a5:2b:5c:ca:97:02:
d9:f6:db:e2:e3:1a:08:8b:ce:2c:1a:a8:ca:3f:72:d2:bc:a7:
5f:b8:60:12:06:d4:c3:be:3e:66:c0:d1:12:af:0b:48:3b:78:
75:06:dc:c9:59:cc:fd:f7:3b:69:f0:90:7d:ad:65:ac:af:b7:
5d:81:fc:b7:10:97:ad:a4:c2:c6:28:ec:dc:0e:1f:81:f0:a8:
cd:81:ab:c3:4c:19:08:2c:49:c5:dd:4d:47:22:95:89:28:23:
68:44:c0:9f:2d:a0:4a:d4:83:06:38:1c:a9:31:83:10:92:2d:
cd:88:1e:81:10:53:8b:1c:67:a4:f2:0c:a5:48:09:0c:ee:41:
5b:dd:3a:4f:66:c2:35:e7:75:a5:3c:ff:9a:22:d1:8b:9e:3e:
85:9d:5e:ee:17:30:b6:e1:6e:ab:b0:f5:73:5d:6d:f9:37:3e:
96:3c:dc:a0:b6:9b:9e:1a:ab:4a:f5:72:35:aa:3b:b7:9c:b4:
5d:a0:7d:5e:e3:a0:1b:48:49:4a:bf:fa:00:03:c2:5d:08:c1:
ad:61:60:78:e0:6c:51:b3:47:a2:61:00:73:ff:4b:8e:9c:76:
38:75:d9:9e:76:4f:0c:20:fd:f0:3b:73:1c:1b:16:70:05:69:
3b:df:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:18:32 2025 by rpki-client