Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b827c364-b054-3555-9ca5-ffc92d5f3296.roa
File: b827c364-b054-3555-9ca5-ffc92d5f3296.roa (raw, json)
Hash identifier: A3TOt0axB4MEkakQqVCWRqTQi1GIfXf55jglrCQx36I=
Subject key identifier: F2:9F:B1:E0:0F:81:65:EA:84:FC:D2:BE:D6:55:38:02:00:65:F0:9B
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F432858468BDF7759076FD9DD14A57500
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b827c364-b054-3555-9ca5-ffc92d5f3296.roa
Signing time: Mon 15 Jul 2024 13:00:33 +0000
ROA not before: Mon 15 Jul 2024 13:00:33 +0000
ROA not after: Sun 13 Oct 2024 13:00:33 +0000
asID: 13445
IP address blocks: 144.196.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8b:df:77:59:07:6f:d9:dd:14:a5:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Jul 15 13:00:33 2024 GMT
Not After : Oct 13 13:00:33 2024 GMT
Subject: CN=9e62402d-bda8-42d5-8c97-c1707c0cfda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:f4:92:4a:51:69:c5:5c:57:dd:d5:51:5c:
27:0c:11:a2:2b:7b:01:b8:ae:b7:26:d2:1d:d1:29:
8b:a7:e3:9e:c2:d9:64:f5:c4:88:d5:b3:ee:75:89:
2a:7e:a2:9a:2c:59:2b:c9:dd:5e:b6:e5:79:a2:62:
cc:1d:a2:4b:c2:47:1c:f2:f1:97:a8:04:0d:18:65:
9b:ec:5e:07:07:e5:62:77:74:44:69:6c:d6:99:54:
91:07:d3:79:08:74:92:5f:49:64:ec:5e:2c:db:33:
29:ef:95:3d:d7:fc:0e:e8:18:8c:9d:a3:ed:5b:f2:
9e:74:4e:5b:06:93:1b:b0:58:c5:6f:7a:01:99:33:
e4:28:41:3e:c1:91:be:7c:59:29:a0:31:91:74:30:
8d:0a:a4:f0:b3:cb:cc:da:cb:4b:09:95:ac:f5:d7:
78:4e:e5:54:d2:57:2e:38:a1:fd:b9:95:d7:21:b3:
75:03:94:0f:ff:c1:9b:76:01:c7:2f:c8:19:19:55:
a9:0f:07:f9:be:6a:96:4c:c9:c8:76:62:3b:8e:27:
5a:36:21:ea:f2:c4:3e:22:1d:08:7b:ee:73:2c:dd:
1e:04:93:cd:90:73:4e:83:80:be:a2:5b:74:73:9d:
1d:02:a2:70:b5:2a:48:17:2b:10:11:bd:2a:e5:4f:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:B1:E0:0F:81:65:EA:84:FC:D2:BE:D6:55:38:02:00:65:F0:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b827c364-b054-3555-9ca5-ffc92d5f3296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7b:61:da:f7:68:a9:a3:6c:13:8b:6f:3f:7f:f1:40:a8:b4:
10:93:a4:de:f8:2e:c4:72:c1:dc:0b:2d:70:93:a6:77:57:be:
c4:7b:b6:03:3e:0a:e4:ae:9a:7f:d6:ad:f7:ac:1f:c3:e9:21:
7d:eb:d3:44:bd:e3:bb:16:3e:dc:0b:bb:a0:5d:90:cc:3d:93:
a5:a3:a3:cb:f4:c5:95:75:73:64:2d:ff:9d:8b:3c:2b:fc:e1:
ad:48:ba:79:3a:5c:b0:04:6a:99:ab:43:85:61:02:a2:c4:58:
48:2e:0c:0e:b5:a4:39:28:44:48:55:c9:00:46:25:88:6a:a8:
83:b7:3f:19:df:0d:c6:41:01:a9:d3:19:6c:dc:8d:97:36:5c:
ae:87:83:cb:8d:b6:69:9d:29:ae:25:86:30:aa:a6:4e:b2:08:
b0:35:6a:7a:70:ca:bd:02:73:66:ae:34:7f:46:59:85:8a:98:
18:97:46:30:d7:7b:60:ba:f7:43:4a:1c:c4:db:3f:be:65:a1:
cf:e7:88:7f:eb:30:53:37:3a:9e:cc:3f:44:b4:55:71:3a:17:
cb:6e:f1:ac:6a:fc:f9:90:e8:d1:24:02:26:13:6b:a3:0a:f7:
72:5f:1d:9f:13:1e:05:cc:dc:2c:39:ae:ad:eb:d6:92:45:bf:
8a:c2:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:49:52 2025 by rpki-client