Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/af47daa6-d326-3e96-9016-41608f8dd80b.roa
File: af47daa6-d326-3e96-9016-41608f8dd80b.roa (raw, json)
Hash identifier: /HSBLKGiGfyGPeACqLgAYbRC6r0r/RUxg3oteZw6jnA=
Subject key identifier: 9D:52:B6:E6:5E:57:16:B0:54:25:45:0B:9A:3F:7A:D9:6D:31:7E:E7
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F4328583AA92215000428F231809D7800
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/af47daa6-d326-3e96-9016-41608f8dd80b.roa
Signing time: Wed 21 Jul 2021 04:00:00 +0000
ROA not before: Wed 21 Jul 2021 04:00:00 +0000
ROA not after: Sun 31 Jul 2022 04:00:00 +0000
asID: 5050
IP address blocks: 147.72.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a9:22:15:00:04:28:f2:31:80:9d:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Jul 21 04:00:00 2021 GMT
Not After : Jul 31 04:00:00 2022 GMT
Subject: CN=513db807-0c52-456c-b412-20a38eb8075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:6e:23:74:44:68:48:99:e5:96:d6:fc:e9:
c4:92:cc:6b:da:d3:d7:4e:e2:44:53:f4:90:7d:a0:
e8:80:19:8d:35:e3:08:08:e7:e6:8b:f0:0c:90:53:
ee:62:ae:79:30:51:a5:d3:46:81:ad:22:ed:37:dd:
dc:2c:e2:9b:76:6f:15:3c:c3:b1:32:a0:24:56:26:
00:d9:05:04:f2:c4:44:c8:20:55:63:e4:f8:1a:d3:
bf:6c:87:bb:16:17:05:a7:c1:01:79:8b:ca:bf:ea:
d2:82:f7:e2:17:75:b9:11:52:75:c3:89:34:36:f1:
16:58:df:8d:88:a6:38:79:6e:34:08:7e:d6:b0:f1:
b1:f9:39:17:96:50:cd:6e:17:71:31:73:4b:57:0f:
91:d8:f3:de:e2:aa:f6:a6:48:b5:3b:b0:2f:cc:77:
c5:ae:94:37:fc:5b:00:80:74:fa:96:23:86:8a:a3:
3b:d2:b4:61:15:b9:44:70:dc:2b:15:ea:88:97:28:
ea:96:21:60:0c:b8:3c:09:74:71:fd:61:b1:af:27:
e8:78:03:39:45:ac:f9:a6:15:a3:3c:e1:0e:fe:54:
29:6f:8b:dd:31:9f:2f:ed:2d:c0:0f:0d:77:8a:f5:
7b:be:d5:da:cb:13:76:d8:d9:cd:88:4d:df:f7:ec:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:B6:E6:5E:57:16:B0:54:25:45:0B:9A:3F:7A:D9:6D:31:7E:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/af47daa6-d326-3e96-9016-41608f8dd80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.72.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:77:99:a1:93:90:1d:83:db:6d:70:c2:59:fd:99:4f:24:c7:
ac:49:b6:ee:93:64:3e:e4:04:69:50:eb:7c:0e:da:c5:4e:79:
a5:6f:b2:50:e2:d3:05:7e:a7:6c:d1:75:f4:e2:08:0e:dc:7d:
23:97:5b:4a:a6:e9:e3:52:28:1d:fd:be:8d:7d:16:15:a9:32:
76:d9:c6:1f:98:a9:6c:2f:e4:35:e8:1e:94:ad:b5:01:6a:2e:
87:0f:b1:13:b9:a2:5a:d4:8d:11:e7:06:77:55:f5:c9:69:83:
09:27:c4:1d:fc:60:62:22:86:55:30:09:13:29:b9:ea:fe:9b:
61:94:d6:cb:fc:29:cc:80:b1:8a:85:db:cd:b5:72:da:8e:bf:
85:9a:80:4e:c6:f0:bc:a2:f5:29:45:dc:ea:76:6d:ad:98:b6:
8f:73:fd:04:9b:fc:a3:e4:df:f4:18:d2:2b:6f:cb:a4:d1:f2:
06:fa:f8:46:87:d1:3e:4b:87:77:05:8f:97:d9:87:98:4e:78:
66:90:49:11:e4:05:ec:9c:d3:c8:b7:72:4a:c5:9d:1e:75:73:
42:d4:c7:ba:3d:a9:28:bc:8a:5a:8f:72:b6:39:7e:ed:82:4f:
dc:17:f6:50:ee:af:c9:58:53:8a:cc:61:f4:12:48:93:a5:73:
80:8a:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:01:55 2025 by rpki-client