Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa
File: 9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa (raw, json)
Hash identifier: NH49M4IUUmV5Ke+0Xp1SFj5xZV0rB/g4asRW4Fi4EiQ=
Subject key identifier: 20:3E:DF:97:A1:D4:3D:28:83:C4:AC:07:F7:A2:0C:2E:5C:3E:DA:06
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584664C9E1E22EFE94CC0C9BC900
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa
Signing time: Mon 01 Jul 2024 13:00:33 +0000
ROA not before: Mon 01 Jul 2024 13:00:33 +0000
ROA not after: Sun 29 Sep 2024 13:00:33 +0000
asID: 14618
IP address blocks: 67.219.240.0/24 maxlen: 24
67.219.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:64:c9:e1:e2:2e:fe:94:cc:0c:9b:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Jul 1 13:00:33 2024 GMT
Not After : Sep 29 13:00:33 2024 GMT
Subject: CN=2555a2da-c8b5-4ae6-a11d-1e63eb327b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:51:5a:2d:22:61:2f:2d:d8:3b:4f:be:33:
20:a7:64:8a:65:98:12:4b:e6:4e:e7:4f:97:a1:7b:
8b:1b:af:a4:9c:34:ba:39:dd:71:1f:1d:f2:43:8c:
c0:60:ed:d0:2d:75:c3:bd:2f:54:7c:ce:e5:e5:ee:
9b:3d:48:56:85:5e:3b:bc:0d:d8:23:62:3c:86:38:
de:6f:7f:45:eb:35:8b:fe:d3:41:56:b0:cb:7e:7f:
68:8e:67:04:fd:bf:11:75:8f:9d:be:ca:36:c4:75:
72:a8:25:5f:aa:e1:ce:19:3c:52:39:61:68:7c:f1:
a0:98:3c:41:0e:c4:f6:89:4d:12:ff:16:ce:ea:7c:
bd:96:d7:8c:35:79:ff:9a:9c:9a:d8:5c:43:d7:12:
08:86:32:c9:db:80:43:d3:92:fa:9f:1c:cf:69:2d:
03:99:ee:4e:08:c1:f7:d9:73:07:50:f7:79:17:1f:
78:93:59:6d:11:82:38:58:44:36:4d:49:26:6d:bb:
d8:f6:69:f9:77:53:36:d7:6d:bb:b4:90:bc:50:f4:
2e:9b:dd:29:d1:17:b0:b2:e7:c4:20:26:86:94:e3:
56:79:6c:cf:d2:cf:0b:1a:47:c5:c0:d9:bf:30:b7:
cf:08:38:c8:9d:f8:ec:61:40:23:71:dc:65:56:03:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:DF:97:A1:D4:3D:28:83:C4:AC:07:F7:A2:0C:2E:5C:3E:DA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:92:7a:b7:32:7b:5d:4f:b2:08:46:ae:5a:1a:0b:51:cf:7c:
4d:3e:c3:4d:56:58:c0:88:26:75:18:28:25:5c:98:77:de:ea:
8c:f4:74:f6:f6:a8:a1:06:ea:d2:cc:82:a4:64:21:67:cc:e8:
86:83:a8:22:e1:72:23:87:ab:25:d6:b6:20:ab:57:25:aa:0b:
6f:06:2d:6a:4c:60:58:65:82:74:3c:f3:f7:95:25:48:1c:16:
77:29:ae:7f:ac:4b:aa:2d:a1:72:bb:7e:46:ec:03:4b:61:4c:
35:ad:b9:65:dd:8c:0e:27:f4:dc:68:5d:05:c0:6e:ef:53:6d:
38:71:33:23:75:d5:d8:df:de:ea:ce:2f:10:05:16:12:44:12:
69:72:7b:0e:8c:75:5f:e4:e7:d7:f3:3f:c7:9d:a5:cf:e3:85:
1a:ce:26:40:f3:4c:f3:56:3a:7b:f4:0f:5d:75:a0:20:59:18:
b9:67:87:5c:10:44:2a:77:ec:c5:48:c3:d6:93:6b:eb:e1:7b:
0d:25:43:ed:77:e2:5d:39:8c:98:cf:91:94:ff:77:1b:09:05:
70:1b:46:cd:d4:4f:84:a4:80:63:e5:48:b3:42:5b:44:2d:73:
71:08:63:3e:0b:f9:dc:de:f8:52:06:51:ff:b9:c4:bb:6e:54:
46:29:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:20 2025 by rpki-client