Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cd0df37-cecb-38c9-b15d-3ced3c6f7700.roa
File: 3cd0df37-cecb-38c9-b15d-3ced3c6f7700.roa (raw, json)
Hash identifier: 6vuj7auifkWu9L/y8su/YSC4aPNrW0VRpX/ZLQ19RgM=
Subject key identifier: 12:52:FC:B6:7F:DC:F1:64:D0:E7:BF:DE:02:B7:58:B7:C2:76:AC:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841A0DB96E411A92A9077480380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cd0df37-cecb-38c9-b15d-3ced3c6f7700.roa
Signing time: Thu 20 Apr 2023 12:00:00 +0000
ROA not before: Thu 20 Apr 2023 12:00:00 +0000
ROA not after: Sat 21 Oct 2023 04:00:00 +0000
asID: 398576
IP address blocks: 216.66.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:a0:db:96:e4:11:a9:2a:90:77:48:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 20 12:00:00 2023 GMT
Not After : Oct 21 04:00:00 2023 GMT
Subject: CN=c2fce476-c761-4b27-a925-e81af93f384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:0e:d1:9a:d1:54:c4:a0:d5:e9:af:eb:b8:
8b:a5:76:98:16:b1:de:da:3f:45:06:a4:94:3e:81:
4c:96:7c:15:5c:cd:74:a0:78:86:41:12:fc:51:e0:
13:b4:4f:56:42:ba:46:f2:81:d0:c9:7f:77:6d:4c:
90:fc:ef:ff:cc:dd:80:c3:81:b5:e9:19:e2:69:a4:
17:1d:4a:6e:22:dc:f5:13:79:80:e9:31:3c:80:d5:
19:2e:c1:67:c1:c0:ef:42:a3:9d:44:ae:0c:61:2c:
f6:d5:50:e1:bc:22:e2:87:bf:8e:3f:77:d3:e9:7e:
86:65:15:ac:30:71:d6:cb:af:a1:05:ce:03:10:44:
2e:3d:7a:c9:ee:4a:b2:da:d2:ef:8e:ba:25:44:9c:
0b:7a:92:e8:1f:a6:54:20:42:77:ec:1c:62:b6:85:
38:94:f6:a0:13:5a:49:f4:3a:12:fa:2f:5f:e5:6e:
4a:38:4e:15:76:51:63:df:ad:c1:b8:d1:2b:70:f1:
4b:89:2e:30:59:ed:56:3c:03:ed:22:4e:3b:f6:d1:
80:b2:68:5f:ab:96:66:cf:8f:d1:40:4c:dd:52:41:
a1:01:ba:d6:d1:d1:a8:92:dd:aa:03:4f:d5:7d:04:
01:f1:b0:d7:d8:19:77:52:66:69:a8:d2:a6:a7:ce:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:FC:B6:7F:DC:F1:64:D0:E7:BF:DE:02:B7:58:B7:C2:76:AC:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cd0df37-cecb-38c9-b15d-3ced3c6f7700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:b2:53:25:34:4c:0a:95:1d:da:dd:47:23:57:24:7c:e9:10:
d7:5c:55:f0:84:ac:ca:2b:cc:56:ba:a6:d8:c2:f5:4c:dc:5b:
28:a2:92:26:ce:b7:6d:4f:d8:f0:bd:77:93:a9:fe:5f:1c:e3:
c8:7a:62:fa:b7:93:98:43:09:e2:5f:4c:8f:4a:81:20:8c:6d:
c6:d9:60:5f:da:07:37:f5:37:2d:c3:93:76:78:23:e1:67:e7:
d9:c7:6a:49:66:04:07:06:5a:9d:07:05:15:bf:a5:97:48:d5:
23:aa:d5:c0:8f:d6:b5:60:96:32:49:9e:b2:a3:65:e0:8c:2e:
27:ed:4c:21:66:17:61:64:1a:27:b6:d5:ba:ef:ef:84:a4:47:
6d:aa:79:56:8b:ab:bb:f0:01:bc:31:29:bd:bf:67:3a:6b:66:
ca:85:56:74:d8:c6:bf:81:75:ff:01:12:a4:1b:7e:fe:c0:a0:
61:13:b9:55:42:c6:34:84:1d:97:1c:6d:75:c1:75:13:06:06:
c0:98:97:88:99:3c:0d:61:34:ac:f5:3e:ec:bf:d7:d3:57:ea:
26:a6:7e:07:10:46:2a:ee:91:25:c5:f2:84:a7:9c:04:74:49:
d6:31:e8:a7:40:ec:04:82:34:3e:fa:cf:9c:4f:8c:7b:ea:32:
42:d9:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:06:34 2025 by rpki-client