Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92e71e33-4e18-3a07-98e4-9ca9a6e531d0.roa
File: 92e71e33-4e18-3a07-98e4-9ca9a6e531d0.roa (raw, json)
Hash identifier: 9yuyIIMqLGoauF2DSMZrJKhxE+U7bnNUPgYk6GTYN0s=
Subject key identifier: 9A:E9:88:E3:15:AC:6D:9A:44:DD:19:DF:4D:EB:00:39:A9:D9:E3:7B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B32637D1DE986A0500500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92e71e33-4e18-3a07-98e4-9ca9a6e531d0.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 63949
IP address blocks: 64.71.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:32:63:7d:1d:e9:86:a0:50:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=ccdf4c3e-46c9-4041-9eb1-1abda40a1423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:62:96:1d:df:fb:7e:9c:3c:b3:57:33:90:
94:e4:41:da:fd:fc:ec:7d:42:72:19:6f:03:d9:f5:
0f:e2:88:c8:d0:c5:15:f4:aa:f8:a3:d3:1f:0e:31:
8f:ce:7e:fd:9b:56:72:7b:68:a6:49:06:47:af:b2:
14:39:f8:f4:79:9f:8b:fa:62:09:88:8f:86:c5:a4:
b4:a8:7b:8a:93:0a:de:08:49:82:b8:85:33:72:b7:
db:88:8f:65:3a:14:33:94:f7:dc:11:7a:bb:62:7c:
77:cb:d4:bb:63:7a:5b:62:4f:d4:69:95:e8:e2:3f:
24:45:8d:ea:41:07:22:ed:df:7f:9a:80:2c:af:43:
4f:8f:b1:ad:ab:8e:29:4e:23:b1:ed:2a:3f:60:87:
18:4e:0d:b1:a4:56:c8:ce:8f:3a:33:52:5f:49:5f:
e7:f5:88:7c:2a:a6:f2:c9:0c:d3:1c:e1:81:b1:be:
47:a9:e9:0c:4b:df:c8:74:81:0f:e1:07:19:be:c6:
84:3c:d0:45:ef:52:5a:88:5b:71:c5:df:6f:4a:d4:
d9:9a:ce:fd:98:a9:29:62:f3:0e:94:f9:40:14:b6:
3c:20:99:5f:a0:a0:bc:69:c3:d7:0d:9e:fc:f8:49:
8c:0c:93:63:8c:e9:2a:5e:fe:ea:ec:1b:af:f3:f5:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:88:E3:15:AC:6D:9A:44:DD:19:DF:4D:EB:00:39:A9:D9:E3:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92e71e33-4e18-3a07-98e4-9ca9a6e531d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:38:ec:42:53:c0:4d:0b:ff:93:c0:86:ee:d6:ab:3f:7c:0a:
46:91:f3:9c:fc:4f:96:ba:c8:54:51:df:6b:59:40:3b:bb:f9:
61:0f:13:62:63:a1:b8:78:69:17:00:e0:20:2c:64:e5:8e:a6:
14:7a:28:01:ff:73:93:1f:d9:ef:64:5d:6c:6e:db:7a:0d:1e:
c8:cd:fe:16:a8:48:52:68:25:68:51:47:4e:e0:d5:1b:d8:07:
61:15:43:6a:d2:8c:c3:47:22:b9:80:bd:13:71:e6:c9:b8:a7:
7f:eb:8b:98:2f:f0:8d:03:74:02:c6:19:9f:07:9d:1c:8f:4d:
1b:39:2d:b3:1a:dc:23:55:ff:32:45:45:a1:a6:1a:18:77:2f:
fc:c9:d8:b4:cf:e4:e8:ce:21:9e:2d:08:b7:c1:39:32:92:f1:
6b:18:60:68:34:b8:81:43:5c:cc:c1:0d:b9:cf:39:23:cb:03:
fe:2d:39:8c:15:9c:c3:7d:e0:a9:59:f2:b3:0a:66:47:26:e4:
66:6d:ac:57:6e:e9:35:a3:a9:6e:79:cc:c5:12:f3:9b:b3:44:
19:f9:6d:93:7a:1a:77:3b:ba:d9:c1:d5:41:84:c7:38:ae:22:
e6:9c:77:64:b7:16:cf:95:e1:4a:09:dc:c8:c2:a7:ce:5d:70:
f2:c0:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:28 2025 by rpki-client