Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/999f2783-5382-30fc-a499-3c767b98e96d.roa
File: 999f2783-5382-30fc-a499-3c767b98e96d.roa (raw, json)
Hash identifier: Z63f+45zo6B8hbXGnDu22k44OGc/mUabZcR1FtAHH80=
Subject key identifier: 81:B8:CD:B5:D7:0B:50:02:C0:5A:2D:53:3F:FC:8D:6C:7A:20:A2:C8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462E597F8BA59A918F8BA22380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/999f2783-5382-30fc-a499-3c767b98e96d.roa
Signing time: Wed 12 Jun 2024 01:00:25 +0000
ROA not before: Wed 12 Jun 2024 01:00:25 +0000
ROA not after: Tue 10 Sep 2024 01:00:25 +0000
asID: 14978
IP address blocks: 216.66.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2e:59:7f:8b:a5:9a:91:8f:8b:a2:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 12 01:00:25 2024 GMT
Not After : Sep 10 01:00:25 2024 GMT
Subject: CN=09bd74e9-2d70-4174-ba79-f6c86a3a037f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:ef:4c:79:fc:85:96:38:cc:42:b4:ff:18:
10:3a:e8:c6:42:f3:fe:dc:0b:f1:b0:c8:b0:18:97:
e7:ea:d4:9c:aa:07:eb:3a:23:f2:a0:e6:84:49:58:
cb:c9:4b:01:4f:09:0f:c3:2f:da:1a:92:8f:73:e7:
58:e9:e7:b1:9b:17:96:56:96:a9:c2:75:82:19:90:
42:b7:dc:b2:f2:d1:d6:b5:b8:f1:9d:55:35:ae:c8:
9d:4e:44:44:b3:a2:6c:e9:4a:54:1a:91:fe:1f:3e:
67:8b:11:93:ad:2d:c4:d1:63:d1:17:c8:c7:c4:bc:
3f:03:e0:33:03:df:da:9c:c7:85:fc:ab:19:c1:7c:
08:16:4c:fa:61:ea:45:e7:df:ae:8e:09:57:d3:be:
d2:f2:68:fe:d7:2a:ed:51:e8:df:62:b1:41:32:30:
01:bc:d9:73:67:07:9e:a0:1f:62:b3:8d:1d:ba:85:
32:cf:fa:60:c6:94:bc:05:ce:ed:75:8d:c2:8a:86:
21:dd:5b:23:9e:c6:8b:9e:39:4e:b5:f1:38:fd:33:
07:dc:82:2f:65:a4:8d:2c:43:65:49:8a:5e:3f:25:
20:95:a9:13:1f:38:08:b2:78:54:7e:01:3f:7c:d5:
14:11:52:87:8b:66:bc:6f:8c:dc:74:c8:cb:58:41:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B8:CD:B5:D7:0B:50:02:C0:5A:2D:53:3F:FC:8D:6C:7A:20:A2:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/999f2783-5382-30fc-a499-3c767b98e96d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f1:79:d1:f2:c6:04:68:aa:62:ee:57:5d:89:08:8a:1f:48:
b0:0a:3c:d3:c9:dc:b7:37:eb:2a:ed:9b:51:d1:03:2f:16:f4:
e8:ae:a7:d8:aa:91:39:ce:c3:a3:51:1a:a8:c9:b5:fb:9b:89:
17:16:26:82:e9:74:ca:a7:58:23:11:f6:76:89:6e:2a:02:cc:
13:e6:f2:0d:df:15:55:d0:cc:a9:5a:23:98:77:89:13:d2:ce:
48:4a:bf:69:b9:42:2a:5f:62:03:07:22:3f:9d:10:36:0f:71:
d7:92:65:36:e0:d8:d6:ed:90:30:e0:d5:4b:fc:2f:28:0c:65:
93:5c:64:1e:56:7c:cd:9b:de:95:1d:e9:30:a5:8a:83:25:ef:
8c:cb:3a:97:4b:3b:ac:bd:1b:ef:d0:c5:fa:2a:32:12:c6:eb:
cf:89:62:75:b8:73:76:e7:f0:fa:08:33:5f:d2:06:88:e0:eb:
eb:ed:ab:5b:b6:2c:25:2b:74:e2:84:28:ed:b1:02:04:f2:8c:
0f:de:76:79:e9:71:38:6c:7d:34:48:2c:02:ed:7c:55:6d:cb:
a7:e3:cf:c9:10:71:fc:14:4e:2c:33:a5:c6:05:21:8d:d9:28:
1f:40:18:d1:2d:6d:d9:88:d3:c7:bb:06:16:dd:6f:5c:2e:57:
bc:02:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:05 2025 by rpki-client