Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa
File: c194644c-026e-33b0-b904-ec649d6deb34.roa (raw, json)
Hash identifier: aqzuPNQxCTcZs6m4Mr9X7+85c9OlF25OpDKZE9fPRzs=
Subject key identifier: 7A:BF:6C:BA:E6:20:C6:0F:39:44:4B:5D:DB:39:4D:AC:7D:26:5D:8B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E1F46B75F5655EAF85C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 36103
IP address blocks: 216.218.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:1f:46:b7:5f:56:55:ea:f8:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=85bd92f4-4054-4e32-8b5e-3ff81754464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:de:ac:f9:85:83:d3:cc:51:9f:3d:31:87:
95:22:5f:a3:0e:59:8b:d0:ff:8b:ac:0d:9f:8d:18:
09:51:74:00:1e:98:10:fe:47:ed:85:e3:60:88:72:
07:46:1a:8b:a2:ea:3d:d2:a5:6b:4c:25:09:1c:1b:
31:42:c3:72:7a:2d:d4:ab:30:a8:5f:b6:1d:9c:e7:
2b:4a:32:b8:ce:4a:83:2e:03:72:89:ec:f7:ca:4f:
06:22:dc:69:dc:ed:85:49:c7:3c:e4:49:ea:48:10:
65:76:aa:43:51:e4:47:23:cd:bf:c0:ae:48:01:17:
30:e4:64:56:4d:47:f3:6d:de:7f:f6:99:8d:43:a6:
19:67:a8:24:3b:dd:fe:d0:e3:64:54:a9:a5:5a:95:
ef:5c:cb:51:4f:b4:96:bf:c8:88:0f:d5:14:ee:44:
ef:9a:e5:f1:3f:0b:03:f8:41:d3:39:92:2c:e2:a9:
1a:0a:ca:4a:89:56:aa:e2:e8:e7:59:91:fa:3a:c8:
ae:22:9b:21:57:95:01:c3:35:27:1f:c4:5e:63:d1:
3a:22:20:17:f1:1f:33:6d:b2:76:95:f0:b1:e6:98:
79:52:fe:04:7e:9a:2f:de:da:61:6c:8d:04:e1:a3:
e2:46:97:5d:4b:f0:84:7f:cd:48:01:a9:18:84:94:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:6C:BA:E6:20:C6:0F:39:44:4B:5D:DB:39:4D:AC:7D:26:5D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:db:0a:86:05:d5:21:5f:df:1f:77:7b:c1:91:b4:66:9b:7c:
a0:ea:e9:9f:4c:55:c7:f7:7c:b9:de:50:df:d3:97:fa:60:ca:
48:86:b4:c2:48:dc:a8:1d:ca:19:b0:a7:f0:f7:36:5b:36:c0:
bf:b9:33:d5:89:5a:df:d2:28:5c:27:b9:bc:24:0c:78:13:8a:
c7:5f:6b:93:04:3c:2b:94:fb:d5:35:28:f3:2d:ac:30:b0:65:
04:63:28:51:a1:6b:fd:fb:df:51:33:94:db:32:1d:eb:90:17:
e3:c2:74:c9:58:63:a6:96:23:d1:2a:2d:a7:06:09:2c:74:32:
7b:dc:3e:a1:e9:06:e5:6d:bf:4b:aa:ca:05:b4:a0:e5:18:fa:
53:3f:14:18:bc:25:6c:eb:1d:7b:36:51:4f:41:aa:03:44:7e:
29:81:ee:f3:f0:67:ec:a3:e0:36:96:d7:71:05:c8:68:74:4f:
f4:b2:ec:48:d2:23:ea:2b:a9:76:76:b3:7b:0e:45:6c:68:3c:
76:61:0b:d0:bc:52:71:26:40:a0:59:32:d1:74:78:8e:1e:1d:
95:e3:bf:f4:56:40:80:b9:88:61:97:0e:8e:ac:b8:43:9e:60:
20:65:87:af:07:6e:61:b6:4b:ff:2e:b3:f5:62:47:cc:ad:54:
42:2f:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:42 2025 by rpki-client