Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/95a12c2a-9eed-34e4-acfe-2ba96206c8a2.roa
File: 95a12c2a-9eed-34e4-acfe-2ba96206c8a2.roa (raw, json)
Hash identifier: cndmassnx1CMxX8tQyoaITXBeUAYSU+z//xeUeHpMa8=
Subject key identifier: D2:3D:4A:EC:03:2A:97:EC:34:26:5C:5A:66:4D:B7:52:CA:6E:5F:DC
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285838489B62B104242E7CA07F4700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/95a12c2a-9eed-34e4-acfe-2ba96206c8a2.roa
Signing time: Mon 08 Jul 2019 04:00:00 +0000
ROA not before: Mon 08 Jul 2019 04:00:00 +0000
ROA not after: Mon 20 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 130.137.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:48:9b:62:b1:04:24:2e:7c:a0:7f:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jul 8 04:00:00 2019 GMT
Not After : Mar 20 04:00:00 2023 GMT
Subject: CN=61495f86-6654-456f-9b00-36c7b43f166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:b6:3a:d1:8d:63:0f:72:c4:5a:f3:5d:00:
e7:7b:8c:f9:6a:41:24:be:2b:61:5f:89:47:e5:0a:
72:ad:81:be:7d:9f:2d:92:eb:47:13:e9:b6:d8:22:
19:ac:8c:11:7c:0c:14:73:c3:f3:5d:a9:ad:77:89:
7c:b4:a1:7c:34:a5:77:23:8e:47:94:a9:b3:55:52:
24:7a:e2:92:c9:2f:98:95:0a:2c:5f:68:82:f6:02:
15:0e:54:70:d3:be:1b:64:b3:55:3f:26:99:54:99:
3e:95:41:37:eb:d2:d6:54:66:7f:db:cd:2c:0a:9a:
86:c4:be:fc:77:07:1a:bd:4d:c4:e7:22:4e:b2:a4:
4d:6a:87:12:42:b1:23:e7:7a:e0:c6:16:87:c0:df:
d5:6c:98:4b:58:8e:c2:21:a4:b4:60:9a:67:8d:33:
f9:b9:e9:69:8d:da:1a:f8:5f:b6:e3:64:da:1d:f6:
69:7a:23:9e:77:53:c7:fd:88:ac:94:20:22:db:a7:
1a:1c:58:c1:aa:05:4d:9a:9c:ee:38:5a:01:18:c1:
5f:1c:e5:a3:4c:07:75:c8:d4:8b:12:41:10:e4:f8:
33:76:7b:5d:d8:ac:c1:90:d7:48:35:2f:0e:7e:06:
1e:71:e5:93:e5:42:38:01:6e:6f:a3:d8:79:e5:0a:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:4A:EC:03:2A:97:EC:34:26:5C:5A:66:4D:B7:52:CA:6E:5F:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/95a12c2a-9eed-34e4-acfe-2ba96206c8a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4c:ff:0b:59:cf:b0:72:57:52:0e:12:f5:2f:cf:2c:c7:44:
79:85:90:2a:46:a6:ef:18:87:60:42:d7:02:60:f4:78:9f:0d:
96:38:4e:8e:8b:62:e7:c6:e5:7f:49:00:b1:07:89:72:47:e3:
01:17:6f:96:b3:5e:6a:47:65:0a:b1:f8:21:76:e5:a0:cb:eb:
15:ef:4a:c5:01:f7:4d:e3:0a:a7:7b:5b:0b:33:b4:7b:3c:e3:
9e:7b:ca:fa:c4:52:bc:ab:fa:af:d2:aa:95:28:ae:e0:3d:7d:
51:a8:89:b8:0b:fd:b1:6b:4e:cf:15:0c:a1:ea:0a:a8:ea:a0:
5b:e2:0c:c2:e9:72:0d:43:f9:ab:49:cd:cd:76:7f:1e:98:ed:
2a:7c:ac:0e:fd:3f:61:c5:b8:bd:f7:09:69:1f:7d:67:cd:bf:
12:74:38:30:cc:30:47:1a:18:9a:21:f4:ec:98:10:4d:b3:22:
d3:37:ac:cc:ae:ef:4a:68:fb:70:0d:55:21:69:30:a2:bc:8e:
a2:83:c1:f5:37:1b:3f:d9:c7:b6:d2:81:ef:e0:d2:1d:54:40:
70:bd:95:26:e8:99:a6:ea:0d:96:5a:9b:4f:b1:c5:59:fd:a4:
31:93:8e:2a:56:21:de:6a:6c:a7:10:6d:c6:db:49:f0:10:a2:
32:50:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:00 2025 by rpki-client