Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/aa50da24-e142-3bf4-b528-a9e00d5a70ce.roa
File: aa50da24-e142-3bf4-b528-a9e00d5a70ce.roa (raw, json)
Hash identifier: RiUwXbttBjL4OfE2XoX+WcZfWi8HR8YIWuOxOaR9nvc=
Subject key identifier: ED:8E:55:AC:AF:87:E0:37:31:DD:5F:EB:54:13:12:EC:AB:0E:92:94
Certificate issuer: /CN=d4caa623-a8e2-41b2-b6a7-d9136f5c52e0
Certificate serial: 010D0C9F4328576D51CC73C042CFC16CFD18CE0B
Authority key identifier: 6F:24:B3:CB:57:04:8B:B0:5D:81:5A:3F:CF:C0:7B:6C:EB:EB:71:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/aa50da24-e142-3bf4-b528-a9e00d5a70ce.roa
Signing time: Wed 04 Sep 2019 16:25:57 +0000
ROA not before: Wed 04 Sep 2019 04:00:00 +0000
ROA not after: Tue 04 Sep 2029 04:00:00 +0000
asID: 40341
IP address blocks: 162.219.8.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:fd:18:ce:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4caa623-a8e2-41b2-b6a7-d9136f5c52e0
Validity
Not Before: Sep 4 04:00:00 2019 GMT
Not After : Sep 4 04:00:00 2029 GMT
Subject: CN=46c3b8eb-eda4-4c96-82b7-d777792130c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:52:4d:fc:d9:d3:2d:19:70:de:7f:17:e0:
28:24:8e:4f:4f:3b:0f:de:30:f0:0e:01:0d:b4:af:
eb:bd:ea:31:65:0e:e3:8a:e1:a0:24:68:7d:94:bb:
a2:eb:1d:16:6f:5b:b0:59:aa:84:07:70:64:e9:63:
da:2b:09:54:95:8d:8f:78:18:41:9c:c0:bf:be:61:
f8:26:4e:98:be:d8:fb:45:8a:25:37:11:91:ef:de:
23:55:49:2c:c1:94:1b:41:de:78:3c:16:f8:8f:98:
df:e0:2f:e7:79:d7:18:57:6f:6a:30:17:5f:44:7a:
90:71:13:78:a8:c0:99:72:12:ea:49:9f:ba:93:71:
fc:58:43:54:65:8f:46:4b:40:7c:62:55:23:2e:d8:
3e:e7:1a:71:3d:a7:88:19:db:30:42:1e:70:58:17:
a0:ca:8c:fd:1d:10:ab:e0:e2:97:0f:bd:83:73:a3:
00:59:04:7a:0a:38:04:14:50:bf:5c:c3:5d:6b:33:
91:3c:29:b0:b5:66:15:36:44:8d:d9:4e:6e:80:1e:
ec:2c:fe:82:ed:ba:5a:9e:e3:ba:f4:81:a7:a4:3f:
de:69:75:f2:4f:65:c6:f4:65:c8:0f:36:e0:10:60:
47:34:02:e7:b7:32:49:83:49:5b:bf:f9:ab:25:aa:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:55:AC:AF:87:E0:37:31:DD:5F:EB:54:13:12:EC:AB:0E:92:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/aa50da24-e142-3bf4-b528-a9e00d5a70ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.crl
X509v3 Authority Key Identifier:
keyid:6F:24:B3:CB:57:04:8B:B0:5D:81:5A:3F:CF:C0:7B:6C:EB:EB:71:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.cer
sbgp-ipAddrBlock: critical
IPv4:
162.219.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ae:2b:24:3a:24:f9:62:7c:56:0b:dd:67:d7:43:bb:a0:d1:
d1:0c:07:90:14:06:3c:9f:8c:1a:bc:a9:66:79:ae:02:e2:d1:
0f:d5:3f:ee:84:4f:45:7a:a0:36:a9:b2:e5:63:9f:e8:1e:ea:
f3:bc:69:00:04:ed:c8:42:f4:4a:14:7b:67:27:14:b2:63:d6:
7d:ff:9d:8a:32:50:19:a9:ed:a7:7e:f1:6a:c3:59:58:63:47:
2c:53:ef:d8:b3:11:4a:4a:b6:5c:28:e1:ea:52:99:30:b5:bc:
e2:df:40:4d:a8:4f:d7:76:b1:b3:af:f1:f9:0c:08:ed:ad:b6:
ab:6f:46:39:f5:38:31:11:ec:a9:e7:c8:4b:aa:e6:9d:34:49:
cc:9f:e7:35:8f:c1:06:5d:be:c8:0b:61:ce:23:5b:b1:32:70:
c1:54:58:5a:8f:63:31:42:67:22:3d:5b:e5:6d:a4:1c:c6:80:
c5:5b:f2:b9:86:ed:a0:4f:28:32:66:1f:40:46:be:94:a5:cf:
ef:a2:08:04:17:64:a1:15:2e:c9:b6:b6:51:6d:20:21:fd:24:
af:f7:d2:2d:b3:37:69:c1:bb:cc:0c:47:f3:15:fd:c2:59:44:
6d:ff:9b:ca:02:0b:d8:9b:ac:95:9a:51:7d:7e:34:e7:70:30:
c4:bf:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:31 2025 by rpki-client