Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/74f8f92c-6099-367b-a733-b3529232a9a2.roa
File: 74f8f92c-6099-367b-a733-b3529232a9a2.roa (raw, json)
Hash identifier: Eo3Q/e+hm4DyEykUwN+4yLSetzPCXj0XlaFUnHYAYHI=
Subject key identifier: D5:03:C3:C8:40:FB:BC:87:8A:F1:AB:4D:39:5C:88:5C:A3:F0:1C:B2
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328576D51CC73C042CFC170B2F6856E
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/74f8f92c-6099-367b-a733-b3529232a9a2.roa
Signing time: Sat 07 Mar 2020 03:07:45 +0000
ROA not before: Tue 03 Mar 2020 05:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 173.231.88.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:b2:f6:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Mar 3 05:00:00 2020 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=f85e22ca-4bcc-433c-97a0-fe5623fd7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:c2:bc:19:51:cf:39:88:64:63:26:0f:7c:
96:3a:fc:e6:f4:59:58:cf:c5:d1:62:1f:67:e3:22:
f6:e1:c0:c2:f9:39:06:e5:e6:81:fb:07:11:7f:a1:
d8:73:48:ac:be:3d:2a:82:b3:5a:1c:cb:a6:76:50:
d8:07:f7:85:9e:65:d8:d8:1c:7d:4e:aa:db:6a:80:
b6:d2:a3:c2:84:ca:7a:10:0a:f4:d6:42:17:66:6a:
af:62:54:2c:34:31:c2:43:7c:c1:2c:a8:51:30:91:
16:89:57:53:4e:f0:08:c2:f5:53:aa:f6:c6:14:6b:
fd:ca:23:81:3d:c8:94:36:02:ba:fd:6d:b8:d6:b5:
f6:fd:18:50:f0:1f:f8:dd:3b:4e:38:ae:c7:52:75:
41:b5:4d:22:63:99:ea:51:60:3e:ba:e9:97:fb:c9:
5e:a1:db:1a:c3:cd:16:05:a8:85:2e:34:2d:70:3e:
8a:91:16:a5:af:3f:1f:c5:12:0b:71:5f:b3:c7:7d:
c2:65:0c:ae:1d:86:e1:4b:b9:eb:d6:d5:76:66:d0:
76:3c:87:0f:17:3f:95:a6:55:27:81:89:95:5e:31:
13:bb:00:41:58:be:1f:c2:9b:04:9d:1f:86:9a:74:
d5:a9:9d:a8:e1:a0:d4:41:5c:43:3a:91:66:e6:26:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:C3:C8:40:FB:BC:87:8A:F1:AB:4D:39:5C:88:5C:A3:F0:1C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/74f8f92c-6099-367b-a733-b3529232a9a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
173.231.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cf:44:03:f9:a2:bc:58:f2:ce:d1:e9:2d:22:ab:97:a6:dd:
7a:bd:af:77:3d:62:4d:4a:90:3d:14:d5:e3:f1:36:3b:63:d2:
12:40:c1:d6:c9:9e:e3:83:da:78:f1:6d:91:7e:36:02:9b:c4:
6b:bb:3a:5e:a6:2e:35:fd:14:d8:f7:64:df:ed:c5:15:f3:58:
af:31:e8:40:25:c7:5b:00:4f:2e:bf:ec:b8:85:7e:02:c0:1e:
3a:07:08:c1:48:1b:fe:c8:e4:81:f6:8d:e8:2c:c3:67:ee:fa:
a9:01:40:6f:66:ef:ec:04:ac:05:5d:45:61:53:2c:ab:8c:81:
62:55:ac:be:27:79:bb:63:b4:70:25:4e:ca:73:3d:e3:97:68:
0e:f7:c6:e9:ce:12:2a:78:1c:b7:54:f7:1d:ba:44:79:53:fb:
39:ef:a9:e1:a9:a9:ea:a2:72:9d:9a:88:02:79:df:0a:59:08:
d4:90:a3:de:32:3b:35:c5:8d:cb:39:e5:f2:42:af:f4:7c:e1:
00:36:41:24:b3:e3:f7:c7:6d:35:68:f9:14:6f:ed:1d:0d:d1:
8e:ae:ae:d0:fc:d0:72:10:47:84:01:3f:44:da:05:c0:77:b5:
41:57:de:d3:50:4b:c5:b1:c3:04:c2:ef:67:fa:4e:bd:cc:68:
6e:9c:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:23 2025 by rpki-client