Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bc4443d8-2c76-3fb0-a85c-f5affabcdc3f.roa
File: bc4443d8-2c76-3fb0-a85c-f5affabcdc3f.roa (raw, json)
Hash identifier: PaKWagGq7KmPP1IHefT4BT9xDHwBTRUdBzDhWGB/kcA=
Subject key identifier: 98:9D:20:65:DA:F3:82:14:82:CD:7F:EF:6D:E9:79:B7:9C:85:9B:A6
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858486D2EC9684DC1940E160B7A00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bc4443d8-2c76-3fb0-a85c-f5affabcdc3f.roa
Signing time: Fri 03 Jan 2025 22:44:16 +0000
ROA not before: Fri 03 Jan 2025 22:44:16 +0000
ROA not after: Thu 03 Apr 2025 21:44:16 +0000
asID: 16509
IP address blocks: 170.114.90.0/24 maxlen: 24
170.114.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:2e:c9:68:4d:c1:94:0e:16:0b:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 3 22:44:16 2025 GMT
Not After : Apr 3 21:44:16 2025 GMT
Subject: CN=9abbbd4d-1349-4a65-906f-7aa02f1e66d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:72:58:c7:83:fc:fe:a2:15:47:87:13:0b:
ee:87:81:64:39:3d:30:27:4d:14:40:4d:ed:a7:a3:
ce:31:34:d4:2b:6b:c4:37:20:15:75:af:e0:63:55:
f1:ef:13:39:47:8f:76:07:c9:67:8b:36:0f:7b:f5:
99:68:9f:d0:be:a4:99:a2:dc:1a:f0:f2:a7:94:79:
c0:e8:e8:e9:82:9f:4f:9c:d0:be:7e:66:7a:7b:ba:
94:cb:73:a9:1c:52:79:ed:7c:94:21:49:5d:b6:8f:
20:f4:6f:50:d2:ed:2e:71:d0:90:50:af:8f:36:e5:
66:dc:8f:e4:ce:e8:02:5e:0d:2b:eb:dd:0a:6b:4e:
e5:1f:43:33:a9:ca:ea:ab:b8:0e:e2:0b:2e:0e:6c:
3b:29:fc:ac:f0:e6:19:1f:aa:c6:c9:d6:71:03:d3:
0c:43:19:dd:bc:c6:a0:49:77:60:5c:dd:68:68:aa:
90:22:e4:f2:ed:84:1e:44:c9:86:43:70:7e:ec:81:
c7:13:08:8c:06:f7:2e:0c:d8:1a:13:17:e3:54:b6:
ac:d3:42:75:56:8d:e5:3f:2d:18:97:84:3b:7e:a9:
d9:56:e0:70:a7:3e:1d:22:29:46:b9:93:16:dd:6d:
11:f7:79:e3:61:c7:4d:c3:ac:ad:98:0c:88:97:32:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:20:65:DA:F3:82:14:82:CD:7F:EF:6D:E9:79:B7:9C:85:9B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bc4443d8-2c76-3fb0-a85c-f5affabcdc3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:18:e1:00:73:ed:b4:11:d8:38:4e:6e:7a:a5:65:a7:12:6d:
0e:17:db:ee:4c:b3:40:e6:8b:4e:5f:5b:9f:29:cd:ba:55:a3:
97:ca:4b:74:f9:f1:0a:ae:f1:70:c9:ac:30:00:cc:1a:41:05:
b0:e3:70:13:d3:4b:12:71:15:da:d0:fb:b6:d4:04:68:ff:f5:
eb:fc:c8:18:31:ee:5a:fd:7f:de:df:d4:14:fe:2c:e2:31:93:
63:fc:76:d9:32:22:65:b5:e4:bb:0f:01:ee:87:92:a0:94:93:
d8:19:75:e0:63:96:c5:d7:c1:a8:bc:7b:7f:a3:4b:34:71:84:
06:3d:3a:07:03:a0:06:30:db:a4:0c:51:7d:f6:54:2b:42:37:
cd:d7:97:92:3d:9e:7a:86:7e:e9:00:20:9e:be:e1:5b:51:93:
76:9e:b1:df:a7:2f:63:20:2c:47:89:2a:63:51:c2:59:3d:9d:
c5:83:4f:18:72:5c:fe:df:ad:92:ed:d6:b7:ed:2c:85:55:e8:
9e:1e:60:d4:5f:74:17:4b:a0:e3:1a:07:a6:ae:66:f1:53:29:
82:be:0a:6d:45:8d:c3:49:29:77:0c:52:b9:53:d3:1b:42:be:
2e:49:0f:24:11:31:98:1d:44:c5:fc:9c:12:d0:63:3d:4f:7d:
b2:8b:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:15 2025 by rpki-client