Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/532e7a14-8db8-339e-b2f7-c5c2fe89065e.roa
File: 532e7a14-8db8-339e-b2f7-c5c2fe89065e.roa (raw, json)
Hash identifier: OFXZBeE7VbU2XQAJtIqVtDNogRwy5HvUISBCVOeXO74=
Subject key identifier: 96:8E:BE:15:54:44:98:2E:86:91:94:06:AD:16:3C:74:80:FA:C5:0E
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F4328583C7E71B6473473B3CCBDF179C0
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/532e7a14-8db8-339e-b2f7-c5c2fe89065e.roa
Signing time: Wed 05 Jan 2022 05:00:00 +0000
ROA not before: Wed 05 Jan 2022 05:00:00 +0000
ROA not after: Tue 09 Apr 2024 04:00:00 +0000
asID: 398355
IP address blocks: 207.2.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:7e:71:b6:47:34:73:b3:cc:bd:f1:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Jan 5 05:00:00 2022 GMT
Not After : Apr 9 04:00:00 2024 GMT
Subject: CN=341d2cc0-5874-4f6c-a8bb-9223ebcefcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:8b:2c:7d:b6:77:67:ad:c8:78:4d:4b:9b:
c4:2d:98:4e:4e:18:b8:e9:74:d8:8d:62:f1:b0:a8:
7c:0b:8d:f3:93:18:45:f3:06:22:90:ff:dc:8c:9f:
68:96:95:ff:09:91:49:33:ee:33:a8:e2:89:3f:26:
9e:5d:31:fc:e1:d0:ca:0b:22:59:0b:28:74:a3:c9:
e3:d6:0b:31:17:f2:ee:66:4c:72:26:ed:28:e1:bf:
03:42:fb:d1:90:e2:32:01:1f:b4:2b:ee:64:83:1c:
88:83:25:55:74:39:02:63:71:44:cc:c5:6c:52:ee:
14:2d:7c:1b:fa:2b:ee:4d:c0:62:f5:95:9a:92:b1:
37:bf:86:27:98:49:a6:dc:56:e4:73:26:8b:d7:2d:
48:79:b0:88:fa:ab:df:97:37:a6:aa:c5:d5:3d:84:
3a:68:98:b3:f5:07:75:7a:8a:10:9b:53:43:d8:5c:
57:7f:59:18:6c:6f:68:8c:46:58:18:4f:42:14:90:
44:98:da:30:9f:9b:98:34:03:6c:48:88:ac:c7:52:
10:7e:ff:89:9b:6e:5f:bb:9b:7d:88:67:e1:b2:bc:
c9:d3:16:62:39:0e:1b:b9:5a:53:7a:b6:9b:0d:3e:
24:0d:3a:39:3b:9a:7b:77:30:1b:3c:02:35:de:fd:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:BE:15:54:44:98:2E:86:91:94:06:AD:16:3C:74:80:FA:C5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/532e7a14-8db8-339e-b2f7-c5c2fe89065e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
207.2.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:bd:11:b3:03:7b:9c:4f:35:d4:57:44:ff:9e:61:15:3c:37:
69:17:07:d0:b3:f8:a0:38:b5:57:06:28:4c:18:e4:2e:e7:34:
b2:ac:bf:fb:19:ee:c9:57:33:0b:72:11:cc:8b:2e:6f:7d:e8:
80:45:d0:7b:fb:2d:82:93:ea:ab:f8:f9:c2:04:f9:2a:97:33:
0b:1a:22:45:21:5c:c9:7f:12:e7:cb:2a:3e:10:77:46:96:e8:
34:03:b1:67:c3:9c:69:e1:64:a7:db:58:ac:a0:4a:d9:db:db:
46:59:62:29:a6:10:55:82:a8:ea:4a:ce:9f:35:50:e4:62:d9:
ba:e9:70:4f:c2:8d:2b:52:ed:40:3d:c4:ea:80:75:89:70:b5:
6d:94:c6:b3:68:12:d9:74:85:73:96:19:81:04:a5:06:65:99:
89:b8:33:f1:85:4f:fc:42:44:07:3f:8f:bf:14:e2:ad:23:4b:
9b:44:82:79:53:c0:e0:8f:78:5b:ae:80:4b:93:50:8f:30:de:
77:83:42:c5:78:90:cc:c2:70:71:e6:cd:4e:67:b2:a1:1e:93:
30:05:32:84:25:ed:62:1c:1b:7d:51:89:9f:11:6b:67:2a:f8:
7e:3c:af:15:12:0d:40:5d:25:b2:a7:d1:01:ff:9c:ac:da:d6:
8d:b6:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:49 2025 by rpki-client