Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8a537c76-346d-3a19-8356-f002f80f7330.roa
File: 8a537c76-346d-3a19-8356-f002f80f7330.roa (raw, json)
Hash identifier: y4Lhvotpg22ho3C9Fon0zWBmDO9G0k1+W+kYct6Ub2c=
Subject key identifier: FD:BD:41:12:D4:1D:45:00:D6:46:6B:80:B8:6E:FB:BC:C6:7F:04:C8
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F43285842A2BE5FD9796EB09605B0C690
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8a537c76-346d-3a19-8356-f002f80f7330.roa
Signing time: Sat 22 Jul 2023 22:29:48 +0000
ROA not before: Sat 22 Jul 2023 22:29:48 +0000
ROA not after: Fri 20 Oct 2023 22:29:48 +0000
asID: 149020
IP address blocks: 64.112.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a2:be:5f:d9:79:6e:b0:96:05:b0:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Jul 22 22:29:48 2023 GMT
Not After : Oct 20 22:29:48 2023 GMT
Subject: CN=0f47335d-03b4-472c-84d7-d6070259c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:fc:70:02:6e:fb:62:d4:f3:62:8d:5d:16:
0e:56:2e:32:1f:be:b9:c6:74:e2:65:6d:7c:52:75:
fa:c5:6c:12:69:eb:ec:fa:b6:6e:d0:74:cf:c9:a8:
30:c8:00:59:a3:1f:2c:fd:bc:65:3e:03:65:8c:ac:
81:c5:ae:b4:c4:f2:e6:76:a8:2d:ee:54:fb:23:0f:
9b:c2:53:2e:0d:89:c4:ea:31:8d:87:6d:94:09:b2:
1e:db:f5:f6:db:e7:a9:4c:b9:3b:ed:e5:b8:1b:46:
1b:47:b0:10:58:f6:d3:4a:40:8f:d0:ae:0d:28:9b:
7f:20:f7:f6:a4:dc:12:5d:2f:9b:f0:33:16:1f:7c:
9e:b1:e7:39:e3:13:41:f7:37:a2:27:ff:a4:de:55:
97:6f:a1:01:1d:ed:af:f8:fe:e6:b2:c2:af:1e:b8:
8a:35:39:11:3c:21:ca:98:2f:96:66:5c:ae:e5:b5:
ad:68:75:01:f4:02:8f:9e:99:87:28:45:6c:a0:3e:
eb:29:7b:4e:d1:d7:84:03:16:c6:e6:18:89:38:93:
7b:b5:56:71:00:21:27:b6:57:4c:42:fa:25:a2:77:
ab:c8:7b:ba:07:07:65:32:6e:77:08:59:32:3f:bc:
91:dc:96:dd:f6:64:74:ea:80:de:60:95:93:1f:6c:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:41:12:D4:1D:45:00:D6:46:6B:80:B8:6E:FB:BC:C6:7F:04:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8a537c76-346d-3a19-8356-f002f80f7330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:14:43:a8:b4:1e:f2:9f:b6:c0:7f:63:b1:0b:45:9a:bd:08:
59:52:ed:bc:57:26:c6:19:69:8d:05:81:10:20:5c:dc:2e:d4:
71:f7:1b:72:81:3f:93:f4:4d:d0:5a:b4:09:76:db:da:e5:b1:
cf:84:6c:24:10:53:03:9d:73:2a:ce:af:87:e7:6f:05:0a:ca:
82:28:37:de:6a:c6:45:4b:78:9c:b2:d5:55:8e:66:8b:e9:37:
94:59:72:6a:a2:20:65:31:c0:0d:59:a7:41:b8:51:db:2b:7d:
31:19:10:ac:fd:8b:21:72:98:d0:5a:b1:44:f6:b6:29:30:18:
c2:3d:4a:c7:9a:79:78:51:f3:fb:87:f6:19:f5:7b:53:d2:53:
73:38:09:26:50:56:e5:da:8b:54:3a:91:ed:f7:d9:1e:e1:12:
6f:f5:f6:f9:6d:f9:91:15:76:02:cb:3f:f4:b5:e0:47:f3:73:
54:14:5c:9f:9d:9e:a0:78:93:14:ed:44:bc:a2:6b:d6:bf:7d:
53:c7:ea:39:49:7d:2f:d6:f2:dc:c0:e9:9e:6b:b9:32:76:03:
3e:d4:70:cc:5d:44:25:4b:43:e8:b7:b0:9d:88:76:e1:1c:d6:
a0:84:aa:0d:6c:df:99:10:b0:09:fb:e3:48:06:53:b9:e9:cd:
38:00:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:56:01 2025 by rpki-client