Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4afa8b0e-b429-39bc-a5a6-1858b75c0459.roa
File: 4afa8b0e-b429-39bc-a5a6-1858b75c0459.roa (raw, json)
Hash identifier: DzcZCheXKe/XobChEyZSgRnhF1+oyBuwAXBgda6bZHw=
Subject key identifier: A9:32:66:E2:BA:FE:3D:29:F5:A8:15:1A:80:D9:B4:66:BE:9B:C0:87
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D87BD117E10ED733A94BF800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4afa8b0e-b429-39bc-a5a6-1858b75c0459.roa
Signing time: Mon 11 Nov 2024 16:24:02 +0000
ROA not before: Mon 11 Nov 2024 16:24:02 +0000
ROA not after: Sun 09 Feb 2025 16:24:02 +0000
asID: 394437
IP address blocks: 66.249.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:7b:d1:17:e1:0e:d7:33:a9:4b:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:24:02 2024 GMT
Not After : Feb 9 16:24:02 2025 GMT
Subject: CN=d15f9170-ebd8-4912-bcab-82966edf37c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:35:e5:ba:31:65:f0:b1:db:bc:15:dd:ef:
09:12:b1:82:43:06:12:a0:44:06:b2:e9:df:00:a7:
f4:32:e8:43:2d:37:60:aa:1c:4e:1d:2a:cc:47:a4:
aa:01:08:f7:15:d7:7a:26:22:5f:5a:c5:88:39:3e:
cc:0b:a3:30:ab:0d:14:5b:a3:16:8d:4d:cb:d0:10:
84:ea:c3:21:c2:2f:19:d6:37:17:af:dc:b7:64:fb:
9b:ef:2d:cb:c9:44:f9:56:ba:b7:86:a3:aa:df:63:
fd:75:4b:f7:f1:04:31:ab:37:06:4c:5e:eb:e2:40:
df:f8:7b:97:41:7f:7f:5d:af:f7:41:73:eb:81:cc:
96:a8:b7:f3:86:ee:8d:00:08:a6:af:55:5a:69:35:
78:97:ba:b6:50:07:77:d3:4f:7f:e7:e5:83:75:2e:
a9:0e:d4:72:04:42:66:02:17:29:cf:49:93:c8:ef:
00:26:50:73:3e:86:4a:11:da:84:43:1f:09:65:da:
3b:10:c9:41:a2:3f:52:69:8d:a0:c6:7a:e6:b3:a9:
64:2c:e4:5e:c3:4d:d3:27:73:e7:28:a0:e1:50:19:
4d:47:1b:31:37:05:db:42:a1:f2:d7:ac:61:e1:2d:
68:9d:c1:ec:cb:bc:7d:82:b9:4c:93:1d:cc:de:6e:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:66:E2:BA:FE:3D:29:F5:A8:15:1A:80:D9:B4:66:BE:9B:C0:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4afa8b0e-b429-39bc-a5a6-1858b75c0459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:35:39:a2:77:b4:eb:73:a7:c2:55:2a:37:1c:d4:a5:0f:01:
25:8f:de:b9:f5:20:81:de:09:4b:27:9d:40:f0:72:46:00:64:
3f:e9:4d:58:74:01:66:93:de:ea:42:86:ec:0a:48:b6:78:dc:
70:69:aa:5f:8d:0e:0d:26:27:26:49:ab:65:12:9f:59:ce:32:
88:0d:73:f3:62:28:67:71:8c:78:ad:3f:b6:a4:a2:bc:3a:b4:
a5:66:f5:a6:36:4a:92:79:03:4b:61:ce:1b:77:9d:86:94:79:
17:59:c3:81:99:3d:54:ec:36:62:37:d3:17:87:5a:de:cf:3b:
13:38:e0:ae:03:7a:82:8e:ee:7a:35:1a:93:24:c6:bc:f5:cb:
07:f5:a4:ae:70:c6:58:7d:e8:53:02:41:d3:a0:e3:22:19:2f:
cb:82:3c:bf:cb:b3:9e:50:68:3e:14:a1:f6:80:69:9b:e3:02:
7f:b8:63:9c:90:4b:56:52:83:f8:4c:59:65:1e:ca:a9:c5:cd:
12:4b:3f:93:32:98:6b:9d:23:58:97:1d:77:b3:c1:83:64:0b:
fd:7e:2d:59:9a:be:92:7c:9a:3e:5a:0a:48:77:eb:5a:06:ed:
ac:ff:f0:0f:31:d8:f9:98:ca:63:ea:96:b5:09:08:41:f6:b4:
b8:c6:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:25:44 2025 by rpki-client