Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/321e0851-bf2d-3759-8c66-6b05e66fb73e.roa
File: 321e0851-bf2d-3759-8c66-6b05e66fb73e.roa (raw, json)
Hash identifier: fKEWvWwo7IkOpoEjdKSsNk5t8sgPI0cmdHMWsXCcFlc=
Subject key identifier: 59:EA:36:F4:59:74:DF:CF:88:12:0E:82:F2:56:F4:0F:78:F5:22:BA
Certificate issuer: /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial: 010D0C9F43285848A450E73676F73BFFE8BDF750
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/321e0851-bf2d-3759-8c66-6b05e66fb73e.roa
Signing time: Thu 23 Jan 2025 16:42:28 +0000
ROA not before: Thu 23 Jan 2025 16:42:28 +0000
ROA not after: Wed 23 Apr 2025 15:42:28 +0000
asID: 27501
IP address blocks: 64.72.96.0/20 maxlen: 25
103.25.144.0/22 maxlen: 24
103.78.160.0/22 maxlen: 24
103.85.232.0/22 maxlen: 24
148.170.64.0/19 maxlen: 24
199.88.32.0/20 maxlen: 24
199.127.116.0/22 maxlen: 24
209.51.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:50:e7:36:76:f7:3b:ff:e8:bd:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Validity
Not Before: Jan 23 16:42:28 2025 GMT
Not After : Apr 23 15:42:28 2025 GMT
Subject: CN=fccb4a7e-1ede-48e8-9729-d2cba5463127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:82:fa:f4:74:9c:38:27:58:9f:81:ce:4a:
80:42:c3:9c:50:76:4e:73:ce:5c:a1:1e:d0:52:55:
11:ab:57:a5:fa:ad:e4:9d:ba:a6:c5:3a:13:c0:f7:
1b:93:82:9d:70:33:73:57:ec:52:31:c8:91:01:fb:
9d:6f:2e:4e:35:99:5e:e9:7f:b1:6d:62:71:ab:2d:
b0:06:62:41:a5:7b:ff:96:ab:49:3b:5f:14:b9:b9:
e5:34:45:b3:9d:f8:27:a0:75:ba:f4:04:98:8b:ca:
75:e5:59:dc:c7:88:3a:12:bd:2d:41:bb:31:a1:17:
d0:c7:05:a2:40:b8:c5:df:3c:e6:1a:e6:f6:16:1a:
df:21:cf:51:e9:b7:f2:7d:76:22:94:13:f4:04:61:
fc:b7:dc:71:e6:f1:05:4b:9d:01:51:7a:98:8d:8a:
9e:97:e8:46:30:c3:5b:f0:43:72:dc:82:04:ef:e9:
02:4f:67:dd:dd:6f:8e:3b:d6:63:c9:21:76:07:7d:
78:c5:0e:64:5a:ae:62:3a:9c:31:ab:ad:e2:21:e5:
d9:21:7f:71:a2:47:21:fc:17:53:17:02:16:04:aa:
1c:79:27:42:42:1c:e1:b8:3c:7c:ce:68:08:92:10:
67:95:05:66:af:86:d5:26:2c:46:87:4e:db:43:b0:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:36:F4:59:74:DF:CF:88:12:0E:82:F2:56:F4:0F:78:F5:22:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/321e0851-bf2d-3759-8c66-6b05e66fb73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
X509v3 Authority Key Identifier:
keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.96.0/20
103.25.144.0/22
103.78.160.0/22
103.85.232.0/22
148.170.64.0/19
199.88.32.0/20
199.127.116.0/22
209.51.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:db:bc:d6:7c:f2:ce:1d:ba:3f:94:ed:e9:1a:b7:dc:ca:0a:
97:5e:72:f5:55:8b:69:68:e1:77:67:4e:15:23:b7:18:08:6d:
9f:a7:b0:15:82:16:d9:79:40:1f:a8:30:8a:eb:d5:75:7d:51:
8f:f8:24:b0:50:e6:08:00:80:0d:50:0e:90:7b:4d:c3:ce:57:
0b:8a:3f:61:0e:48:70:14:e2:9a:70:ba:4c:c0:5a:5b:e2:7f:
10:3c:e9:1e:e3:70:b0:2d:00:1d:97:f5:57:6b:54:e8:b9:40:
4f:15:7e:17:eb:25:88:66:76:bf:c3:f2:09:d5:e2:80:b6:de:
f5:28:60:84:d8:e8:37:c7:d6:7d:1d:3f:05:c1:4f:12:82:34:
16:0b:c1:29:d8:c3:ce:db:c5:01:25:5e:c6:b4:9d:fc:58:3f:
62:9b:06:f8:0a:f9:cd:06:8e:8e:87:4b:bb:44:07:b1:d4:5c:
bf:48:97:87:39:ce:35:5b:76:08:89:d6:e3:32:b1:2d:89:05:
65:c3:78:28:ab:84:dc:36:8f:ab:3d:33:22:3e:82:06:c4:85:
2f:89:2c:59:b0:df:1b:59:6f:ca:ca:97:19:91:f6:7a:0c:48:
23:3e:99:a9:44:0c:0f:c4:7a:13:a2:15:9a:cc:0f:00:58:d3:
88:56:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:46:45 2025 by rpki-client