Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ea0b9288-acc9-3215-9861-432d9b7cb6f8.roa
File: ea0b9288-acc9-3215-9861-432d9b7cb6f8.roa (raw, json)
Hash identifier: Dq5jis/Cda810rXRTsNtB4lEU3cv65HAhEecccNTsyU=
Subject key identifier: B5:F6:C2:81:E3:76:74:13:F5:15:BE:1D:5A:01:7E:55:FA:FD:D6:BC
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845B54995CEDCDB96E9DB6F7380
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ea0b9288-acc9-3215-9861-432d9b7cb6f8.roa
Signing time: Mon 29 Apr 2024 16:15:39 +0000
ROA not before: Mon 29 Apr 2024 16:15:39 +0000
ROA not after: Sun 28 Jul 2024 16:15:39 +0000
asID: 13576
IP address blocks: 216.106.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b5:49:95:ce:dc:db:96:e9:db:6f:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 29 16:15:39 2024 GMT
Not After : Jul 28 16:15:39 2024 GMT
Subject: CN=ce8d5fa6-4971-42b3-ba5e-b4134fc378fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:4a:ad:af:3d:20:ce:2b:78:1d:ee:17:9d:
73:64:95:fa:54:7a:4c:a6:8b:35:00:f5:36:8e:1d:
40:58:13:9e:be:85:29:25:a7:bc:a0:02:23:fd:f9:
fc:fd:1a:bb:c6:73:13:36:95:16:5c:7c:af:36:14:
a3:91:1e:0d:85:5c:36:f9:c4:78:c4:d8:87:44:4f:
27:53:61:08:56:11:68:68:6a:3f:44:c7:09:c2:b5:
4f:f3:44:c0:1f:b2:6b:9e:df:cb:de:6d:3c:6b:cd:
c3:1b:26:b5:b2:3e:7e:01:67:86:82:95:96:da:64:
7a:67:31:4b:e0:96:20:e7:0d:10:39:0d:ea:ed:72:
d2:d0:50:cb:5e:da:b6:f6:57:99:54:19:73:7b:a9:
e3:72:a1:e7:f1:53:f1:cf:a1:df:17:d2:16:54:45:
cd:0f:76:9f:f3:a3:3a:ae:38:c3:18:63:a6:64:48:
f7:56:bb:33:93:77:05:af:e7:ce:ce:ef:6f:68:1f:
b2:ab:5e:66:33:b9:d2:4c:c2:a8:b4:59:0b:88:9d:
8e:0c:59:14:f9:09:f1:b7:98:65:55:8a:d3:ea:39:
62:d5:ef:bc:b7:5c:31:65:62:2c:42:c9:2b:17:90:
dc:95:b4:cd:34:e7:79:f1:c8:d4:f2:52:42:c3:56:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:C2:81:E3:76:74:13:F5:15:BE:1D:5A:01:7E:55:FA:FD:D6:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ea0b9288-acc9-3215-9861-432d9b7cb6f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e1:30:3e:b9:2a:fa:5c:21:8b:d0:94:a8:80:7f:36:34:0d:
20:51:f9:eb:55:fc:90:6a:93:f8:d4:30:f6:87:f5:01:28:d6:
91:84:e5:17:8b:34:c7:1e:8f:b1:31:d9:04:9a:07:2e:14:4b:
58:1b:f0:a9:fd:b2:1f:cf:47:81:c4:f8:89:a5:c5:ef:83:24:
72:c8:72:52:e7:40:8f:71:b0:8b:5f:07:7d:03:69:e6:13:33:
1a:b9:9f:24:91:f8:12:61:a6:46:d9:c3:03:6c:e6:ad:a3:26:
cc:7d:43:b5:61:48:3f:a3:30:74:57:e1:7d:01:6d:2d:92:99:
9f:b5:e5:fc:a7:3c:e6:90:ae:8e:b5:18:f3:32:9d:e5:0f:eb:
79:ce:d0:29:35:7c:58:c4:38:93:f8:21:1a:3a:74:cf:79:e5:
4a:f9:8b:7e:e7:f9:27:a2:6d:e7:d7:b9:28:68:18:84:6b:1c:
31:f9:83:14:23:25:88:64:17:f4:ea:b7:41:31:07:dd:53:e7:
ef:7e:c9:b7:bc:5b:c5:09:9e:f9:84:ce:e9:0d:28:69:30:70:
12:02:f6:21:42:3f:7d:4e:92:eb:f8:73:50:97:12:f7:ad:9d:
f5:6c:0b:37:cb:61:c9:7b:68:4f:bb:4f:08:01:82:00:b5:24:
31:a8:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:52 2025 by rpki-client