Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa
File: be53da72-b931-388c-9f7f-d08db35a6901.roa (raw, json)
Hash identifier: 1oKBFCtx5cYxZKo4XG5T2vCNRgLzLTUZtXylvisWfxs=
Subject key identifier: 89:9E:3E:97:B0:9A:0A:69:5D:84:F3:84:87:2A:B4:71:CA:2A:CB:53
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730C9CC50B
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa
Signing time: Wed 01 Jul 2020 23:01:07 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 7922
IP address blocks: 108.165.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0c:9c:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=171fedb8-401a-4f55-97bf-e23f184a4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:b2:ed:e6:44:d5:80:60:79:81:fd:e8:eb:
0b:9d:5f:05:e0:04:8b:9e:8f:1d:46:d1:1e:ac:d6:
95:0b:2b:2e:7b:c5:04:48:27:4c:b6:7e:ce:6c:43:
c3:c7:ec:c5:93:58:61:ab:1f:e4:56:ac:39:0d:57:
2c:89:ed:17:3d:7c:ea:d4:44:5f:8a:51:30:c9:bf:
b2:17:11:e9:3d:ee:7b:3f:1c:9c:6e:c8:3d:d9:cc:
cb:e9:fd:69:18:8d:0f:7d:0c:5f:fe:8e:30:4b:0a:
84:c1:39:ff:cd:7a:3a:c4:09:88:56:eb:27:f1:95:
45:14:df:af:85:19:7f:39:ef:43:18:b6:a8:bb:2b:
98:0a:33:ac:35:78:91:1b:31:ba:de:ea:e7:af:f5:
3a:d2:51:fa:94:42:b9:d1:0f:38:78:78:49:73:7a:
fc:7a:f0:22:18:1a:58:3f:4a:46:3c:d6:23:8d:16:
36:d1:4c:35:0b:35:85:ad:bf:4a:2f:56:59:a9:ed:
bc:6e:f7:2a:e4:b1:6c:78:b3:26:9d:50:31:eb:24:
a7:e6:42:f9:19:7c:7f:9a:93:6e:1b:91:90:39:62:
86:b0:f1:4b:5e:2a:01:8b:d4:4f:b6:89:ec:6f:85:
cb:70:55:70:4e:97:01:b6:3c:f1:c0:33:04:da:0d:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:3E:97:B0:9A:0A:69:5D:84:F3:84:87:2A:B4:71:CA:2A:CB:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:70:81:4d:e8:c5:fc:e1:a1:f3:36:5e:04:94:c3:29:c5:58:
a0:bb:59:a6:d9:63:c6:4b:54:06:ab:51:d0:52:2d:15:43:41:
6d:cf:eb:15:02:b9:ee:9a:bb:7c:24:7b:d9:40:66:52:86:ec:
04:b6:53:5d:a7:93:4f:99:ce:f1:3c:99:d2:24:7a:f9:a3:ae:
ee:1b:3c:e0:a2:98:c7:7b:2e:68:32:ac:20:ae:30:01:6b:12:
a5:7d:e2:6d:4a:b2:fa:92:c7:cb:06:66:b6:e4:01:b5:85:86:
04:34:4a:ee:24:99:0e:39:53:d7:8d:16:9f:ae:4a:14:27:f2:
89:ce:51:53:24:c7:37:c9:e6:12:8d:f5:3b:26:c7:d8:9d:23:
d0:7d:52:8f:82:43:8d:6f:2e:91:42:29:d6:be:aa:61:ea:02:
ab:21:bf:2f:8c:ad:1f:25:72:43:e8:e8:d9:f5:6a:41:e4:66:
37:ba:a3:46:ca:84:d5:8e:e9:2b:98:6a:44:9b:cf:cd:62:48:
1f:26:60:f8:ca:fe:f5:fd:61:a5:53:d1:27:17:dc:89:5f:2d:
3c:d7:ef:07:10:74:9c:f6:c0:69:7f:d5:1a:3d:aa:bf:e2:db:
2b:94:f3:80:c2:f3:c8:c3:1f:e3:a4:15:a3:a7:e8:31:de:8b:
7d:4b:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:05 2023 by rpki-client on console-fra.rpki-client.org