Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc0a1ece-31ea-3ad4-8ac9-0545faf4b3e1.roa
File: fc0a1ece-31ea-3ad4-8ac9-0545faf4b3e1.roa (raw, json)
Hash identifier: vBzDX3b1+r1oL5xDXnvjnaaxukGCriVJjxL2R55nY/Y=
Subject key identifier: 0D:FE:80:26:11:C4:1E:5D:7D:2F:5A:46:8D:3D:F8:DB:E7:20:5E:4D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285837993CA71330BE244967BC8C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc0a1ece-31ea-3ad4-8ac9-0545faf4b3e1.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 3356
IP address blocks: 108.165.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:99:3c:a7:13:30:be:24:49:67:bc:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=3cf20c5f-4e9e-41f8-ba27-4f556ff639d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:09:c5:68:7d:43:bb:0f:53:f2:c3:50:2a:
3d:5a:ef:05:5f:87:82:7a:36:b4:f4:9e:d7:8a:a2:
e6:78:27:f3:e6:41:74:09:c0:73:8e:cd:b7:da:c3:
0b:e7:0a:a2:8c:d2:6b:fd:f2:a6:28:ab:0f:a2:8b:
95:84:18:d5:62:98:5f:e6:0b:64:f6:91:a2:fe:b7:
3c:53:e0:7e:3a:0e:f0:9c:29:ee:a9:e9:29:78:02:
05:1c:99:e6:26:37:9d:9b:b5:7c:3f:14:db:1c:02:
59:6b:da:5b:93:48:91:9d:9f:45:1e:44:be:c3:2a:
c0:26:f2:9f:eb:32:21:94:56:ff:70:e1:35:4a:2e:
84:03:b0:b2:c4:47:fc:1b:c7:22:13:71:cf:a1:d5:
6a:b2:4e:c5:f9:ca:e3:0a:2d:29:02:7a:cf:17:69:
ba:cd:b0:47:22:ca:ce:88:81:76:41:7f:29:18:1e:
d7:2e:58:5d:44:8f:2a:aa:bd:72:cf:d4:9d:15:40:
4c:d2:ee:4f:8c:11:a7:22:7f:c0:7f:14:1e:d9:7f:
0e:89:a5:b8:0a:49:6c:50:b7:33:e6:42:e4:6c:a1:
16:45:92:91:14:8f:12:85:1b:76:bc:ec:dc:a6:d7:
5b:27:6b:8a:22:39:76:bf:8b:ca:38:0f:4c:2f:01:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:80:26:11:C4:1E:5D:7D:2F:5A:46:8D:3D:F8:DB:E7:20:5E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc0a1ece-31ea-3ad4-8ac9-0545faf4b3e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:31:6e:f5:73:bf:e6:db:1d:7a:fa:0e:1b:84:52:37:cb:6d:
17:ee:83:72:f1:a5:cf:c2:32:d3:2d:9f:71:b8:c7:b0:e5:80:
7a:85:41:b7:d4:f2:46:2b:6a:08:10:e5:92:8d:65:6c:dd:86:
d0:55:fa:8e:d1:1b:3e:88:7c:0d:fb:b9:8e:31:32:80:b4:3e:
20:be:4e:ee:d3:d7:49:13:4c:85:f9:90:f4:62:3e:56:de:5c:
04:cc:c3:4c:fe:27:c7:91:83:25:47:7e:47:c9:31:f7:ab:58:
d1:29:ac:51:50:54:d4:c5:3d:1d:a1:19:91:2c:20:b8:79:75:
84:53:fb:34:7d:cc:ff:fa:ad:6c:15:1c:ff:ad:13:2d:ce:d9:
64:60:a1:02:c5:48:ff:60:99:13:d7:37:7b:4d:be:14:c9:9c:
c6:6e:3e:8f:e2:ad:66:33:cd:07:97:2b:88:61:10:10:23:b8:
14:9b:79:52:43:d8:59:0f:60:64:a1:d9:ba:cb:8d:58:8d:05:
e5:37:70:8e:a8:df:54:06:21:44:20:87:b9:bd:a2:90:d6:5d:
fa:47:0b:8c:d3:d1:ca:0c:aa:d6:ec:59:af:b3:6d:74:cd:04:
46:94:4c:d4:7d:c4:0a:bd:15:bc:47:23:0a:e1:ac:7a:6b:f7:
1a:8b:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:20 2023 by rpki-client on console-fra.rpki-client.org