Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/43cfee16-1064-3756-87fa-b088c3fce7d3.roa
File: 43cfee16-1064-3756-87fa-b088c3fce7d3.roa (raw, json)
Hash identifier: 2Q6HEXMztKbw2XSbnsinUAnYTItQQtoM9ncAG01GdPs=
Subject key identifier: F9:A2:6C:F9:E3:2C:CB:21:A7:5E:7A:1C:FA:42:8A:A6:02:09:A0:F1
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328583E315535092A6A2309F82035A0
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/43cfee16-1064-3756-87fa-b088c3fce7d3.roa
Signing time: Wed 08 Jun 2022 12:00:00 +0000
ROA not before: Wed 08 Jun 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 61317
IP address blocks: 147.124.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:31:55:35:09:2a:6a:23:09:f8:20:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Jun 8 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=856633e7-f4ac-447b-8c4e-e083290e8dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:0c:74:c3:32:9b:56:69:f2:71:c5:4f:02:
37:b1:48:48:b0:e6:fc:0e:50:e6:cb:59:a7:fc:33:
ce:56:42:21:41:3a:30:47:9c:77:b1:84:46:b0:9c:
e4:dc:3d:fb:c7:59:f3:e7:90:a1:76:18:be:95:94:
49:95:34:1f:85:81:53:cb:0d:c8:fb:e5:9f:ad:27:
85:54:8c:8c:ab:0a:6e:21:d8:6e:2e:71:c8:c9:28:
86:d6:71:89:f4:0d:6d:03:9b:5b:cf:cb:09:e5:ae:
dd:b3:2b:d4:08:9a:f1:ab:74:6b:f5:41:f7:9a:9b:
4c:03:fe:f2:03:67:b9:ab:c7:98:c6:af:d2:62:3c:
e5:be:17:e5:d9:fd:de:c0:0d:20:af:03:2a:e5:fc:
d5:a8:98:bc:ce:6c:59:bd:98:73:45:fe:9a:e4:fe:
dd:f5:9c:bf:57:b1:dc:14:a0:a9:54:96:41:06:07:
6b:bb:a8:b7:d7:23:d1:d0:e7:6e:e5:ce:b9:73:d1:
66:ee:6d:e9:d0:92:12:f7:53:81:aa:20:29:13:57:
41:dd:d6:da:e4:f0:f3:6c:81:dc:48:74:2f:67:e7:
de:8c:d6:5c:2c:7a:c5:e9:c5:2d:e4:a7:a8:35:a1:
29:36:ef:9a:fc:5c:07:03:8a:e5:65:a4:6f:59:49:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A2:6C:F9:E3:2C:CB:21:A7:5E:7A:1C:FA:42:8A:A6:02:09:A0:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/43cfee16-1064-3756-87fa-b088c3fce7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:68:a2:f2:1e:78:69:53:c3:0e:34:62:76:99:86:a7:3a:66:
57:1c:0c:94:c6:33:e3:f9:16:93:75:85:1f:98:43:98:6a:1d:
03:5e:cb:22:17:68:c8:3a:fa:76:4b:92:7e:bf:9a:23:67:4d:
be:3b:fa:b3:cf:ca:33:d8:ef:d8:66:8d:39:bd:c7:32:46:82:
54:87:92:87:f6:40:0b:81:ca:2c:fa:6f:5f:db:76:14:a7:ae:
d1:d8:a2:d0:ea:16:58:b5:c5:bf:6b:7b:5f:f5:16:06:4c:65:
a8:82:74:c8:24:80:b4:f5:d6:21:39:06:96:6c:b2:24:ee:1d:
27:76:95:06:ea:d5:d3:cb:43:6e:be:02:5d:85:5e:99:b0:c7:
eb:c5:24:2b:f8:a9:15:39:6c:88:36:fc:67:b8:b1:1a:d0:cf:
13:e3:8a:4b:2d:23:63:d3:26:d4:8c:5b:a5:47:46:ab:a3:9a:
03:7a:2b:95:37:f2:06:d7:2e:ca:d8:ba:b1:b8:a1:4f:d4:42:
c7:d8:04:7a:11:4e:19:28:15:cd:1c:75:85:fc:c3:99:28:6a:
e4:38:f8:e9:d0:34:31:a0:b6:38:f1:8f:89:6b:9f:a6:89:6a:
b7:e9:37:46:d3:fa:6b:fd:9e:6f:85:d7:47:26:47:b1:90:b7:
b2:b3:8c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org