Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8555ac3c-2787-3eb4-87a1-f64d47047ee0.roa
File: 8555ac3c-2787-3eb4-87a1-f64d47047ee0.roa (raw, json)
Hash identifier: pngLcKdIDY6MsW+d7fHJtn5/DvoUDQl+BOFR708BNfs=
Subject key identifier: 29:E8:E8:14:7C:E3:58:EE:C2:59:57:B1:CC:AB:E7:36:82:4D:D9:84
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837C09DF724AFDFE5E99F400B80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8555ac3c-2787-3eb4-87a1-f64d47047ee0.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 19905
IP address blocks: 209.53.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:c0:9d:f7:24:af:df:e5:e9:9f:40:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=43dc0c10-bcd1-4097-b6f7-0f4770cb11be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:17:3d:93:5a:11:cf:f0:de:94:f9:32:58:
3c:ae:31:a2:66:38:c5:3e:9a:af:ee:4d:4f:b5:66:
5a:02:68:a7:c0:3b:4d:14:0f:e8:9c:4f:94:5a:d6:
df:8e:69:2e:2a:5c:04:16:15:21:8f:19:6f:01:e8:
71:01:96:df:79:1a:23:d1:b5:42:a2:01:23:a7:71:
92:bb:7b:b5:10:c4:0b:76:a2:67:da:75:4a:b2:b7:
9d:11:61:f0:f4:3c:9d:be:97:2b:e1:26:2a:f2:93:
a0:3a:e9:30:6b:97:ab:d1:e2:18:69:45:88:eb:c5:
2b:90:a7:22:b7:b0:8b:40:27:44:51:cd:c2:ba:1a:
44:f0:0f:33:45:44:25:c5:5c:bd:8a:47:2e:d2:6a:
40:0e:dc:d6:cc:b6:91:89:4a:e0:5e:83:00:a1:65:
54:78:2a:dd:4e:9d:b5:34:ac:22:58:9a:e9:55:cc:
08:9d:30:d9:16:93:72:6e:08:0a:4a:64:b2:e7:3e:
94:cb:60:1c:c4:55:f2:12:c0:44:5c:22:e6:b5:77:
26:8f:b1:99:68:64:1d:1a:f1:3b:64:bc:de:7b:f1:
bb:81:71:fa:92:a8:22:08:3e:36:88:d9:cf:51:33:
1d:c0:dd:01:ad:68:5c:ca:57:d1:71:56:31:28:0c:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:E8:14:7C:E3:58:EE:C2:59:57:B1:CC:AB:E7:36:82:4D:D9:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8555ac3c-2787-3eb4-87a1-f64d47047ee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:fb:3c:49:42:ca:e2:7f:8e:65:7a:60:d3:07:99:7b:fa:df:
09:32:d2:a6:cb:a3:16:76:e4:a8:f1:7d:dd:4e:bd:c8:e8:9e:
be:5a:2a:f8:8a:4d:3e:86:9f:5f:b3:d6:01:b8:7e:60:dc:96:
08:e8:61:fb:42:f4:fe:81:48:30:15:dc:e5:4e:5b:28:2a:f7:
a0:21:4e:fd:31:e8:25:6e:5b:3a:13:4b:da:a3:6a:f5:7a:f7:
07:af:81:07:f5:93:31:c1:26:76:63:a2:1f:8a:5b:87:b1:d2:
22:a6:ac:fc:d5:7c:4c:81:a2:9b:a5:3b:19:09:2e:af:2c:dc:
2d:cc:f0:95:12:cc:c8:14:d4:89:39:be:ff:2d:66:39:73:ee:
64:75:e3:4e:4f:63:f9:07:3b:7d:08:02:a8:05:fd:42:e8:5e:
99:49:43:01:0e:7a:b7:b0:c0:05:f6:e8:f6:09:cb:7a:e2:5e:
7d:08:1b:18:62:fa:73:35:ea:20:c3:7b:77:11:09:96:6d:fc:
3e:00:d7:c5:3b:e6:66:d1:ac:30:01:f9:ae:91:d0:a6:bd:26:
8a:ea:b5:7c:ea:9a:c6:b2:b9:e1:d5:40:96:ed:a0:28:93:b7:
90:4c:49:02:ea:cf:fe:bd:fb:65:84:72:cc:10:63:4f:58:38:
fb:4d:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:04 2023 by rpki-client on console-fra.rpki-client.org