Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b596d281-df1f-3f99-9996-2277fa1be9d2.roa
File: b596d281-df1f-3f99-9996-2277fa1be9d2.roa (raw, json)
Hash identifier: pDQ6rLGlTPaaVnnfWAk1KUChKAnPl9Zi/XpqX0hpZu8=
Subject key identifier: FD:A4:58:1A:6E:1C:B5:18:32:AA:77:E6:5F:A3:70:1B:7A:79:4F:E0
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837BDB66C73F811CC47E8222EE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b596d281-df1f-3f99-9996-2277fa1be9d2.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 29 Jan 2023 05:00:00 +0000
asID: 21723
IP address blocks: 209.53.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:bd:b6:6c:73:f8:11:cc:47:e8:22:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 29 05:00:00 2023 GMT
Subject: CN=d71e2e7f-539c-4d43-b284-9873fd99603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:b9:cb:b6:ab:f7:58:69:1a:9a:42:ce:9d:
e3:8a:87:a6:f3:0f:bc:8b:ab:a1:57:25:ac:e8:b1:
dc:ab:89:db:44:8c:58:50:f8:eb:5d:bd:1d:13:4e:
f5:ec:41:bc:a7:fd:29:da:08:39:21:41:5d:4e:90:
d2:d0:26:2f:cb:80:64:dd:6d:56:55:ce:f8:dd:ff:
e9:59:d1:af:96:52:07:96:cd:29:44:3d:ab:06:27:
6f:c4:e3:00:47:e5:ca:b5:2e:6e:fc:b1:0a:7e:b9:
c4:78:4a:8d:07:68:18:1e:bb:e6:76:47:17:5f:2c:
ca:de:45:e4:79:bf:bf:ef:4c:d9:94:54:85:6b:94:
19:fd:5b:43:91:c5:33:45:31:4e:7f:d0:5a:b1:47:
c8:3a:1a:2b:2b:91:b1:db:3c:23:c6:17:06:17:60:
7c:1a:65:3c:c3:76:e0:00:9e:f7:ab:d8:2a:e9:a5:
19:09:63:cb:03:1b:d3:8b:b5:a6:64:41:96:c5:a1:
2f:bc:66:5a:a8:bf:0c:06:2c:be:93:7c:77:a6:33:
35:6d:f1:b5:66:a3:14:65:04:ec:58:dc:6d:fa:82:
04:01:5b:88:2a:fd:91:80:3f:72:f7:88:ca:a0:e3:
7c:8c:be:80:91:55:88:82:e9:34:0f:09:ce:ec:82:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:58:1A:6E:1C:B5:18:32:AA:77:E6:5F:A3:70:1B:7A:79:4F:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b596d281-df1f-3f99-9996-2277fa1be9d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:02:87:5a:7b:ea:8f:52:07:e0:f6:68:fc:d6:d2:da:3b:16:
2e:34:da:ce:f5:b4:15:9f:e2:0f:d2:75:19:20:c4:29:06:9f:
35:f9:23:b0:39:3e:00:f6:33:ac:33:ef:d6:2e:87:21:04:ba:
79:e8:f9:40:84:f2:fe:af:5c:c5:f8:05:b9:03:07:bc:53:e5:
68:97:bf:51:37:0a:6b:61:72:cc:5b:3d:fb:4c:ca:4b:ac:cb:
8f:e3:95:83:a4:cd:dc:fe:8f:7f:93:4d:30:0e:cd:7d:e4:a9:
bd:64:aa:e6:80:cd:7f:86:aa:b0:5e:9d:6a:cd:74:8a:52:08:
1f:c0:12:c0:26:d6:e0:b0:bb:7f:6f:57:b9:4b:5e:74:74:29:
06:f5:39:4a:ce:69:7e:f6:dd:77:24:33:b4:87:4c:8a:d8:e5:
93:1e:45:04:fe:4c:b9:f1:27:bb:4b:c7:6a:01:9e:aa:fa:e2:
3c:9d:34:d7:1f:77:e6:ec:d6:ea:fa:8b:f1:71:fe:68:77:e4:
12:38:b6:af:f8:5d:27:82:04:0b:18:8a:4a:dd:7a:fa:dd:53:
39:0a:b8:85:83:89:f5:e7:49:d4:a1:85:fe:00:86:fb:71:f6:
05:44:a3:41:02:fe:89:c2:1a:2e:81:d6:c3:0c:ae:8e:7c:4f:
89:16:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org