Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c60a9d61-772f-3c56-9ae5-18c54ccdd9fc.roa
File: c60a9d61-772f-3c56-9ae5-18c54ccdd9fc.roa (raw, json)
Hash identifier: GFgDT9hKe9oA4aYff7nA/nNr9zXctVLiHnunWCiy4Yg=
Subject key identifier: 8B:F4:A9:D6:E9:14:C6:48:BD:05:ED:AB:29:FB:2F:B0:7E:1B:35:38
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4E3E62E61AD95DC050B55D0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c60a9d61-772f-3c56-9ae5-18c54ccdd9fc.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 209.20.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:e3:e6:2e:61:ad:95:dc:05:0b:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=418c7abe-df30-4afe-a762-5a02b60b052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:61:e2:9b:ca:ab:bb:f5:d9:1c:79:9a:b7:
05:9f:16:87:4a:fd:80:bf:80:32:02:5f:2a:56:78:
da:98:de:03:c3:37:9c:21:1e:45:21:c6:ac:0d:50:
b6:be:50:1a:96:30:8f:49:25:1f:93:09:41:b4:9d:
00:15:61:bc:70:bc:b5:b0:00:a8:b6:94:e6:32:7e:
89:11:85:6b:6c:3d:72:e5:08:9d:8e:23:26:a4:f2:
01:e6:f8:c2:96:6f:ee:0b:3f:48:92:19:04:1e:35:
53:3d:d9:df:46:3f:82:6c:f4:6c:55:e8:f3:d9:5b:
7e:b9:40:b4:9f:88:18:34:95:50:e7:50:b6:2f:d2:
26:d9:55:01:cd:b9:3c:0f:7d:55:8b:65:be:ec:69:
3f:07:fa:16:49:cf:a7:2c:7a:56:b9:93:04:af:72:
96:9b:23:bd:e3:de:fb:f0:6a:7c:da:92:c4:af:0b:
91:f1:8d:1e:2e:a4:ed:19:97:f3:29:e4:57:c4:c1:
82:c9:42:c6:ff:71:54:96:15:08:e4:10:ce:90:39:
c4:ff:e4:f6:8e:3c:34:e3:1f:fe:af:1d:54:81:54:
32:f7:f5:1b:4a:50:84:7e:25:e6:49:34:f1:ca:49:
df:4d:c3:d7:20:f4:ed:81:76:b6:c5:f6:0a:12:8f:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:A9:D6:E9:14:C6:48:BD:05:ED:AB:29:FB:2F:B0:7E:1B:35:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c60a9d61-772f-3c56-9ae5-18c54ccdd9fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:69:b3:9c:28:5b:bc:19:ab:1e:32:34:a0:bb:95:b6:92:46:
0f:4e:7a:30:6f:ca:3f:16:33:e5:7b:da:63:a4:61:1e:2e:5b:
5c:91:cc:ee:ab:8f:ce:87:bc:b3:68:a1:04:a5:79:f6:77:2d:
43:04:93:11:0b:e1:a0:fc:10:77:4c:46:ab:f3:62:06:8b:9b:
00:2a:c7:d1:83:a2:11:e4:0e:d6:ad:3d:31:4a:8d:ba:09:c0:
2b:23:0d:47:5a:a4:4b:b2:31:88:f8:4e:20:d7:55:06:78:db:
1f:91:86:b6:57:66:81:95:96:8e:47:7b:20:f5:e8:1f:a3:5c:
33:74:16:98:ed:6f:a6:2a:49:2d:11:f0:1e:59:18:9e:42:30:
90:66:d0:ca:b7:aa:2d:54:76:86:a2:51:47:f4:53:ee:a1:ec:
a6:4b:b0:51:30:88:94:75:87:71:1e:30:90:6d:7d:19:1a:67:
35:4a:66:23:b0:4b:0a:fe:da:a8:f2:1b:bd:3b:fe:90:54:a7:
35:2f:36:87:03:c2:d0:fb:df:b9:3b:d1:fe:34:30:ad:b6:69:
d6:48:e8:47:26:61:2f:16:3c:93:65:d8:ed:48:60:58:9d:29:
3e:5e:68:bc:b7:f9:4a:44:04:7a:77:07:98:3b:84:6b:a5:03:
18:a8:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org