Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f293f0f5-f381-3dc9-8ff8-3dcf2b5456b4.roa
File: f293f0f5-f381-3dc9-8ff8-3dcf2b5456b4.roa (raw, json)
Hash identifier: OBkTXGtNNOFZlsunHjHR+k6c50+WslZ6x9IVrsEPEcY=
Subject key identifier: 7D:0E:4A:A6:79:0C:FC:96:B7:4D:7E:42:8D:AC:0C:79:9F:F6:F0:EA
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4DF4D094BD1DE44DBDA7E80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f293f0f5-f381-3dc9-8ff8-3dcf2b5456b4.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 64.114.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:df:4d:09:4b:d1:de:44:db:da:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=cf0db2a9-f5b5-465f-b577-c8e7296c03c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:37:68:3f:57:f7:3e:54:33:c1:f1:4b:a7:
12:1b:15:d4:2f:63:5e:96:6e:57:b5:eb:73:d3:53:
46:f5:fa:5a:26:b4:0c:cf:37:65:6e:b8:59:26:cc:
30:34:66:6b:98:db:79:6c:a8:77:33:ac:8d:ba:bf:
a3:ce:dc:53:2f:69:48:ce:cd:b9:de:c6:ff:ac:ca:
4e:30:7c:1a:f9:a6:4b:fc:2c:0f:61:94:53:68:5d:
b9:76:3a:cd:23:7b:72:d8:c3:02:a3:be:62:95:e2:
1e:46:7c:52:84:fa:d4:34:d0:4b:13:07:cc:e8:07:
ce:2d:a5:3e:73:e7:8c:cb:d2:1d:0c:4f:66:49:a8:
dc:05:62:b3:02:0b:4e:ae:e2:a8:51:c0:6e:67:08:
96:84:ad:51:4c:c1:cb:0e:b6:6a:ae:50:3f:d3:5d:
e7:41:0e:e2:b1:dd:e0:18:27:8d:cc:41:ac:f2:f5:
88:bc:2c:71:85:73:37:48:d0:f9:a9:63:5b:d7:6b:
7e:7f:4b:ce:3c:91:8f:88:75:f1:ec:69:22:93:34:
c5:fa:df:1b:83:de:90:fc:fe:75:42:27:e1:ac:24:
ea:de:3e:c5:48:9e:99:7e:c3:4f:0b:cb:e5:75:9c:
14:d9:89:a6:d7:7e:31:31:31:56:48:cb:6e:6d:06:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0E:4A:A6:79:0C:FC:96:B7:4D:7E:42:8D:AC:0C:79:9F:F6:F0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f293f0f5-f381-3dc9-8ff8-3dcf2b5456b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
64.114.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:07:49:97:d4:a3:52:53:57:21:ad:09:1d:86:2b:0b:d0:b5:
ef:c9:e7:a0:23:74:6e:3e:2f:72:3d:fa:97:2b:b2:01:87:e3:
4d:34:f8:48:7f:8b:a9:70:d1:85:76:21:ef:01:cf:ed:fe:fc:
cf:6d:9b:6d:1a:59:33:7a:6e:eb:f0:f6:bd:b8:c8:7d:4d:0d:
d5:05:7f:8d:ee:7c:d9:82:64:19:e3:95:6a:31:cb:38:74:ad:
57:41:38:b3:7e:ca:bd:73:e8:f0:92:ed:9c:ff:31:7c:cf:e5:
3e:6e:0a:22:ac:64:e8:e1:3e:fa:7f:88:1c:b9:2e:52:fa:1a:
35:93:37:6e:00:30:e3:60:02:20:27:a8:f1:eb:0f:84:36:a7:
e2:2a:6b:63:09:7b:c3:54:a3:f0:da:87:5b:5b:c5:4c:cc:b6:
b5:f6:8f:86:ec:30:6b:6e:87:55:5d:0c:4c:9c:28:9a:6e:25:
54:7e:34:bd:9e:27:1c:9b:57:d9:37:2d:d3:95:c8:0b:f2:a5:
1f:17:b2:3d:a8:39:55:e8:c7:43:e2:d4:e7:23:bb:d1:e8:96:
94:07:85:a1:ad:83:fd:2d:de:6a:6b:1e:ee:db:81:01:a3:8f:
6b:6c:6a:4d:0c:bc:bb:ca:ea:6c:57:ef:f6:38:06:62:4b:34:
8d:cc:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org