Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/897301c5-7957-3924-b405-b9becffdad0a.roa
File: 897301c5-7957-3924-b405-b9becffdad0a.roa (raw, json)
Hash identifier: L/Vj8VPAcBxKQGWia+dylcRRDuil5R1Vs922axTtgas=
Subject key identifier: 7A:DD:02:34:CE:BA:A4:E1:01:48:17:F3:21:C7:55:1A:2A:DF:0B:81
Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial: 010D0C9F4328576D51CC73C042CFC1739122B195
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/897301c5-7957-3924-b405-b9becffdad0a.roa
Signing time: Mon 27 Jul 2020 16:37:16 +0000
ROA not before: Tue 21 Jul 2020 04:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 3925
IP address blocks: 209.165.214.0/24 maxlen: 24
209.165.201.0/24 maxlen: 24
209.165.202.0/24 maxlen: 24
209.165.207.0/24 maxlen: 24
209.165.209.0/24 maxlen: 24
209.165.211.0/24 maxlen: 24
209.165.212.0/24 maxlen: 24
209.165.213.0/24 maxlen: 24
209.165.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:91:22:b1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
Validity
Not Before: Jul 21 04:00:00 2020 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=039c565d-dfff-4a43-9673-547e59bb79d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:c9:cd:1e:3b:1c:9a:d8:3d:73:b9:f5:42:
82:a5:e8:86:08:ca:2b:10:b4:8b:ff:d3:a8:9f:e6:
37:37:ac:ea:75:38:08:0f:2d:ea:31:82:b0:d5:ef:
1c:5d:98:69:07:18:12:68:d2:f0:31:0c:fd:f5:67:
73:94:be:69:a2:76:e3:55:6e:37:28:39:62:1c:11:
77:58:59:ea:00:81:0b:04:6d:b8:db:f2:89:30:f6:
e8:c5:a7:4e:ff:30:ab:a9:ed:ee:92:4f:e7:90:23:
2e:97:3f:d8:8a:91:38:0f:c4:b0:06:90:ac:18:63:
4e:a6:c9:20:67:e3:01:88:79:b7:a6:5d:93:64:7e:
83:53:9e:26:85:fb:34:4c:da:14:09:81:66:73:2f:
82:6b:b3:5c:7e:1f:59:9c:f7:b6:e7:2e:f6:a0:6d:
09:8a:8f:cc:ff:9c:02:50:7e:3f:94:cc:43:3c:fd:
8e:e5:aa:b8:3a:43:bc:c0:2c:d0:7c:54:90:a5:e0:
25:91:f9:b2:0f:60:2a:c2:38:d4:7b:fd:a8:4c:e5:
2c:00:cd:b5:43:ab:d2:23:f9:1d:cb:7b:25:16:32:
1e:e5:92:16:f9:b0:a2:f7:e7:f2:6a:c0:c5:74:28:
05:13:fb:5d:0f:a5:2b:41:a8:47:e6:5c:ad:82:ec:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:02:34:CE:BA:A4:E1:01:48:17:F3:21:C7:55:1A:2A:DF:0B:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/897301c5-7957-3924-b405-b9becffdad0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
X509v3 Authority Key Identifier:
keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
sbgp-ipAddrBlock: critical
IPv4:
209.165.201.0-209.165.202.255
209.165.207.0/24
209.165.209.0/24
209.165.211.0-209.165.215.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b6:cf:85:65:ab:4c:18:48:19:be:f4:35:69:11:2e:a7:18:
29:78:99:db:c1:3e:56:55:73:ad:a4:25:05:9e:2c:6f:5f:f8:
7c:4f:9e:1e:42:1d:99:e2:19:a6:d0:9c:ff:52:3a:5e:06:de:
ce:07:b2:5d:7e:2c:98:22:67:6e:b9:74:9a:0c:e3:a9:b9:2b:
96:42:ca:e0:00:51:96:97:9d:4e:7d:5b:e4:e7:17:60:9f:85:
a4:cd:25:8c:d6:fa:55:83:84:68:4a:87:e9:26:00:ef:9f:95:
23:d0:22:da:be:a3:e5:d5:d7:c0:46:26:94:dd:55:62:21:8a:
17:69:df:06:a8:57:a8:a1:3b:f5:95:14:db:53:54:d4:5e:4a:
a9:fd:82:95:10:77:e9:61:f3:09:e3:5a:56:78:98:2e:76:b7:
0e:38:99:9f:87:f3:d9:09:df:e0:b6:8d:e3:1e:23:08:6b:00:
05:46:d4:b1:5e:30:67:25:e4:4f:ec:44:32:e2:72:72:fa:f7:
10:bc:c3:40:9b:fe:8a:88:16:2f:56:e3:7d:4f:a3:a2:83:62:
6e:48:38:6d:70:22:39:3b:20:5c:f3:56:4d:19:32:74:3d:85:
c8:e5:63:cb:1e:bc:9f:25:7a:a1:b9:ee:4a:8a:5c:2e:29:21:
10:3c:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:16 2023 by rpki-client on console-fra.rpki-client.org