Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d4d699a9-e6d0-3d92-8e52-793d9cb0a29b.roa
File: d4d699a9-e6d0-3d92-8e52-793d9cb0a29b.roa (raw, json)
Hash identifier: xbL+WCEJDZxn9zPBqkMdpElDEb7I4lNZRyXGmIkdWpo=
Subject key identifier: 28:5E:96:E6:DD:D7:31:B9:25:EF:EE:EA:BC:6F:64:74:41:7D:04:74
Certificate issuer: /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial: 010D0C9F4328583822324DC6E9CECBD3FE8ABF00
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d4d699a9-e6d0-3d92-8e52-793d9cb0a29b.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Mon 06 Mar 2023 05:00:00 +0000
asID: 397263
IP address blocks: 204.128.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:22:32:4d:c6:e9:ce:cb:d3:fe:8a:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 6 05:00:00 2023 GMT
Subject: CN=f583089b-bad6-4ea9-86cb-ffe2a16919ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:c4:cd:35:52:f4:d4:8e:4e:08:33:8d:6b:
64:23:c4:8e:85:b4:55:ca:12:f6:b5:8e:d8:5a:bb:
ab:06:a4:ab:e9:e0:7a:21:fd:9f:7a:e9:ed:23:a0:
1e:b4:dc:bc:14:a2:b2:09:62:e1:6d:c2:1f:42:22:
71:13:e0:6c:e9:9c:f9:76:67:0e:41:67:de:71:8f:
4c:99:e7:2e:b6:4e:87:9d:02:79:fe:8f:0c:83:40:
b6:d9:35:83:11:0f:6a:78:0b:19:31:1d:ff:f5:1a:
16:72:64:64:95:6f:0c:4f:e3:51:21:4a:98:2e:1e:
30:2c:e0:7a:7b:19:77:f2:f6:3e:f0:45:8a:32:d2:
a6:29:77:b9:dc:d7:5a:e1:a6:f4:46:04:7c:34:d5:
b6:f2:7f:ef:be:22:08:89:62:be:7c:8a:8a:fb:a4:
b5:ba:a7:22:c8:80:52:ec:40:07:fa:2f:ca:0f:1d:
83:98:82:ff:17:ba:47:b4:f6:32:28:43:5c:31:cb:
93:77:44:de:be:9c:2b:13:df:65:e5:94:cd:6a:56:
d2:7d:f0:c0:84:55:98:2a:7b:54:73:fe:4d:e5:d6:
66:e0:76:ed:7f:7e:33:1d:72:cc:a2:d9:ca:e2:1f:
5b:cd:e0:07:0b:60:8e:c8:b3:2d:85:62:66:72:b4:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:96:E6:DD:D7:31:B9:25:EF:EE:EA:BC:6F:64:74:41:7D:04:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d4d699a9-e6d0-3d92-8e52-793d9cb0a29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
X509v3 Authority Key Identifier:
keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
sbgp-ipAddrBlock: critical
IPv4:
204.128.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:97:3e:fa:e6:fc:eb:f2:30:71:cb:0d:80:ed:a8:09:34:c4:
a2:0c:79:58:bf:51:1c:39:66:78:26:1d:24:7a:d6:aa:b3:40:
dc:04:e7:de:10:03:b7:a3:28:e5:d8:ad:a5:f0:45:a3:26:a8:
dc:dd:1a:b7:b9:ab:5f:50:40:66:6c:19:73:28:0a:40:27:fe:
c3:a1:73:56:69:7a:48:50:a5:b4:c8:c5:c7:ad:2e:ef:51:dc:
54:53:7b:bf:9a:8b:96:3e:eb:34:12:fb:17:18:e3:dd:ee:02:
e9:1f:03:cd:83:84:73:10:ff:af:6b:78:f9:4e:bc:5d:ee:2f:
5b:52:1d:a3:39:7c:e6:c8:8b:1e:f7:fd:a3:f2:5e:3f:dc:e6:
23:99:da:00:ed:41:57:29:78:09:01:99:8a:08:a6:73:88:35:
5d:fd:0f:00:78:20:53:83:4f:16:93:25:4e:60:d2:a8:58:73:
7a:94:ef:08:42:2d:59:3e:f7:20:27:99:94:cc:80:cf:a7:20:
5a:86:96:a7:e2:9f:f3:31:d6:d0:62:94:29:c1:55:82:58:20:
fc:39:12:10:7b:26:32:07:0c:4b:e7:7b:a3:b8:63:67:a4:f3:
7b:5d:bd:7f:a5:e0:6c:33:c9:b6:08:02:12:50:b7:1b:62:15:
7e:bd:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org