Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/faa78d1b-c425-39da-8409-f1e32dcabed7.roa
File: faa78d1b-c425-39da-8409-f1e32dcabed7.roa (raw, json)
Hash identifier: ZEKjesq3KsR6CXQm5+Q6q0ESmG/sZVStz0rpJIDW6G8=
Subject key identifier: F3:C4:4A:CD:40:CB:24:95:47:4E:DF:17:32:8B:EB:B9:38:92:C7:35
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7A322007C8755C04FCCD900
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/faa78d1b-c425-39da-8409-f1e32dcabed7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 172.102.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:22:00:7c:87:55:c0:4f:cc:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d147b7c4-d5f0-45b5-af50-e72b8b833f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:5f:75:d9:c5:27:dd:5d:ea:79:84:71:d5:
10:32:ee:4f:7f:61:44:a9:38:5e:4f:43:73:69:34:
1c:1d:09:50:60:5f:b2:a3:f8:3b:17:8b:06:46:fa:
53:6e:d6:7d:df:6e:91:fe:c5:b1:b2:01:24:40:74:
3a:5b:83:f3:a2:b8:c4:86:5c:02:80:43:38:44:2f:
7f:5b:31:2b:7d:60:f6:1d:56:6d:58:17:75:0b:0e:
26:a9:ad:2e:3c:2a:70:89:0f:b5:ed:35:ec:05:ff:
1b:e3:40:9f:10:e9:ef:83:98:d9:5e:86:31:12:bf:
c4:00:cf:3e:32:06:41:ac:6b:3f:5e:33:59:ad:93:
66:5f:e6:21:f2:f3:ef:e5:c4:cb:5b:69:62:55:fb:
a3:dc:39:87:cf:01:cc:de:74:87:a7:4a:36:d9:2c:
0c:14:e5:51:a1:64:ec:1e:38:d5:f5:68:d4:49:d7:
6c:2d:67:51:10:8b:3f:35:ae:47:94:f5:bd:7b:2f:
21:0a:28:78:33:83:69:3b:54:fc:e6:7a:bd:0a:3a:
a4:1e:f8:ea:af:4c:53:38:c5:e7:de:9f:ee:93:68:
eb:ac:fa:62:78:0b:68:01:23:6d:5e:26:1e:7a:2d:
cb:25:3c:2f:52:33:3c:c4:fc:dc:c7:ed:1d:8b:ef:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:4A:CD:40:CB:24:95:47:4E:DF:17:32:8B:EB:B9:38:92:C7:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/faa78d1b-c425-39da-8409-f1e32dcabed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c4:37:b1:2e:20:70:ce:88:dc:91:b7:c8:0b:69:dc:75:b5:
9e:fd:5b:43:ad:8e:6d:e0:de:cb:a2:d6:a9:14:69:6d:05:d9:
49:80:da:fb:cf:b2:ed:64:0c:3e:83:bf:65:1f:d3:f2:ea:00:
5b:f3:1f:46:a9:f5:36:48:cf:47:fa:2d:a9:e0:b7:13:ba:31:
2d:24:0c:01:8f:e9:0f:4c:6e:39:33:03:3a:7a:c2:57:53:36:
d1:2b:a4:21:f3:dd:5c:b2:9c:6c:2c:5d:bd:41:18:5e:88:78:
36:94:71:85:39:eb:22:ec:61:21:30:89:eb:80:41:be:ec:50:
76:56:fe:2c:6e:e5:b2:2b:63:b5:a0:ca:74:10:5c:05:5c:01:
75:f1:cb:75:96:58:b3:d2:3f:96:60:a1:b4:ea:4a:33:69:77:
27:f8:0b:1f:92:df:31:41:d1:b5:69:bc:e1:59:b9:2d:6a:32:
a1:a4:5e:99:71:f9:69:3d:24:31:64:18:f5:a1:56:24:4a:ba:
43:8f:67:bd:fe:9c:12:6c:8f:9e:13:50:0e:28:b1:12:a4:30:
02:64:a5:b3:6e:29:92:25:0c:18:f4:60:eb:dc:96:b2:44:bf:
e5:4b:70:bc:31:0b:81:c3:22:bd:b8:8a:83:e7:ff:e4:83:ba:
e3:23:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org