Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d34ec4d-ad3c-3a2e-a647-2ce80e9ee529.roa
File: 3d34ec4d-ad3c-3a2e-a647-2ce80e9ee529.roa (raw, json)
Hash identifier: L7DJHSoH6wPwm1opeSbd034xZNtd+HE7IiQujERbhlQ=
Subject key identifier: 8B:44:08:6D:12:AF:43:0E:0A:06:37:F0:67:FD:68:B3:F9:2F:19:FA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583C30A7D906A0AC96E26D879280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d34ec4d-ad3c-3a2e-a647-2ce80e9ee529.roa
Signing time: Wed 08 Dec 2021 05:00:00 +0000
ROA not before: Wed 08 Dec 2021 05:00:00 +0000
ROA not after: Mon 11 Mar 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:30:a7:d9:06:a0:ac:96:e2:6d:87:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 8 05:00:00 2021 GMT
Not After : Mar 11 04:00:00 2024 GMT
Subject: CN=06e96096-d234-402a-9903-6a2304cd0177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:7b:39:bf:5f:25:9e:d1:cd:ae:03:c3:e6:
6f:45:cd:fb:2a:01:d9:cb:89:e9:c2:a3:c3:a1:2a:
d4:0b:fb:27:b1:cd:7e:2c:79:84:8c:a7:4d:10:94:
9b:2a:54:5e:9f:15:b0:0b:2b:df:d9:e8:ec:60:f4:
1a:1d:1d:d7:4b:a2:92:5a:48:62:46:af:2d:6c:73:
b1:99:f5:e9:ad:95:09:03:d7:87:a8:8f:21:53:c0:
e2:01:ea:1b:ed:7e:55:ff:5f:4a:68:62:bf:12:86:
20:a8:02:76:b2:a6:27:c2:b9:7e:f8:67:d5:42:40:
9d:9a:0b:09:30:5f:b4:de:cb:de:93:16:18:19:3e:
4c:8d:52:05:0b:11:9b:86:68:2f:2c:19:9f:21:6a:
8a:7b:e8:2f:65:7b:47:05:03:54:de:32:72:6b:4a:
cf:ca:54:2e:ce:50:f9:d1:5a:85:b1:82:19:fe:6d:
c1:50:0f:07:5e:d7:8d:31:c5:7d:00:de:d7:2f:85:
cf:a6:98:29:06:fc:3f:67:6d:07:ed:ab:d8:02:12:
4e:fc:fd:1c:cd:cd:9d:65:f1:88:52:77:16:62:e2:
88:1f:cd:90:95:49:d4:16:d4:43:77:b0:a3:7a:b5:
d7:1d:de:bb:38:83:1f:47:af:aa:16:d5:fd:20:7c:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:08:6D:12:AF:43:0E:0A:06:37:F0:67:FD:68:B3:F9:2F:19:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d34ec4d-ad3c-3a2e-a647-2ce80e9ee529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:19:a0:43:e5:fc:ce:fc:80:6a:60:90:de:87:c1:8c:11:34:
23:76:9a:ec:02:2a:ff:23:8e:87:9e:4e:d6:e2:ed:40:78:7c:
af:49:64:86:0d:5c:ef:3b:9d:54:ee:66:fc:7f:7e:59:2f:f5:
30:2f:15:cf:91:e0:69:2a:1b:a6:33:d1:33:36:52:65:3f:86:
fc:84:6a:be:b3:aa:f3:5b:24:e4:ce:7e:1f:bc:df:31:d0:cf:
11:5f:ca:12:8a:e1:46:0c:71:63:16:e0:61:e9:95:73:c7:1c:
36:35:f0:1a:18:ac:41:b6:ec:f0:d4:95:03:92:67:fb:ff:5e:
f2:a9:ce:18:9d:6c:90:eb:f2:69:a3:d4:7a:99:22:42:10:6a:
04:db:56:5c:15:51:4e:c6:84:e3:5f:41:cf:0a:d2:0a:2f:c2:
2f:da:14:0d:5b:7d:f8:6d:c5:7a:25:ac:80:d6:09:6e:1f:18:
44:d6:f4:42:04:8d:f5:c3:6d:17:5e:5d:d1:17:f9:9e:2e:b0:
07:18:10:a0:3c:ba:07:32:8c:56:c7:1a:d0:5e:dc:5b:2e:65:
20:1f:8e:31:56:fc:1d:bc:87:65:a7:46:9f:07:21:0b:fe:3d:
1f:5f:83:fa:d1:a1:a8:23:68:a9:23:f9:69:df:93:16:e2:23:
42:1a:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 05:07:21 2024 by rpki-client on console-fra.rpki-client.org