Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1482e64-6a12-301b-8250-42ce7c322759.roa
File: d1482e64-6a12-301b-8250-42ce7c322759.roa (raw, json)
Hash identifier: tRcAk/GwOu3iHuqAbLjjHaoW9otE1EP8C0DHPB+a5HE=
Subject key identifier: 0E:7D:05:5C:71:45:C4:CE:5D:2F:30:27:85:C4:EA:D0:53:50:8C:ED
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285843693FB43E1FFDAE30B2787500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1482e64-6a12-301b-8250-42ce7c322759.roa
Signing time: Mon 02 Oct 2023 01:00:23 +0000
ROA not before: Mon 02 Oct 2023 01:00:23 +0000
ROA not after: Sun 31 Dec 2023 02:00:23 +0000
asID: 701
IP address blocks: 208.238.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:69:3f:b4:3e:1f:fd:ae:30:b2:78:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 2 01:00:23 2023 GMT
Not After : Dec 31 02:00:23 2023 GMT
Subject: CN=d41ec5db-e58f-40bf-bdef-96ce3651fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:ef:97:ac:8d:0a:85:16:ec:d6:b5:96:b1:
03:a6:a9:29:c2:4d:e6:e1:91:60:68:d7:d0:48:ae:
8f:4e:d9:5d:8f:52:46:4d:59:d2:93:15:61:fe:57:
8f:72:6e:44:fe:5b:96:5e:da:6e:be:c6:f0:8a:31:
1c:73:99:d2:00:8d:11:9f:51:23:37:02:b7:c6:9e:
37:ed:2c:b2:bf:26:35:70:7f:6b:ff:2d:51:19:8e:
b8:1e:c9:06:4e:82:9a:f6:81:2f:c8:7b:f3:09:07:
76:f3:94:54:e0:9e:39:b3:a0:40:9b:f9:e9:e5:cb:
cc:4c:f9:0a:ee:bd:9b:ce:55:68:ed:86:2a:08:44:
a1:81:bf:28:21:72:59:8c:8f:77:db:1d:a6:20:2f:
6b:c7:58:69:92:8b:60:36:8f:3e:55:40:c1:90:3e:
5a:44:58:fe:84:0e:9a:33:8e:79:73:78:4e:3e:13:
ed:46:b3:57:56:78:20:70:ac:fa:0d:d3:af:a0:e6:
0f:2f:8e:41:4d:4f:d5:78:a0:51:77:57:ad:56:34:
61:53:9d:3d:8b:68:db:ec:a5:43:68:ec:3b:93:ec:
1e:06:97:c3:bc:f9:ab:9c:bd:2b:cb:f6:73:6e:cb:
a8:12:e1:ff:95:2a:67:76:01:df:18:20:85:14:8d:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:05:5C:71:45:C4:CE:5D:2F:30:27:85:C4:EA:D0:53:50:8C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1482e64-6a12-301b-8250-42ce7c322759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.238.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:59:b8:0f:a3:40:54:aa:96:89:ca:eb:ad:7a:7f:4e:80:3a:
e3:60:bf:61:95:c4:35:eb:3a:c5:39:c7:67:b3:65:7a:4f:19:
69:29:13:0a:d1:b4:74:c7:76:4f:b0:c3:4b:08:b1:63:0b:7f:
c1:31:03:9f:02:df:0a:22:1c:b7:52:9a:e4:4c:ec:92:25:fc:
85:2b:69:11:38:2d:18:76:f7:e5:ff:2a:42:f7:f0:0d:e2:53:
d7:dc:22:45:bb:82:4c:f3:39:06:c2:c1:86:a5:3d:43:56:da:
49:90:e8:9e:8a:72:28:3e:d4:7f:f1:d8:44:04:28:4a:19:d2:
06:71:35:1f:da:ae:98:57:72:dc:d0:4f:61:af:62:0e:4e:64:
a1:9b:77:ca:8b:d8:fb:ca:13:2a:97:4c:94:7f:9c:22:87:cf:
24:12:24:b1:15:ad:46:ce:a7:5b:6f:ab:56:8c:bf:c3:be:32:
40:81:44:61:58:fe:47:20:7c:4c:6b:d7:4b:01:24:70:d0:db:
12:99:e0:01:22:05:e9:d0:fa:32:7f:57:81:c1:4a:4d:e6:ee:
d0:dd:c8:6e:71:fe:7f:dc:0b:83:02:cf:a0:6a:44:b7:4d:cd:
cf:64:5f:11:81:b2:db:ec:15:b6:62:2f:ff:07:5b:d4:c6:e9:
da:4a:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:37 2024 by rpki-client on console-ams.rpki-client.org