Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d78c21-b5c5-338c-9198-29b80a6e3d25.roa
File: 76d78c21-b5c5-338c-9198-29b80a6e3d25.roa (raw, json)
Hash identifier: mgkRNrTdyZXegLd4KgbdjvFKr5OKQxl9Hz1w2Pvlduo=
Subject key identifier: 78:CB:3E:99:70:8F:09:81:6D:D3:05:6E:F1:53:CF:30:1D:72:B2:21
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51817BD41FE6648F319880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d78c21-b5c5-338c-9198-29b80a6e3d25.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 74.82.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:81:7b:d4:1f:e6:64:8f:31:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=32ccdd53-9b3a-4e45-af82-1da13b6ad1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:6a:f7:97:b1:0d:c8:fd:d6:18:1e:1e:3c:
9f:84:22:13:50:b0:5a:ae:e4:71:1e:c6:14:04:f5:
7c:5f:93:55:80:30:0c:cf:88:27:98:3a:9f:4c:cd:
ba:b2:a2:04:c6:8b:49:1e:de:4e:28:9c:6a:94:53:
fa:9e:d6:a1:57:97:02:75:d8:f2:a7:b8:b6:05:4c:
ec:9b:fe:12:80:e2:c1:42:a8:46:cf:07:38:0c:48:
25:d3:f5:07:a0:28:f3:c3:4e:9e:ed:10:e5:4b:70:
e2:cb:00:dc:39:a6:61:71:dc:14:93:1d:a9:ee:17:
dd:eb:83:7c:8e:b4:03:da:d9:73:93:86:99:4d:87:
0a:3b:1f:e0:f1:9b:ea:32:16:3a:d7:ef:96:1c:bb:
2d:24:69:ce:1d:44:7d:db:e2:15:d1:98:4a:11:2c:
4b:78:a2:f0:5e:37:e3:e6:49:6f:88:39:01:34:6e:
98:59:cd:7b:ac:23:26:6b:1a:6c:7d:67:e2:6f:48:
74:ac:86:39:79:9e:0e:9d:6b:22:c2:0d:53:42:14:
9e:b5:47:a6:58:40:eb:d9:7e:0e:b3:e6:13:97:9c:
22:4d:69:f1:f5:87:24:25:d1:c9:bc:8c:71:a9:e8:
23:0f:fc:f5:e1:ee:4a:00:5a:9f:38:98:7d:d4:40:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:3E:99:70:8F:09:81:6D:D3:05:6E:F1:53:CF:30:1D:72:B2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d78c21-b5c5-338c-9198-29b80a6e3d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8f:e0:fa:29:1c:3b:85:f9:73:85:ed:48:bd:38:27:74:c8:
a0:94:37:32:b2:00:97:33:03:3e:f9:2d:7a:a5:c1:dd:97:36:
3b:d1:a2:30:07:95:da:54:49:9e:d0:38:25:d8:de:1c:62:ef:
f3:cf:fa:f7:14:1b:88:fc:5a:aa:50:d6:f6:e8:54:5b:ec:c6:
07:6e:20:de:9c:8d:0f:9d:46:37:db:f5:36:d0:ff:5d:da:43:
74:d5:9f:59:bb:d8:cb:fe:4d:55:9a:3d:a9:60:e4:e4:d7:eb:
7d:28:28:46:96:e7:f3:20:dc:3c:19:5b:17:72:4d:5a:2e:50:
d9:4d:5e:7d:18:c4:2f:20:a6:2b:28:06:ef:20:90:4b:ea:fc:
b8:0e:6a:92:ea:ab:a1:d6:b9:0b:68:2f:dd:d9:ad:a2:a2:d1:
18:47:ce:48:72:e1:38:19:96:58:bc:ee:6e:30:52:13:be:e7:
6f:fb:20:e0:4f:89:4e:1d:a0:0a:66:f1:a4:29:07:80:81:5e:
b8:ac:cc:b6:19:48:6e:1f:85:38:5c:ac:2d:62:5d:cb:e7:f0:
45:d4:77:bf:57:72:b1:92:6f:d1:d7:76:8c:02:9b:b3:c2:46:
f8:9f:88:2a:56:bd:7f:1c:92:90:da:45:c4:92:29:22:a3:8b:
bf:e1:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org