Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/887f6558-92d0-30d9-8c93-0e559c1b120c.roa
File: 887f6558-92d0-30d9-8c93-0e559c1b120c.roa (raw, json)
Hash identifier: oHBhqmuwKmm198RH0OhJG3FqllqLqagwWpBCGqb8hoc=
Subject key identifier: 65:15:C7:FA:0D:D2:5A:33:2E:FF:3C:23:C7:BA:73:3E:D5:6E:7C:58
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858428197DE71F71B8F3D738AD4C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/887f6558-92d0-30d9-8c93-0e559c1b120c.roa
Signing time: Sun 09 Jul 2023 12:00:00 +0000
ROA not before: Sun 09 Jul 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 14978
IP address blocks: 209.51.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:81:97:de:71:f7:1b:8f:3d:73:8a:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=8143cb47-1396-4903-a58d-de50b9084439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:d8:11:d6:54:7e:c1:66:bf:a4:61:a5:74:
5d:cb:ac:a4:a6:14:0a:63:c0:eb:a3:b2:4b:65:bf:
c5:32:f6:8b:b8:37:0f:32:7e:68:9d:0d:19:c2:16:
3f:7e:ba:d3:fa:63:84:12:65:5a:5f:aa:7f:ba:44:
6a:c7:93:04:6a:34:a7:bc:9f:4b:ee:11:37:83:a8:
fc:4b:a8:eb:8a:05:f8:0a:d5:23:bf:ad:5e:1c:bc:
8e:72:f9:37:6d:b3:14:bc:6c:3a:b2:60:16:14:c2:
7c:52:6c:e7:ae:bc:3b:b1:81:24:7e:56:ea:15:c3:
ce:1d:ac:99:ed:7e:e2:d4:97:55:a4:74:dc:32:b6:
d3:d1:6e:c2:5a:c4:94:98:a3:1e:82:6f:31:7f:c7:
a5:13:95:b5:2a:12:4b:54:90:7d:24:16:88:35:0a:
12:7a:20:f8:64:03:df:53:a9:4a:e7:f3:40:6c:88:
4c:ea:28:0b:cd:dd:58:5d:89:12:8f:1c:03:28:ba:
1c:02:b4:f4:2b:85:31:3b:c9:8c:6f:22:4a:8f:d8:
f2:8c:93:6e:cc:88:8f:4e:c8:36:70:ca:71:2b:9d:
f5:48:77:98:8b:7d:14:6e:ae:b1:d2:c3:69:2e:5f:
fd:82:6f:80:0b:30:40:e5:43:48:b3:a6:9a:fe:f3:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:C7:FA:0D:D2:5A:33:2E:FF:3C:23:C7:BA:73:3E:D5:6E:7C:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/887f6558-92d0-30d9-8c93-0e559c1b120c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:88:6f:ac:ec:b6:ad:3e:3e:b7:86:05:19:7f:52:f7:68:2c:
8f:50:c2:78:71:fe:27:bd:a4:d1:5a:3a:10:94:53:38:ac:aa:
5e:bf:5d:c7:e0:c5:97:42:b7:fa:ca:39:aa:3c:d7:71:a6:ff:
e5:ed:f4:5b:0b:70:57:1a:a6:c8:fc:80:c2:d2:e6:11:7a:e3:
4d:db:8d:3d:52:51:93:cf:e9:40:3a:b7:db:ef:2a:63:eb:e3:
4c:5b:c3:9e:46:9f:ec:13:44:3e:05:56:1a:7b:3c:e5:16:0d:
cc:b5:5b:78:46:46:83:b5:34:35:09:6c:a1:c0:15:62:1c:dd:
a8:d1:57:41:87:5e:46:09:bd:92:3f:2d:92:2d:1f:c1:4d:7e:
5e:16:92:79:5d:a8:7b:06:db:a6:12:d5:20:d0:44:73:22:42:
3d:3a:2b:02:30:c2:4a:7c:6a:11:37:95:33:27:86:84:6d:bb:
15:52:b0:41:e7:2f:0b:b3:dc:5f:21:c9:dd:12:ce:82:87:74:
da:15:d3:a9:62:dd:ed:ae:2b:68:93:cd:1a:e1:1a:99:bf:33:
b4:51:a4:ff:80:91:99:87:b5:81:69:64:75:57:3d:60:c7:8e:
a4:d3:da:0d:01:48:04:a1:f7:83:de:6a:82:c2:96:07:ed:19:
37:ba:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 05:18:05 2024 by rpki-client on console-fra.rpki-client.org