Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8226a2e-33b9-32d7-be69-2072f14bb8a4.roa
File: c8226a2e-33b9-32d7-be69-2072f14bb8a4.roa (raw, json)
Hash identifier: pgF4lFzMhUjIU30KyPcnktdb7+fYC2h/L1z4GIkQnR8=
Subject key identifier: 63:41:A7:10:E3:C6:E1:F1:65:8E:B1:9A:AB:D7:08:27:A9:97:3F:D7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842ACDD744486CB6F5112FC4400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8226a2e-33b9-32d7-be69-2072f14bb8a4.roa
Signing time: Tue 25 Jul 2023 12:00:00 +0000
ROA not before: Tue 25 Jul 2023 12:00:00 +0000
ROA not after: Fri 26 Jan 2024 05:00:00 +0000
asID: 11910
IP address blocks: 184.104.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ac:dd:74:44:86:cb:6f:51:12:fc:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 25 12:00:00 2023 GMT
Not After : Jan 26 05:00:00 2024 GMT
Subject: CN=64777d86-cfaf-4e27-a54e-2420b4f260ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:b0:cf:a7:e2:68:b1:79:ff:09:c4:fe:b1:
ab:44:0e:9c:76:9a:45:e5:55:0c:ef:d6:b2:cd:15:
9c:42:f0:af:db:da:1c:e8:39:fd:44:fe:50:fc:f5:
56:f7:2a:0d:3d:8d:66:e1:73:00:1a:dd:f1:47:c6:
b2:6e:ab:45:aa:ee:01:4a:05:b2:55:72:10:cb:b1:
43:3a:0a:0d:57:66:ed:54:f8:98:7f:3f:0c:2d:1b:
e5:98:28:40:d2:97:6b:f5:76:9d:54:ff:75:ee:88:
8e:38:12:80:07:d0:c6:09:f5:07:5c:39:58:8c:17:
e6:da:eb:e9:71:73:45:a8:dc:55:bc:48:61:e7:c5:
bf:81:b1:dc:0d:f4:b3:34:df:2e:8d:12:02:82:3f:
ba:2d:03:3b:42:3e:81:2b:01:d0:e5:09:fd:97:2e:
4e:01:86:92:ba:05:22:b8:2f:10:ed:21:19:be:78:
db:c3:7a:a1:94:3e:0a:58:4e:cd:9c:4d:07:d3:f4:
30:bf:0d:5e:b6:1d:aa:ba:14:db:5f:f9:f0:b9:fc:
67:7c:26:75:62:c7:4b:30:d6:ac:85:e8:fa:4e:4f:
ee:ae:85:2c:c9:ae:5c:ef:bd:64:a6:09:49:c5:0d:
62:ef:09:b2:d5:c1:f9:91:8f:06:4b:56:b3:7c:aa:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:A7:10:E3:C6:E1:F1:65:8E:B1:9A:AB:D7:08:27:A9:97:3F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8226a2e-33b9-32d7-be69-2072f14bb8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.104.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:c4:8b:35:65:2e:01:8c:48:ba:c7:5b:b6:d8:9d:53:9b:76:
6d:a9:3c:f8:d1:8c:3b:b9:73:88:0e:3e:85:e7:22:26:83:91:
0d:a9:9e:6c:ca:f1:3f:fd:30:ff:f5:85:d5:1c:f8:ff:ba:be:
d7:4c:cb:ae:7a:1c:a5:0e:5d:e2:67:93:90:a1:01:d5:ff:c6:
f4:76:00:30:78:31:bf:7c:0e:d6:81:61:76:57:c4:d4:f5:3a:
66:c0:ca:00:40:03:ef:a4:17:84:a0:69:55:e7:57:ee:06:21:
fa:d7:47:1a:03:c2:d7:b5:3f:a1:c6:c4:37:9a:27:9c:2c:2b:
45:49:fa:d4:6e:5b:5e:6d:f6:81:35:85:dd:ca:38:bf:5c:fa:
60:3e:9d:ff:ad:8b:bd:6c:16:bb:ca:24:dc:ba:69:f0:bf:1a:
3d:b8:ed:7e:5e:49:9e:e1:69:aa:b9:9b:42:4c:0a:0e:d9:e3:
ef:27:91:e4:08:2d:82:c9:b5:14:02:fa:47:72:f3:f2:79:59:
0b:d7:4a:f5:ae:02:17:1d:77:a8:73:47:e3:aa:c1:eb:04:23:
2a:6c:e0:a7:4c:b4:80:f4:e1:9c:d0:00:72:7d:b0:73:26:ff:
10:48:7f:20:37:f6:c1:86:d8:4e:43:8e:6c:b4:ae:f8:18:37:
65:c2:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 07:43:02 2024 by rpki-client on console-ams.rpki-client.org