Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8e0ed3f4-5a74-34f6-9a93-6e26b8edae2a.roa
File: 8e0ed3f4-5a74-34f6-9a93-6e26b8edae2a.roa (raw, json)
Hash identifier: i3ipm5rvNqZqEj7bCITrtn1cW36bt85Ea1IVh9nqJcU=
Subject key identifier: BA:66:69:80:72:F9:C9:CF:AC:DE:90:04:E0:54:4B:F3:62:0E:6D:56
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285841E46D9833C43D15E0D2C3B780
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8e0ed3f4-5a74-34f6-9a93-6e26b8edae2a.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Tue 04 Jul 2023 08:44:01 +0000
asID: 1299
IP address blocks: 156.146.128.0/17 maxlen: 17
158.41.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:98:33:c4:3d:15:e0:d2:c3:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 4 08:44:01 2023 GMT
Subject: CN=58d52187-0953-4949-96fc-118a4ce35d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:a4:b7:b4:19:79:26:36:11:a4:15:da:37:
17:78:55:77:d6:66:07:13:5b:cc:5e:4f:57:d1:ee:
bc:1b:c1:23:f3:d6:06:5c:2e:eb:d0:75:28:31:fc:
40:6a:bd:64:f5:62:bf:43:f6:a8:44:11:a7:8c:4c:
16:d8:fb:75:a5:9d:6b:40:8b:23:60:e2:39:c1:60:
76:c2:fe:c9:06:1d:26:7c:91:47:66:31:0b:03:94:
ea:97:5e:c4:50:87:a9:f5:95:59:10:bb:21:78:7d:
db:73:28:fe:fe:39:11:fa:67:46:d9:1a:17:ca:21:
5f:ff:1e:fc:8f:cb:f7:55:07:12:09:43:6e:fb:42:
fd:6d:2c:18:c7:79:ff:d3:80:37:42:7f:14:9a:cb:
0b:b0:6b:46:d6:80:d7:81:32:38:97:1f:60:d8:c6:
87:20:32:85:86:ae:ff:4e:d5:b2:9b:55:4e:f3:f9:
85:38:5c:c4:97:37:9c:fb:ec:71:73:d9:8c:0c:b3:
12:31:28:ea:e8:24:a5:88:f4:f1:73:20:d8:20:d8:
60:c5:62:1b:76:e6:6b:42:b2:ad:d5:1f:c0:b8:f1:
1d:24:d5:c9:5f:ad:a7:bd:50:78:09:d1:ab:f8:d7:
7b:cc:1f:1b:47:59:cb:5d:9c:1e:90:ec:c6:9e:33:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:69:80:72:F9:C9:CF:AC:DE:90:04:E0:54:4B:F3:62:0E:6D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8e0ed3f4-5a74-34f6-9a93-6e26b8edae2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:bc:de:b0:6b:c3:68:b1:77:df:a1:b0:41:62:2b:68:69:7e:
5b:ba:57:9a:8a:53:71:7b:89:5f:30:d0:ad:16:b7:0a:9f:09:
7e:40:41:68:37:a5:af:2c:63:49:f8:0f:29:b7:03:fe:ab:5b:
ed:7a:40:47:07:f4:8c:f0:57:b6:42:c8:92:a9:3c:20:72:1a:
9a:50:d3:38:2f:61:d0:6e:82:da:0d:12:d4:d2:9a:0e:f4:b4:
47:28:06:af:7a:af:0d:a9:49:6e:17:09:03:f5:31:00:d0:92:
42:ab:af:d1:64:40:91:64:c4:37:33:44:bf:21:5a:89:7a:bd:
d3:6e:71:4a:4d:7b:eb:61:5c:e9:dc:6f:05:dd:fd:78:df:6f:
94:e8:dc:26:6c:00:d0:45:e2:49:d2:4c:ac:da:fe:d0:ed:d6:
06:69:4d:f6:d1:25:31:59:b7:26:f5:9b:12:3b:c1:46:5d:a0:
84:bd:1a:ba:59:9e:87:ad:63:0b:b1:73:d9:75:bb:13:0c:db:
e3:ff:38:77:cb:a9:48:a1:28:24:30:65:ae:f2:2f:cb:f7:5c:
54:d7:57:bc:5c:da:65:89:05:bf:d6:8c:f1:7d:c7:3e:26:bd:
ba:2b:f4:23:52:0a:67:44:ee:81:49:a9:d6:c7:b5:a5:d2:3b:
2f:e8:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-ams.rpki-client.org