Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01886abc-bce9-3409-820e-d095708a71ca.roa
File: 01886abc-bce9-3409-820e-d095708a71ca.roa (raw, json)
Hash identifier: v3PZfWTcZdgaXi0eTO3SWVWQ+PB8Jmkj31nzgEsgLqo=
Subject key identifier: E5:EF:1A:C4:78:D0:0E:E5:BF:7E:BA:1B:73:17:D2:F6:D8:8D:E3:5C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE56A54B94C0448EEF78BBE
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01886abc-bce9-3409-820e-d095708a71ca.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 10965
IP address blocks: 205.200.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:6a:54:b9:4c:04:48:ee:f7:8b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=02dde5fa-0e24-4949-87e8-d7cbd02d0d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:b3:6f:63:32:c0:de:de:b1:e8:1b:1a:fd:
4a:12:4d:e7:5d:f2:fd:dd:af:90:50:8d:7d:db:15:
d8:4d:4e:0e:4a:1c:d1:cb:2c:58:50:68:6e:07:9d:
49:08:82:d5:d6:95:a1:b1:ef:7b:07:74:01:17:53:
be:46:71:ff:cc:f5:25:20:16:e0:af:38:59:59:41:
04:fd:fd:36:73:42:fe:3a:42:6a:46:b3:47:d8:ec:
9f:1b:91:54:23:d4:27:37:b1:6d:9e:f0:f0:fa:6e:
b8:34:66:27:20:61:57:44:1b:be:f9:63:bc:18:1e:
79:c3:7e:70:8f:4d:a3:f6:44:30:75:5a:d9:73:b1:
f5:d4:01:d4:84:1a:f1:d4:06:79:a7:bf:e1:f2:f5:
e3:3a:3c:6b:fc:2d:1e:1d:46:f5:1e:fc:a6:f3:ad:
67:bc:98:18:25:ea:b2:8e:21:46:ea:e9:74:2c:6f:
6c:60:0f:c7:2d:a7:39:6e:bc:5d:28:31:8d:b0:bb:
10:95:10:1a:2d:7b:7c:f7:71:5b:35:e3:e9:cd:25:
51:7a:d0:30:13:c7:59:7a:e2:58:43:95:53:f4:20:
76:4b:a2:3b:65:fc:58:f7:27:53:e6:7c:e3:56:05:
b4:ea:da:9d:e7:aa:c7:aa:5f:f4:89:f1:77:56:22:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:1A:C4:78:D0:0E:E5:BF:7E:BA:1B:73:17:D2:F6:D8:8D:E3:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01886abc-bce9-3409-820e-d095708a71ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:85:5c:70:48:b4:d0:7b:8a:91:79:88:28:64:ac:97:08:cc:
6b:e9:47:25:f8:52:4d:8a:02:42:a8:15:35:76:21:07:9b:80:
24:5e:0b:c1:93:49:ae:11:07:2f:e8:29:9a:17:d9:4f:61:2e:
7f:a1:f5:af:24:85:c8:ca:79:c8:44:35:26:b1:51:48:5b:f3:
b0:00:83:13:4e:0d:4f:81:03:0d:c1:09:ce:57:f4:9f:bb:2e:
72:5e:e3:71:a1:72:3a:60:66:bc:c5:4d:7c:45:41:a4:ef:bf:
c2:98:85:9a:e7:c4:c4:d6:7a:10:b2:9a:92:c8:f3:84:9a:a4:
4f:9f:ac:49:cc:20:d9:94:46:19:6d:21:25:9d:f0:d6:7f:16:
8c:cc:80:31:f0:f6:f2:15:27:f4:7c:b1:4a:b3:6d:a6:c2:c9:
23:6a:72:14:9b:cb:77:d1:b7:b0:a5:85:58:d3:8b:0e:f6:a8:
5a:6d:75:5d:1b:ad:70:fe:bd:5a:c9:55:e0:f9:ef:ee:ab:fc:
3c:80:ad:b1:0a:43:eb:89:8a:0b:79:1e:41:a0:a4:fd:93:a6:
ad:ca:7e:6f:e8:a3:2f:c5:24:61:f4:25:3c:54:6c:36:53:1e:
bd:c4:c9:d0:e1:04:ae:ad:10:89:55:b9:de:52:09:17:01:06:
08:db:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:21 2024 by rpki-client on console-ams.rpki-client.org