Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02d85d24-13f3-3e49-b1d1-1076e3eb5c78.roa
File: 02d85d24-13f3-3e49-b1d1-1076e3eb5c78.roa (raw, json)
Hash identifier: ZOdQ6lO+oUasXpUdmrDHETv0bSF9oBABdH7oI0BrfRA=
Subject key identifier: 7B:B0:EF:EC:40:46:47:E6:32:40:E3:03:15:0B:B0:89:77:AA:F2:E7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE3EF9B95260B0618647EE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02d85d24-13f3-3e49-b1d1-1076e3eb5c78.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 65.255.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e3:ef:9b:95:26:0b:06:18:64:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=3c1f117e-7bff-4e79-919b-5eb0e01143ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:3b:23:5b:14:20:fd:d9:60:37:4e:71:1b:
29:cb:f4:ad:d8:44:2e:75:b7:b1:8b:65:dd:82:4b:
f9:8a:4a:52:53:77:73:b7:dd:08:7a:ee:bf:8f:fe:
f0:08:46:85:91:3f:38:ce:12:b2:b4:ed:cc:8d:0d:
f3:f5:b2:39:e5:23:ca:10:14:e7:5d:be:5e:3d:6d:
6e:06:87:22:e8:7f:f2:c2:3e:7f:92:57:9f:33:37:
5b:fb:0a:d5:76:c5:09:e8:0a:f5:a0:ca:7b:48:dc:
eb:45:6f:bf:01:04:3c:3d:08:ab:fc:4d:21:8e:24:
6c:75:0e:df:7b:b0:63:97:e5:80:22:5e:cc:66:f2:
16:38:13:27:06:26:6b:26:d3:0e:cb:c2:e0:aa:63:
1b:9b:28:f5:d2:3c:b5:51:ba:b3:04:e4:2b:75:a1:
7f:ce:46:2c:0c:b2:de:76:1c:85:14:4d:1b:3a:51:
7e:9e:4c:35:8b:bb:ec:5e:bd:14:5f:a8:2f:a9:8c:
ce:64:8d:93:46:9b:03:2d:63:f8:8b:55:32:e6:76:
37:21:e4:7b:a0:42:e5:15:f3:58:47:e2:f9:96:02:
15:27:bf:ce:68:bf:5a:af:cd:34:aa:c3:ad:fa:dc:
e5:4c:8f:92:92:0a:61:ed:d8:15:c4:87:e5:f0:b5:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:EF:EC:40:46:47:E6:32:40:E3:03:15:0B:B0:89:77:AA:F2:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02d85d24-13f3-3e49-b1d1-1076e3eb5c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f4:03:fd:b1:57:c7:d8:f9:20:04:26:71:c2:cd:d0:b8:f1:
af:be:98:ae:e1:89:0b:c8:fb:5e:8a:04:42:f0:22:e3:ec:59:
55:ae:3d:ce:cf:a1:0f:c6:66:9e:ec:17:4d:3b:a8:24:73:8c:
58:d2:42:3b:ab:c3:fb:98:b9:38:c7:b9:d2:d9:2c:1b:7d:b5:
42:80:c5:eb:a0:b0:7b:c8:ba:17:24:64:f6:5b:b1:b8:cd:a7:
5a:3e:70:cd:9b:55:4f:18:e4:39:b6:f3:5a:5b:68:19:01:7a:
92:dd:00:48:40:5f:4c:0c:e5:06:c2:5b:da:72:91:5b:47:14:
f4:64:33:bc:b9:37:ff:eb:63:e6:ed:41:eb:9d:73:3c:fd:f7:
ed:b1:3b:d4:62:de:d8:70:a6:a8:19:50:da:66:a8:a3:35:77:
06:ec:be:7b:98:46:33:04:1d:c4:0e:83:f1:f7:84:32:a8:ec:
53:c9:a0:69:34:4f:1e:86:c3:99:fc:86:53:e3:f9:db:50:2d:
76:cf:62:f9:90:f5:2a:6f:94:79:ec:80:33:9a:09:ba:a2:04:
d4:0b:e8:64:1c:99:1e:1e:b0:28:50:f8:a4:12:e4:5b:c8:ec:
47:94:f6:77:23:92:84:55:bb:5a:ea:1b:70:39:d5:96:bf:44:
20:eb:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org