Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/25a58447-1418-39cb-9f77-145868792876.roa
File: 25a58447-1418-39cb-9f77-145868792876.roa (raw, json)
Hash identifier: ivydfp7PqJiOQuiQYxUo6hsvFJIzBKhRndnMEM7LSk4=
Subject key identifier: 69:19:7C:E4:ED:E2:8B:49:36:9B:33:23:CD:3D:8F:E6:98:6E:B7:42
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285842A7602C30D1D3AD93F81CBB00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/25a58447-1418-39cb-9f77-145868792876.roa
Signing time: Mon 24 Jul 2023 14:19:02 +0000
ROA not before: Mon 24 Jul 2023 14:19:02 +0000
ROA not after: Sun 22 Oct 2023 14:19:02 +0000
asID: 7489
IP address blocks: 72.14.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a7:60:2c:30:d1:d3:ad:93:f8:1c:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jul 24 14:19:02 2023 GMT
Not After : Oct 22 14:19:02 2023 GMT
Subject: CN=1debd6ca-89b7-47c8-a688-82c9e4fc0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:53:69:3b:af:26:21:b6:66:8e:9c:17:cc:
06:ec:c3:24:00:04:47:18:47:20:8e:cb:bb:59:ff:
d6:c1:7e:3a:d7:67:e3:d9:c3:08:41:63:4c:2e:10:
5c:1e:92:0a:a2:6e:0f:32:ee:fe:98:b4:36:46:63:
5c:ed:6e:ad:5f:e4:00:03:a3:57:8a:79:c5:fa:7a:
a9:12:92:4f:27:2f:b2:2d:b0:c0:1c:14:40:3d:13:
29:18:43:5c:90:4c:99:a0:29:a7:3f:e7:28:93:c0:
02:1d:fe:1a:1c:3e:ec:60:c9:69:1a:19:02:1f:e7:
f8:b0:5d:8e:65:45:a2:51:58:3f:c0:db:93:c6:53:
7a:1a:b3:b6:78:62:dc:d9:21:9a:ee:a1:46:23:66:
bb:b5:89:4a:c5:cf:ce:b5:b2:18:ff:b0:47:92:42:
99:50:a1:a7:4e:ff:8d:07:09:c6:97:d1:8f:8f:82:
e2:1c:21:c8:a6:1b:06:95:14:a2:40:28:6b:52:53:
24:b4:54:f0:61:6a:7c:93:0a:cd:aa:66:e8:02:0d:
2b:b7:43:84:85:8a:12:16:7f:6a:e0:e6:41:2c:c8:
cd:32:fc:08:5e:81:1e:f1:06:ec:6c:d9:cf:f9:5a:
7f:28:40:3f:66:26:96:b0:97:6b:2a:70:f5:eb:c7:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:7C:E4:ED:E2:8B:49:36:9B:33:23:CD:3D:8F:E6:98:6E:B7:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/25a58447-1418-39cb-9f77-145868792876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:8a:b4:d1:a2:73:07:0c:0f:88:38:f4:78:46:2b:b6:34:8f:
44:71:62:3a:50:6d:e0:fc:65:32:7a:be:c8:4c:e1:10:e2:7a:
3c:0f:b1:cf:07:aa:35:59:45:b4:d8:f7:cb:fc:2a:fa:a6:bf:
82:a0:fe:8b:31:6e:33:74:7e:97:3c:7c:01:b2:7f:87:47:c1:
eb:01:55:4a:c3:19:2a:7c:ac:8e:06:bd:13:76:5a:51:47:28:
90:70:f5:c3:fd:5f:7e:bb:a3:37:8f:a2:b7:ab:4d:85:8d:37:
b7:25:60:a9:36:16:9c:07:a0:96:ba:00:b5:bc:36:34:68:6c:
95:42:70:77:17:57:01:5c:34:fb:01:82:69:20:84:2d:9f:c2:
a5:f9:d4:b2:79:7c:0b:b7:5b:1d:ef:d5:d7:f6:c5:1b:4f:28:
5e:7e:8f:d5:64:80:53:eb:f2:fa:00:8f:bc:6b:17:c3:3c:3a:
0a:5a:c0:b4:83:43:e6:47:f0:d2:a6:4e:29:c3:24:17:9d:ae:
bd:a5:16:3a:fc:be:66:82:69:68:e0:b2:10:50:af:83:b1:19:
be:ac:98:bd:08:ec:2d:91:83:80:fe:60:4d:f3:b6:81:22:42:
26:b2:e5:52:1b:47:92:a1:0a:30:80:23:99:b0:2d:20:38:51:
ec:7b:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org