Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/1f332ba6-da7d-398a-9017-2cc5d01b6d90.roa
File: 1f332ba6-da7d-398a-9017-2cc5d01b6d90.roa (raw, json)
Hash identifier: puZiKZ5/RVcW3XHQC+6dPSUGdMUg4z6XmwJWux5F2BY=
Subject key identifier: 9D:83:31:5E:A0:EF:DB:53:27:BF:01:47:53:02:F9:5B:5C:B4:5B:08
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F4328576D51CC73C042CFC17136EB6611
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/1f332ba6-da7d-398a-9017-2cc5d01b6d90.roa
Signing time: Wed 01 Apr 2020 18:05:28 +0000
ROA not before: Wed 01 Apr 2020 04:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 394893
IP address blocks: 209.112.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:36:eb:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Apr 1 04:00:00 2020 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=5683a6ee-142e-40fd-9feb-134a0271ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:91:10:c1:f2:d6:c6:2b:87:30:ee:2e:83:
46:be:9e:52:ea:7a:5f:42:26:5d:d1:1f:e5:1f:b3:
10:1c:d5:71:92:c7:6e:95:53:84:ae:df:c6:ed:3d:
ca:3d:e9:60:54:9a:28:bd:ac:0f:b8:bd:c0:51:f4:
dd:d5:0e:39:7b:c1:00:7b:bc:ae:1b:2b:14:c8:91:
aa:e8:8e:74:b2:67:59:bf:64:21:54:d0:c4:df:9d:
93:70:df:3f:db:e0:2e:a9:40:50:2a:d4:74:df:b9:
eb:47:3d:ea:60:d6:62:04:12:06:c0:30:46:b1:b6:
24:86:3f:45:99:2c:3f:c1:8d:20:27:59:63:00:e1:
b0:20:34:23:73:f0:2f:8b:69:0c:70:f0:da:53:c6:
cd:9c:36:ce:f0:1e:03:1a:58:64:fe:62:6a:2c:76:
26:fd:27:29:3d:09:b6:ef:de:4b:58:6b:69:1c:02:
c8:79:1a:dd:02:49:52:98:3a:d9:9e:2a:29:37:f7:
e6:00:00:d1:50:f3:ca:bb:6d:a0:cf:56:1f:5b:a5:
16:04:26:a5:87:e6:ce:7c:a0:a7:8b:1a:56:f2:04:
c1:26:95:96:46:2d:50:8f:8c:9d:18:ad:01:c4:29:
25:aa:3a:4f:30:2a:79:e2:53:7e:c5:09:66:6d:22:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:31:5E:A0:EF:DB:53:27:BF:01:47:53:02:F9:5B:5C:B4:5B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/1f332ba6-da7d-398a-9017-2cc5d01b6d90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:46:c3:67:18:06:ed:77:ed:15:f9:dc:ba:63:47:3b:7a:aa:
ef:8e:9d:51:ce:7a:43:3d:00:76:26:5d:2c:65:18:0d:b3:48:
0c:6c:c9:cf:d3:52:81:a6:91:bc:63:84:94:44:2e:32:95:cc:
19:4d:6f:5a:a8:84:d3:cc:ba:85:45:5f:9c:6c:1a:43:6a:2d:
02:2f:40:11:9c:7d:32:59:da:e6:d2:75:65:fe:d0:21:58:56:
e2:3e:93:fe:40:2b:d8:ca:75:de:a3:d6:e8:0f:5f:e5:1a:0d:
f7:8c:3c:e4:bd:00:d3:09:b9:ab:cb:9e:f6:a5:35:a4:e2:b7:
51:17:0a:42:33:62:6e:b3:3f:0a:0b:17:9b:6c:cb:05:6f:df:
5d:bc:65:1e:3c:f0:43:3e:36:08:87:54:79:ea:e2:2b:ef:12:
56:e6:f4:f4:9e:f5:9c:05:60:fb:75:62:ac:1a:20:11:da:71:
51:dc:cf:c9:3f:5b:ca:44:5f:2b:4e:77:67:2d:ee:0a:17:6a:
3d:38:c3:54:dd:bb:9e:11:58:d5:c2:c2:1a:28:fb:2b:25:12:
5d:9e:da:fa:9a:e8:15:89:36:13:fb:e8:46:c6:c6:48:8d:14:
2c:43:69:4d:11:ed:de:11:4e:eb:0e:ba:ae:57:45:9a:41:e7:
39:fd:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:03 2023 by rpki-client on console-fra.rpki-client.org