Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/08ead88a-c3d5-3eff-bcd2-4adbab90a1c5.roa
File: 08ead88a-c3d5-3eff-bcd2-4adbab90a1c5.roa (raw, json)
Hash identifier: nuvol7F8De6M97vxPQgIXYeYbSI7pEGfC13Y5u9mULc=
Subject key identifier: 90:27:87:45:13:4B:FA:51:E5:7B:CA:20:32:37:D3:D5:74:30:60:9A
Certificate issuer: /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial: 010D0C9F43285841E53291EFE337BA08BA32EA80
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/08ead88a-c3d5-3eff-bcd2-4adbab90a1c5.roa
Signing time: Tue 16 May 2023 01:00:16 +0000
ROA not before: Tue 16 May 2023 01:00:16 +0000
ROA not after: Mon 14 Aug 2023 01:00:16 +0000
asID: 394080
IP address blocks: 172.110.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e5:32:91:ef:e3:37:ba:08:ba:32:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Validity
Not Before: May 16 01:00:16 2023 GMT
Not After : Aug 14 01:00:16 2023 GMT
Subject: CN=4ad94a7a-e3a8-4b27-a397-121fdb9ce536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:df:4f:c2:92:8c:12:ec:d7:6c:8a:7a:3b:
71:98:62:33:c1:5f:52:02:30:49:c8:84:8d:61:e3:
8c:f0:72:b6:12:21:2e:04:11:f7:a6:43:97:38:b6:
c3:8a:e1:da:e2:fa:f4:43:9f:3c:b0:c2:96:2c:6c:
0e:c7:c1:19:08:78:0c:75:af:cb:1a:f4:29:b0:77:
10:7e:2d:b8:7b:49:24:90:4e:61:10:e4:d3:a6:a5:
58:f5:9f:f9:1d:28:c4:8a:26:9e:18:2f:20:9e:de:
d4:43:b3:1c:c6:92:b6:c6:06:54:27:e9:8b:16:13:
ca:fc:ed:33:ba:e3:5f:9e:78:b5:34:38:11:82:a2:
e9:44:0c:5a:de:e1:da:77:d0:26:80:02:05:b2:32:
e9:33:85:8a:b6:cf:5a:65:b5:81:33:90:7b:0f:36:
21:af:43:9c:e4:53:72:6a:b1:87:bb:a0:16:2c:21:
34:54:29:98:09:db:58:d9:2d:17:7d:a3:f7:93:23:
91:a3:72:9f:5b:b1:22:be:1e:9f:23:9b:18:7a:83:
99:50:de:23:df:2e:30:83:9a:fe:b3:f9:b3:73:33:
2d:95:45:b5:13:0f:2e:c1:65:9a:1a:d9:4b:c1:48:
24:be:4f:94:b9:00:c0:d0:57:d2:5d:3b:7a:83:5f:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:27:87:45:13:4B:FA:51:E5:7B:CA:20:32:37:D3:D5:74:30:60:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/08ead88a-c3d5-3eff-bcd2-4adbab90a1c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
X509v3 Authority Key Identifier:
keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a2:7b:df:85:77:b4:c4:4f:8e:39:23:8c:c1:86:79:a9:5e:
2c:48:75:09:e5:d4:4a:c7:62:14:40:c7:90:4b:f9:e1:78:1d:
0c:0a:78:14:c0:f9:d8:c8:32:0a:6b:1a:cb:6e:db:b5:72:43:
2d:e8:42:e7:bd:b6:87:be:3c:8d:44:8b:51:32:82:cd:20:79:
56:2f:da:39:df:d5:f8:52:3b:21:a4:fa:9c:aa:c7:42:78:e0:
e5:1b:cd:cd:64:52:1f:3c:4d:f0:f0:c1:0b:dc:b5:18:ed:2a:
30:dd:15:f4:a9:60:a4:e6:b3:32:8f:a8:53:ab:de:9c:aa:c8:
90:41:64:ba:11:6c:bc:5f:da:b7:a2:4c:fd:2e:54:0d:cc:1e:
26:27:3c:b6:95:65:34:6b:68:24:50:48:7c:5e:e6:3d:4b:fb:
bf:05:6c:87:7c:2f:96:c0:44:5b:1f:b6:1e:2a:07:ca:c9:21:
51:7d:e9:32:ea:9c:55:e5:1f:c2:c1:25:2a:2a:12:fa:6f:5a:
d3:f4:a6:94:51:45:54:44:a2:a6:a9:3f:61:aa:e8:e1:ae:15:
7f:77:f4:37:e6:1e:7b:18:ab:4e:46:02:8f:0f:b3:a1:1c:54:
cb:9a:ab:a0:d5:48:03:d7:b1:4d:0f:b4:c3:02:82:27:09:1c:
9c:8c:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:15 2024 by rpki-client on console-fra.rpki-client.org