Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a35871f9-3dc0-3027-a543-9c3ffc325719.roa
File: a35871f9-3dc0-3027-a543-9c3ffc325719.roa (raw, json)
Hash identifier: 9xeC5wlB/msgJjtN2EDELg/yISnLwmE5AK6LgaSjBMQ=
Subject key identifier: 05:58:E3:EE:70:D3:70:5A:26:D8:88:77:C2:DF:62:CC:7F:1F:6E:43
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583A22FAC28BD947FAFEB6485D40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a35871f9-3dc0-3027-a543-9c3ffc325719.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Wed 06 Sep 2023 04:00:00 +0000
asID: 14717
IP address blocks: 207.156.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:22:fa:c2:8b:d9:47:fa:fe:b6:48:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Sep 6 04:00:00 2023 GMT
Subject: CN=5893cbf2-c6e7-42bf-9b3c-de5aee6167ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:4a:15:2a:c8:8d:a4:52:f6:33:b2:8a:a5:
94:3f:d9:aa:ac:d6:da:20:63:2a:4f:5f:36:62:f3:
7b:07:e6:80:9b:85:ac:a0:29:4f:23:05:14:ec:a9:
96:17:88:f4:5b:9c:75:7e:e6:c8:6f:9f:07:5c:7b:
33:b3:20:0d:54:e7:22:10:49:a8:9d:32:99:2a:d4:
83:68:c7:ab:04:8e:88:44:17:fb:3d:b5:34:7e:e8:
e9:70:1d:09:a0:eb:d4:49:b5:8b:24:23:47:fe:ac:
90:e0:16:d1:6b:8d:98:b0:d1:1f:04:79:a4:a7:c5:
97:6d:58:d0:b6:94:32:e9:e2:61:3b:ce:b6:9d:98:
bd:4b:42:6c:75:13:d9:d4:81:d7:88:dc:cd:ef:d1:
9d:5f:bb:58:cd:d4:16:bf:fa:1b:99:5b:ad:67:3d:
bf:a9:5a:44:bd:60:7b:26:8f:c6:fc:4d:93:b5:0a:
97:d5:5c:89:b5:0e:8a:56:a0:cc:f3:fe:2a:fc:5a:
5a:c7:ae:e3:75:3f:dd:ca:f1:09:49:8a:60:72:ba:
a2:6a:b4:ca:9f:09:91:5b:99:3e:7e:50:c6:f3:67:
b9:1e:cb:82:be:71:07:5d:8d:39:66:2e:4d:ca:df:
03:5f:94:cd:09:77:a4:c1:7b:e7:a6:a1:eb:96:ab:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:E3:EE:70:D3:70:5A:26:D8:88:77:C2:DF:62:CC:7F:1F:6E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a35871f9-3dc0-3027-a543-9c3ffc325719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.156.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:6f:86:53:a1:45:71:71:39:15:6e:ab:02:ff:be:ca:af:d1:
e8:84:84:04:14:07:d6:68:57:dd:6f:32:04:8a:53:c0:d2:6e:
d7:d0:e4:92:3b:80:66:bd:d2:71:ca:42:72:26:33:32:29:11:
5a:c1:12:72:3b:1b:ce:7f:b5:6d:50:5d:cc:95:4c:25:b9:db:
a7:dc:66:8a:ee:28:a9:85:3e:89:7f:ce:56:9f:2b:0c:81:58:
ec:90:75:3c:b3:bc:4d:02:ea:d6:04:15:b7:bb:37:35:41:7e:
1d:88:3a:92:a3:b3:36:95:a1:f9:f9:34:de:86:64:ac:49:98:
55:b6:f7:da:4e:bd:64:c8:20:09:82:a6:ea:39:96:2d:e6:84:
32:b2:12:25:c9:c2:5b:a4:97:bd:1e:82:1a:39:4c:67:02:10:
eb:44:b9:e5:24:ed:18:2e:66:a8:37:21:4b:d0:92:e3:51:2e:
12:f6:1d:ae:93:24:21:5f:48:c2:c7:1a:f0:86:aa:cb:5e:20:
3d:f5:1f:ee:63:ab:9d:32:15:9d:d8:5a:12:e7:7f:1d:64:d5:
2f:01:c4:0a:0c:72:9b:83:36:31:d4:88:96:ee:79:1f:15:56:
4f:4e:de:f7:a7:13:66:5d:07:23:92:66:c0:85:98:6a:63:28:
f2:ef:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:17 2024 by rpki-client on console-fra.rpki-client.org