Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e0a2e2da-9530-324b-a980-dc3cd7e3d248.roa
File: e0a2e2da-9530-324b-a980-dc3cd7e3d248.roa (raw, json)
Hash identifier: 1iOdqTH25hrbCDOVfl5K1r0JETNGS3VFtQc2VIIQEwk=
Subject key identifier: 6B:78:FA:18:A9:3A:B9:5D:AC:A9:62:46:F3:3D:0B:38:64:0B:2F:FE
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583B4B99381D76E76B282FAC45C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e0a2e2da-9530-324b-a980-dc3cd7e3d248.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Thu 21 Dec 2023 05:00:00 +0000
asID: 20940
IP address blocks: 165.254.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:4b:99:38:1d:76:e7:6b:28:2f:ac:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Dec 21 05:00:00 2023 GMT
Subject: CN=1ac54141-cfe2-41bd-97e4-beb22de79f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:5b:e9:e5:d6:ef:ce:d9:f5:61:06:1e:7f:
9f:60:ac:88:40:f9:3a:f6:6b:1f:40:54:29:81:d3:
42:04:bb:eb:1d:99:c2:c8:ba:b8:56:51:2b:ba:00:
71:db:9d:9f:15:32:da:60:ed:48:e9:7b:6c:f0:76:
15:4b:3b:38:2b:28:58:89:fa:a0:0d:0b:de:53:3a:
aa:c7:80:8e:ee:46:b6:f4:85:df:0f:f9:41:1f:e1:
e4:7f:22:e4:b3:46:a3:32:58:b1:73:a2:d8:07:84:
d8:cc:db:32:c5:74:76:45:4d:f0:e9:fd:85:fd:dd:
5f:12:48:e6:de:17:35:bf:f9:a3:b0:a1:08:95:32:
15:80:0a:59:1f:f7:51:19:8f:c8:95:aa:11:34:d9:
76:28:2b:30:e0:c8:af:b0:f7:0c:46:f4:6a:d8:2d:
e0:07:5d:46:f6:dd:00:32:88:46:f7:56:07:fd:22:
c3:d8:fc:17:4e:20:2f:48:0f:b0:40:86:bf:50:19:
e8:b6:76:c9:14:88:fc:54:2a:19:4d:26:78:1c:d0:
1e:42:32:9e:93:2a:92:14:15:92:5c:a4:89:6b:a7:
45:ba:b1:1a:a9:4a:85:b3:b6:5f:fc:e9:39:ea:14:
d0:b9:2c:85:15:53:8f:d3:61:58:96:42:98:55:14:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:78:FA:18:A9:3A:B9:5D:AC:A9:62:46:F3:3D:0B:38:64:0B:2F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e0a2e2da-9530-324b-a980-dc3cd7e3d248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0f:6a:7d:9e:24:ee:ec:01:73:4b:ca:ec:29:69:b0:e2:cf:
24:15:05:b4:3e:4c:42:a7:89:fb:b1:48:a3:4b:73:ee:10:3c:
cd:bd:5a:c8:6a:d3:98:51:c3:f7:9a:91:93:05:53:1d:4c:6a:
e9:a4:a7:36:76:99:57:41:35:c4:8d:9a:3f:e5:a0:62:7f:96:
2d:7a:cd:2f:e6:61:0c:d6:f3:8d:f2:f3:04:4a:9d:4d:3f:cf:
1d:43:06:27:47:41:16:80:62:41:12:93:c5:4d:b3:cc:33:fc:
81:6b:7b:97:e5:cc:a8:9a:d2:0d:40:ec:50:3f:64:54:3d:16:
5a:f6:52:e2:a8:dd:84:06:b1:f3:b3:cc:d2:0c:3d:56:0d:b7:
f7:c3:72:df:8e:86:66:72:95:c7:ef:33:04:df:f9:06:a2:c3:
6e:13:0d:c1:34:21:ab:15:a3:bf:0e:00:cc:e0:5c:e0:dc:65:
54:cb:21:8a:e5:2e:b9:c1:e8:c5:bd:83:49:56:85:85:e4:2a:
28:4d:a0:dd:9d:cf:c8:92:59:7e:b0:5e:84:9e:e8:9e:4c:16:
a5:85:8a:c3:48:b9:11:e1:ae:80:9d:d0:04:33:01:85:24:38:
5b:41:9c:d7:48:46:96:ce:23:db:d0:e4:e3:8a:6e:61:b2:40:
60:26:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:23 2024 by rpki-client on console-ams.rpki-client.org