Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa
File: f4d29d0c-c112-30f7-9913-441d1245910f.roa (raw, json)
Hash identifier: 4IE9wOR8MQX6CscJfD0aM8EKfS8ltZ+68hfbp0eX+Jc=
Subject key identifier: DE:6E:A3:90:B1:72:37:43:72:96:88:35:E5:B8:9A:FD:A1:F1:7A:A0
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583CBB7CC4E52CDABF2B44981380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Wed 01 May 2024 04:00:00 +0000
asID: 20940
IP address blocks: 168.143.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bb:7c:c4:e5:2c:da:bf:2b:44:98:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : May 1 04:00:00 2024 GMT
Subject: CN=b1d0bcf3-bcbe-4fd4-a651-05966fc2ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:b7:63:c6:d5:99:a6:ab:4c:50:9c:28:cc:
88:d1:d2:a5:c5:01:08:3a:ea:8b:46:2e:b6:a3:9a:
81:06:e1:9c:32:04:c6:70:62:d4:03:ba:b0:57:1d:
7a:79:e7:77:c4:2a:3b:eb:01:58:e8:bc:6b:02:fb:
41:07:10:24:ec:81:10:f8:14:3a:84:1c:ed:68:7d:
85:0f:a2:00:0f:56:64:e2:29:cd:09:67:42:17:a0:
a7:b5:51:d2:b1:00:27:fd:84:ea:14:c1:f6:b5:c1:
bb:02:7d:2c:2b:67:c7:84:2e:55:7e:c6:3a:9d:d1:
83:c5:e8:dd:0c:40:30:24:ca:2a:23:fd:fe:60:5b:
64:a2:b2:f4:e9:3e:9e:88:5e:dc:99:fb:81:be:20:
d3:81:e7:69:31:82:d0:29:c7:a6:86:19:46:66:76:
f8:49:ec:6f:39:0d:c0:a2:43:43:f1:5a:95:d9:97:
88:86:d9:84:2a:03:9b:13:ac:0b:fa:ee:7c:a2:2a:
45:b6:2a:a8:3b:c0:f2:b1:ef:54:38:85:99:3f:a2:
6d:d2:1f:19:55:99:7f:e2:56:a4:03:cb:0b:aa:2f:
18:fe:a7:e0:7d:31:14:24:cb:3b:18:94:87:84:40:
8d:6b:08:56:b8:2b:b9:cf:5f:0b:e7:f6:58:43:eb:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:A3:90:B1:72:37:43:72:96:88:35:E5:B8:9A:FD:A1:F1:7A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4d29d0c-c112-30f7-9913-441d1245910f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
168.143.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:20:55:44:fa:68:73:f6:f6:39:78:13:83:fa:1c:e4:24:03:
cb:65:62:d5:49:f3:41:24:18:e2:6c:69:f4:ee:91:89:a6:77:
0e:c6:1f:28:d2:a1:af:1a:f0:9a:b3:83:0d:ff:c5:20:17:cb:
c7:89:b5:cd:31:72:4f:31:dd:e3:52:3a:bc:64:53:04:25:70:
f6:8d:c9:57:a0:b3:8c:07:34:d0:a7:e2:22:37:47:fc:74:bd:
91:84:7c:66:26:58:a7:ae:e6:bd:20:27:13:ce:55:37:9e:fd:
df:3a:38:6d:e8:b9:dc:f4:95:8a:77:e0:d1:b8:e6:93:35:5a:
48:f2:fb:fd:78:14:2a:08:db:84:c9:1c:b6:4c:2a:2c:56:7b:
76:46:4a:dd:ab:ff:3f:09:4a:39:10:3c:7f:02:2d:26:32:19:
0d:79:ab:4b:09:35:a6:47:ba:07:75:df:5f:98:96:5e:45:03:
d2:2a:17:25:3f:2f:86:d3:88:ca:8d:e3:60:d6:43:c2:a1:d3:
bc:5d:67:6d:3e:4a:1b:af:0e:7b:98:d5:ca:62:4b:44:80:fd:
f7:ae:e2:e1:aa:be:5f:3c:62:a7:8a:9a:9a:31:00:ec:cd:4e:
9c:41:50:ea:76:94:78:dc:b4:6f:b2:5d:42:05:a3:7b:bb:3b:
24:9e:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:23 2024 by rpki-client on console-ams.rpki-client.org