Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60de5f3f-2992-39ef-8b33-500eb9fb7c02.roa
File: 60de5f3f-2992-39ef-8b33-500eb9fb7c02.roa (raw, json)
Hash identifier: 03oA108ltBaG6C0WJtSpWRhPWRCZn4JYg3HbfpFa7c4=
Subject key identifier: 0B:B8:13:C4:AF:4F:8E:F9:46:5F:54:06:31:24:19:BF:87:51:89:47
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858447DE099ED05BA54E2AB7BD400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60de5f3f-2992-39ef-8b33-500eb9fb7c02.roa
Signing time: Mon 08 Jan 2024 12:00:00 +0000
ROA not before: Mon 08 Jan 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 162.158.129.0/24 maxlen: 24
162.158.130.0/24 maxlen: 24
162.158.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7d:e0:99:ed:05:ba:54:e2:ab:7b:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 8 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=016fa900-9bc6-41b6-87ea-7d245139adc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:b5:80:1d:5a:51:85:7c:2a:f0:b7:fb:0f:
d4:c8:52:5e:25:0d:ec:98:8b:39:f4:0c:6b:51:72:
5f:e7:f4:13:68:12:73:e2:74:bf:80:2e:2a:5b:e5:
eb:77:4a:3d:14:64:8f:8e:79:ee:88:e2:21:bf:21:
2a:c6:82:51:f0:0a:0d:c2:a1:3c:42:e8:7d:a6:ba:
2d:43:3e:00:94:e8:89:b5:fa:a7:25:98:39:56:ea:
9b:24:72:7b:30:74:96:86:58:38:44:24:65:3d:21:
26:14:93:8d:a8:ea:83:9e:e8:4f:44:7e:3f:11:2b:
37:a8:d9:4b:74:72:de:1d:67:48:06:ed:83:71:e1:
01:c6:6a:b1:bb:8a:94:67:a1:0a:e0:0a:18:a6:22:
8d:a4:c0:5a:fe:e2:a1:ee:62:66:85:14:31:b3:91:
d9:7b:04:fe:f6:6c:50:ca:e5:da:e8:3d:1a:b8:ae:
29:f6:32:0d:ba:1a:54:26:e1:d0:f3:c8:1f:31:a4:
bc:22:2b:a2:e5:00:35:e6:78:86:26:be:b7:63:e1:
87:9b:3c:e7:cf:4c:86:36:e8:82:94:5c:08:e3:dc:
a5:ed:07:91:2b:a6:f3:e5:3e:fd:9e:06:5d:14:c1:
25:81:71:f3:d9:3e:80:25:3c:10:23:15:c0:6d:03:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:13:C4:AF:4F:8E:F9:46:5F:54:06:31:24:19:BF:87:51:89:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60de5f3f-2992-39ef-8b33-500eb9fb7c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.129.0-162.158.131.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:96:65:d9:9c:a6:08:f6:58:34:0e:60:0b:71:ef:f9:71:c9:
41:de:79:38:d7:65:19:60:aa:f9:95:6d:d6:4c:69:f5:8a:f2:
78:ec:49:1d:f1:4c:5e:59:a3:1d:1f:84:34:83:98:14:07:ba:
ad:df:3f:de:60:5a:39:15:3a:d8:02:aa:23:3e:bb:ae:f4:54:
e7:bf:3f:bd:6c:53:c6:85:f2:e0:0b:4a:1e:f5:f3:16:0e:7c:
44:5c:1f:6e:a6:7a:e5:9d:18:2c:f8:36:ca:68:7a:9f:78:5a:
30:1d:fc:30:cd:00:11:2c:5c:bb:10:2d:fb:ec:11:1d:f4:11:
93:1c:ec:a7:4c:a5:97:a1:f1:40:d4:95:23:c4:5a:89:95:f3:
24:5a:06:02:7e:6e:73:ad:42:fd:5c:98:7e:b6:29:11:68:eb:
7a:7c:1f:6b:ae:88:df:90:09:ff:65:7b:3f:9c:57:d1:76:0f:
ec:82:e5:6e:0b:ff:e3:2c:63:83:67:d6:19:5b:9e:e8:fe:77:
1c:5c:8f:17:ef:ef:01:2a:d2:25:73:cc:ef:ee:1d:40:22:a3:
54:74:3d:1e:c7:c1:17:ed:56:48:22:27:df:89:88:40:c1:4e:
4f:da:ba:5a:3f:bd:6e:74:fc:94:95:36:60:1e:32:88:7e:eb:
06:ae:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 07:38:33 2024 by rpki-client on console-fra.rpki-client.org