Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa
File: fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa (raw, json)
Hash identifier: qGBbsDBe5I8VJTwv1/t2DDjefCE9AirRdtZjmjQHY1o=
Subject key identifier: CF:EF:FD:5B:EF:7E:7F:45:AD:6C:38:9C:77:EA:05:D3:90:33:56:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858434DEAEDE786DF487820381C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa
Signing time: Thu 21 Sep 2023 12:00:00 +0000
ROA not before: Thu 21 Sep 2023 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.143.0/24 maxlen: 24
172.69.193.0/24 maxlen: 24
172.69.194.0/24 maxlen: 24
172.69.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4d:ea:ed:e7:86:df:48:78:20:38:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 21 12:00:00 2023 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=9b0b37f7-a433-4c62-a260-93df75b315ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:71:e8:2b:1b:6a:f2:76:4a:ac:20:d0:a1:
dd:07:52:b3:78:13:7b:00:70:cf:26:ae:1a:cb:90:
c9:d7:6c:b4:2e:9a:4b:45:2d:af:31:40:e7:5c:67:
0b:29:5f:c7:fb:8e:5b:6a:58:54:13:22:f3:34:46:
60:c8:79:01:ad:b1:33:76:db:12:73:03:07:9a:c5:
cf:2b:75:1e:a0:f0:b8:52:ff:a0:3d:d2:8f:59:06:
b7:30:a2:e5:cb:17:92:77:eb:fa:f8:42:3c:7b:58:
5d:d4:d2:0a:ff:e5:7a:68:33:e5:be:01:17:d7:ce:
61:bc:d7:e7:74:c7:df:04:db:62:89:11:16:1b:89:
63:8c:db:15:d7:53:67:90:33:f3:da:29:bf:ef:fc:
99:6a:53:34:df:26:52:3a:ef:86:54:7c:1e:08:17:
66:c6:e9:1c:23:0a:53:5c:cb:6b:24:be:e5:e7:0a:
de:b7:95:0a:59:75:e0:39:e1:9b:cd:9c:63:d4:8d:
30:03:c2:05:e8:f5:37:8c:32:a3:61:1a:2e:5f:c2:
c9:63:46:7e:9e:72:19:2c:b9:2d:58:0f:32:b9:72:
94:6d:f1:61:ff:70:fc:c3:9c:49:f3:70:c5:d3:1e:
fc:6b:32:51:98:e3:2e:e7:5c:6b:9f:1d:d0:40:58:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:FD:5B:EF:7E:7F:45:AD:6C:38:9C:77:EA:05:D3:90:33:56:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.143.0/24
172.69.193.0-172.69.195.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e1:7a:bb:72:e5:0b:64:9c:b5:77:f0:bd:27:db:34:e6:dc:
0d:37:ad:e1:8e:55:63:ef:4b:2e:c4:9b:22:47:40:02:f6:20:
fc:b4:c1:07:db:82:01:ee:8d:e5:10:f0:2d:cb:38:3c:2f:0a:
2f:d8:a5:ae:f9:14:8a:05:9c:37:68:3b:d6:6f:fb:90:50:66:
37:6d:22:bd:c6:9d:89:a8:bd:68:1a:94:77:61:46:41:78:fc:
78:bd:43:90:71:2f:b7:67:76:00:36:b9:09:47:1e:38:03:56:
df:30:14:74:76:6e:7d:c0:c2:06:45:74:49:17:c2:a1:7c:e9:
a7:4b:0b:ba:82:16:b5:6c:5a:fc:3f:32:a4:64:b9:74:92:66:
d2:ed:74:bb:33:13:65:76:20:47:3f:0f:24:e2:c6:86:5e:59:
97:f7:d1:48:ac:5a:28:f0:15:5f:06:4a:60:29:6f:98:0b:7d:
f7:a0:2a:fc:67:f7:2a:29:ca:2f:f8:f3:3a:ad:ac:ed:ea:01:
0d:71:3f:7d:39:d1:9e:c6:5a:35:b1:2d:93:ae:07:1a:84:ee:
2a:7c:18:7d:1e:56:ed:48:f1:69:b0:d5:8e:08:b6:b2:fe:62:
f2:bf:6f:54:70:8a:bf:2d:77:50:c8:f6:b8:d7:e6:c7:ab:49:
ff:0b:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 08:56:54 2024 by rpki-client on console-ams.rpki-client.org