Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/94e770e3-e370-335b-87b7-84f9ec9f1368.roa
File: 94e770e3-e370-335b-87b7-84f9ec9f1368.roa (raw, json)
Hash identifier: 9/1Ily1Y/Gpqp6CdclQ8Irku07Noq2zpYwCbCptyiFE=
Subject key identifier: 6A:0F:65:A3:A9:D3:09:5C:71:D6:97:61:86:26:10:90:A5:EB:63:55
Certificate issuer: /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial: 010D0C9F43285841631E56594D6B0E736E167F00
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/94e770e3-e370-335b-87b7-84f9ec9f1368.roa
Signing time: Tue 28 Mar 2023 12:00:00 +0000
ROA not before: Tue 28 Mar 2023 12:00:00 +0000
ROA not after: Tue 04 Apr 2023 04:00:00 +0000
asID: 51082
IP address blocks: 66.85.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:63:1e:56:59:4d:6b:0e:73:6e:16:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Validity
Not Before: Mar 28 12:00:00 2023 GMT
Not After : Apr 4 04:00:00 2023 GMT
Subject: CN=3dbbcc46-b6a8-4c39-825c-5baa1870aaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:e4:1e:87:9e:91:ae:39:1e:2b:9c:05:e6:
8f:e6:5d:2a:ad:0a:7d:65:39:e5:35:17:96:f1:64:
94:40:2c:16:80:96:aa:2b:1d:cf:c4:64:f0:39:ec:
e0:c8:5b:a2:2e:b2:49:20:99:ca:c0:aa:a8:6e:95:
6f:8f:c7:cd:12:c1:43:d8:5f:f2:4a:1b:9c:77:74:
8a:eb:fe:36:1a:2c:0f:5a:6b:df:ac:57:84:7b:41:
91:2c:5c:eb:04:cf:89:d7:59:28:77:75:3a:e8:29:
58:e3:03:83:1f:53:80:e6:1a:33:08:9e:41:82:a1:
64:bb:f9:81:8f:e1:4d:63:de:06:b2:e7:9b:e5:6f:
50:bf:1e:06:2d:ea:fe:0f:d2:bc:39:83:db:1e:f8:
01:40:51:1b:fe:5b:8d:2c:96:a7:58:02:33:39:f9:
a7:0b:97:eb:a6:10:24:1c:47:dd:3c:36:40:bd:37:
10:fb:e4:94:41:a5:27:b9:1a:6d:9c:94:62:cf:ab:
2a:90:d5:e6:84:b1:00:9b:18:c4:3f:9c:76:40:38:
45:fb:07:c7:fa:40:36:81:34:7c:f9:38:ef:4a:92:
95:f3:a7:bf:6d:5c:8d:08:88:52:62:1c:c9:ac:89:
43:e4:16:a5:41:d4:76:bf:e4:71:f3:68:b7:21:9f:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:65:A3:A9:D3:09:5C:71:D6:97:61:86:26:10:90:A5:EB:63:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/94e770e3-e370-335b-87b7-84f9ec9f1368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
X509v3 Authority Key Identifier:
keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:cc:f5:ce:de:c5:48:4a:68:e9:54:f4:6e:21:c4:c0:ac:73:
0c:80:4c:96:a8:9f:0f:5f:a6:36:4c:4d:ce:25:b1:ea:53:b9:
6b:af:fd:8d:d3:85:e5:c2:fe:c3:62:a6:11:ea:a3:31:e6:f5:
dc:8d:5d:f1:15:8d:ca:44:71:36:98:f7:1f:bf:c3:50:7d:97:
a8:a5:7d:17:c8:d3:2e:85:ae:a1:c0:d1:dd:be:ec:18:16:a3:
52:0d:e7:25:d4:67:34:0a:80:2a:c1:dc:1e:dc:49:a9:89:aa:
19:da:eb:40:79:73:6d:42:71:04:6f:1d:3a:29:3c:ad:01:15:
00:de:93:21:ca:f1:4f:38:00:e6:45:40:77:13:23:e4:9e:4c:
fa:23:d4:d2:8e:8d:2c:da:d1:49:e9:8d:b3:c3:6a:96:c2:b0:
c1:c2:fa:c0:7e:6d:28:df:73:97:05:59:c3:4f:bf:ed:b8:c3:
7e:30:e9:1a:e6:f3:d4:5d:54:43:ae:6a:1d:f0:80:48:e3:46:
83:73:19:98:e7:da:a0:85:d9:43:2c:da:ec:b2:7a:0a:79:7a:
d0:a1:f4:d8:fd:5a:8c:10:88:3b:3a:21:c4:a4:91:b6:62:d0:
68:a8:e0:00:c0:50:51:d9:c2:fc:58:85:cc:0f:3b:fb:22:af:
a3:a1:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:33 2023 by rpki-client on console-fra.rpki-client.org