Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/49e74f10-59de-368e-8c41-f939adb626d1.roa
File: 49e74f10-59de-368e-8c41-f939adb626d1.roa (raw, json)
Hash identifier: nZ6hsaJ95YHB8UGKwaEfc3fKO9tThllFIkxOh5p2pzI=
Subject key identifier: 42:26:51:A5:93:7A:40:6B:FB:E7:12:88:FF:14:0F:23:FB:3A:2F:DA
Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial: 010D0C9F43285845230AEE241908E9D29AFE6800
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/49e74f10-59de-368e-8c41-f939adb626d1.roa
Signing time: Fri 08 Mar 2024 07:01:23 +0000
ROA not before: Fri 08 Mar 2024 07:01:23 +0000
ROA not after: Thu 06 Jun 2024 06:01:23 +0000
asID: 33548
IP address blocks: 67.204.32.0/19 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:23:0a:ee:24:19:08:e9:d2:9a:fe:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
Validity
Not Before: Mar 8 07:01:23 2024 GMT
Not After : Jun 6 06:01:23 2024 GMT
Subject: CN=aba6245a-b059-436b-8a99-1d4a27c8effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:d0:37:09:3d:21:49:a1:dc:95:f7:16:3d:
9c:3e:74:12:e5:5b:d7:e4:27:60:85:03:1b:99:83:
dc:8d:5c:be:82:de:07:6d:c5:ae:74:02:56:ec:f9:
ac:52:72:22:ef:d0:c2:20:68:98:b2:b4:b8:11:94:
09:d2:e7:46:5f:bc:46:d7:18:63:4d:aa:8d:bd:51:
e9:21:3b:df:1d:81:6c:51:9f:2b:f2:fa:58:41:07:
16:ee:76:8d:c8:e5:14:f2:1b:5a:37:a6:e7:2e:f6:
aa:c5:aa:b1:f6:f8:95:9d:e6:35:81:8e:de:71:f0:
43:fc:1e:67:c2:15:c2:6c:85:39:0a:09:6c:95:f9:
4c:0f:82:eb:e6:69:1e:32:de:38:3c:85:5a:96:9d:
2c:78:1f:41:d1:2d:e9:e1:b4:93:6a:02:03:8c:e0:
a5:c7:69:63:85:9a:3f:7f:ad:8a:23:ec:09:a2:ad:
44:29:f2:29:80:81:16:e9:27:4e:17:bf:67:97:63:
fb:c3:15:4f:3e:35:bb:66:99:09:b6:ff:9e:fa:48:
ac:8d:16:d0:fa:e0:f9:19:68:da:1b:39:c4:ef:9f:
01:f4:48:9c:36:a8:6f:44:09:c5:65:68:ee:38:4f:
c7:1f:dd:74:5a:d1:0b:c8:02:7e:5f:26:f4:96:1e:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:51:A5:93:7A:40:6B:FB:E7:12:88:FF:14:0F:23:FB:3A:2F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/49e74f10-59de-368e-8c41-f939adb626d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
X509v3 Authority Key Identifier:
keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
sbgp-ipAddrBlock: critical
IPv4:
67.204.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e1:f6:20:d9:55:a1:d1:47:85:3d:64:0b:5c:8f:7f:7a:a8:
89:eb:70:72:c7:1d:8b:07:37:18:69:a5:3a:ac:ad:af:ab:1f:
1c:80:8b:8b:96:c2:f2:93:a3:55:7c:69:41:6b:4f:c3:3c:b7:
f1:f8:87:36:18:c2:8a:bf:8a:71:71:54:32:08:0b:a1:19:f8:
ff:6a:1f:fd:f6:d4:3c:a7:b5:5a:42:bb:6a:d6:d8:93:a3:2e:
69:95:33:b6:54:63:3f:b6:c4:fe:f5:26:35:0e:f3:00:13:17:
f1:a4:b2:c8:48:74:50:aa:47:7e:83:b8:19:94:62:22:75:b6:
bf:8e:6c:c7:c4:88:31:c6:a2:d0:9b:ba:7a:8c:8e:9b:8d:f8:
01:50:1e:19:b4:68:18:ef:19:8d:60:4f:6b:e4:16:c5:9c:47:
71:92:61:52:a0:3b:1f:2d:fc:ee:00:eb:38:6a:9e:d9:88:45:
71:75:86:74:9e:e4:f2:af:9b:04:e1:a6:e9:0a:88:41:e7:ad:
ad:08:df:62:13:c7:66:61:47:b1:be:c9:6f:fd:b5:a2:39:b2:
58:8a:05:c8:7d:f8:8d:c4:05:0d:10:94:08:e3:ba:57:df:1f:
b9:1c:49:b4:2e:46:d8:e0:e2:83:9e:fd:2c:1d:60:e9:9c:e1:
92:29:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org