Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0e5f0339-9248-3ae6-adfb-83165411f4f2.roa
File: 0e5f0339-9248-3ae6-adfb-83165411f4f2.roa (raw, json)
Hash identifier: KbxbUpahB54lsx2K0uoHTVct/6CtE04a8GZZrA2x/W8=
Subject key identifier: 2A:FF:F7:4A:0D:FD:80:62:14:75:D7:A2:4C:B9:B5:D3:F9:61:BB:DC
Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial: 010D0C9F432858448841249D844882F8A1CEC020
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0e5f0339-9248-3ae6-adfb-83165411f4f2.roa
Signing time: Fri 12 Jan 2024 20:20:20 +0000
ROA not before: Fri 12 Jan 2024 20:20:20 +0000
ROA not after: Thu 11 Apr 2024 19:20:20 +0000
asID: 14681
IP address blocks: 144.81.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:88:41:24:9d:84:48:82:f8:a1:ce:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Validity
Not Before: Jan 12 20:20:20 2024 GMT
Not After : Apr 11 19:20:20 2024 GMT
Subject: CN=cdeffc24-d01e-4f24-9aa6-a03c01d224c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:c3:bf:58:c6:8d:e9:a0:4f:bd:cb:f3:66:
03:d8:a2:b8:a1:57:45:1f:aa:81:a0:14:8e:71:11:
0a:91:bb:c1:93:52:a5:22:38:24:24:05:32:62:03:
11:fc:3a:b5:40:09:70:23:38:c0:22:37:78:cc:4c:
82:b1:31:f7:98:88:81:d4:65:34:3e:3e:8c:08:69:
ff:6b:37:cb:e8:71:eb:a6:a4:84:f0:8d:ca:6b:4d:
9e:60:1c:ce:e0:52:2a:75:c8:49:41:cb:d7:69:bf:
9f:2c:ea:a7:d2:d3:3b:6d:51:f2:12:65:81:e0:8a:
26:28:b2:ab:4e:2d:bd:7d:64:ca:04:40:ab:26:58:
94:df:dc:33:29:8b:eb:1a:b9:d3:fd:bc:3d:0b:85:
fe:1e:5c:a6:c2:31:22:0c:c7:f3:9b:83:8e:d8:19:
e2:41:93:c5:bf:ad:5e:67:16:08:bb:e0:51:fd:d3:
ab:80:53:5a:79:ba:1d:a3:1d:3c:9e:6e:08:2e:1d:
2c:eb:57:71:ed:3b:82:cb:c6:72:de:4e:c6:89:55:
98:b6:d8:19:58:c6:52:89:61:22:54:c1:02:bc:a1:
20:a1:e9:31:b6:b9:7d:4a:f8:2f:4b:3c:cf:15:e1:
bb:56:bd:c2:52:7e:c6:7b:51:03:91:1e:d7:7d:62:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:F7:4A:0D:FD:80:62:14:75:D7:A2:4C:B9:B5:D3:F9:61:BB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0e5f0339-9248-3ae6-adfb-83165411f4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
X509v3 Authority Key Identifier:
keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
sbgp-ipAddrBlock: critical
IPv4:
144.81.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:68:3a:2a:c2:6b:e9:9e:c5:19:46:c3:f6:44:2b:8b:b3:16:
f0:f0:10:e3:94:cc:5c:96:64:89:bf:c1:e8:48:45:e9:e0:49:
91:1a:be:2f:df:c3:6e:34:5e:62:63:9b:31:d8:9d:a8:32:e5:
02:37:0a:28:56:48:ac:ed:05:42:60:b4:bd:7a:04:b4:df:45:
36:fa:fe:5d:fe:83:20:e4:ac:15:1f:2e:b4:29:7d:91:cb:b6:
2a:a1:15:5b:b0:9a:06:58:c6:b3:3b:ed:81:51:7f:09:67:05:
36:da:28:bc:fd:66:e2:a6:a2:cc:25:b5:3e:11:c1:cb:5e:66:
88:16:1e:d0:31:40:4c:1e:21:50:f1:09:17:77:9d:7f:16:4e:
9d:72:1e:82:6a:08:b2:f7:ab:2e:cf:6e:67:4d:5a:a2:66:68:
fe:e1:0d:ef:f3:36:8d:a2:04:fa:67:7d:14:b2:cc:59:3b:5d:
3e:b5:8d:0a:ae:78:fb:ee:57:0c:d0:a9:23:11:05:24:b3:36:
5a:ae:e2:16:1b:c4:ae:dc:ed:ef:21:ec:5a:f2:1d:6a:08:0c:
a2:fd:20:80:e2:22:6d:49:7a:03:7b:62:a5:6a:c1:c3:d1:d8:
46:e2:95:b5:6d:e0:e7:0e:44:5c:d0:3a:cf:e4:0b:18:fc:de:
f8:2c:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:05 2024 by rpki-client on console-ams.rpki-client.org