Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/8fcee680-75d7-3c1d-928b-f6b782ccd6c1.roa
File: 8fcee680-75d7-3c1d-928b-f6b782ccd6c1.roa (raw, json)
Hash identifier: 8XIhhclw/OiFPYPdIux2xbp62EY/8ME4pQNDsfap1n0=
Subject key identifier: 3E:87:84:83:7F:ED:CC:FF:A5:8B:BC:14:82:CB:40:F2:9C:0C:E6:41
Certificate issuer: /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial: 010D0C9F43285844A2E20AE6AF48E5696D8CD480
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/8fcee680-75d7-3c1d-928b-f6b782ccd6c1.roa
Signing time: Mon 22 Jan 2024 09:15:32 +0000
ROA not before: Mon 22 Jan 2024 09:15:32 +0000
ROA not after: Sun 21 Apr 2024 08:15:32 +0000
asID: 201542
IP address blocks: 134.199.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a2:e2:0a:e6:af:48:e5:69:6d:8c:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
Validity
Not Before: Jan 22 09:15:32 2024 GMT
Not After : Apr 21 08:15:32 2024 GMT
Subject: CN=9ff4a45d-e1ed-408a-babd-e4466c736b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:33:a2:01:cc:b6:a7:cd:20:59:29:8e:5d:
30:97:14:43:56:ba:79:7b:7f:01:df:35:c6:c2:1b:
2b:a0:df:c2:61:5d:f8:f2:67:50:8e:e8:1d:0e:ae:
e8:86:de:09:73:13:fe:b5:97:d9:19:be:1c:ed:7a:
f6:41:e9:54:e3:1c:fd:c5:db:e4:84:ae:3d:98:1b:
c5:52:1d:31:7b:50:64:6c:e1:1b:83:34:09:70:f0:
8a:67:c3:bd:f5:57:88:8c:fd:f8:97:1c:0e:a1:1b:
a9:6b:e6:0e:7f:b5:76:8f:f7:e6:9f:f7:31:c8:94:
69:b0:f2:14:28:2b:1e:d8:72:31:75:e4:f3:45:10:
2f:a5:4e:5d:d2:be:27:60:3f:7d:4b:8d:d4:7e:09:
e9:bd:e3:16:86:3b:3f:b8:04:7f:d1:b5:70:23:7a:
9e:6e:91:5d:bc:81:f1:e1:ab:46:3a:e2:72:bb:98:
89:fa:19:28:3d:c1:85:81:4d:14:ad:11:27:cd:80:
bf:3d:ac:61:45:16:8f:bc:0b:ad:07:44:7f:5b:7e:
a7:27:3c:27:8d:21:11:0e:d9:be:5e:63:65:b8:43:
14:db:13:4f:74:f0:b4:89:df:c5:cc:0b:09:2e:a2:
c3:e5:f5:11:c0:53:ff:e9:db:fb:c0:d5:cc:a9:e4:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:84:83:7F:ED:CC:FF:A5:8B:BC:14:82:CB:40:F2:9C:0C:E6:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/8fcee680-75d7-3c1d-928b-f6b782ccd6c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
X509v3 Authority Key Identifier:
keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
sbgp-ipAddrBlock: critical
IPv4:
134.199.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f1:f3:5d:e1:5d:78:40:c6:ef:4b:47:68:9f:65:aa:c9:e1:
a5:56:05:6c:2b:36:9f:81:02:a9:03:88:85:6f:65:d0:f6:75:
72:dc:7d:14:94:99:42:9d:f2:1c:b8:20:3f:4c:0d:11:1e:b2:
b5:7e:a5:0c:71:7e:2b:9a:86:f4:67:56:7a:1d:6c:29:e7:b7:
81:8f:63:54:d4:ff:f6:34:eb:76:d5:79:a6:44:cc:28:09:0d:
db:ff:91:fd:4e:c8:c1:ad:89:9a:98:b7:e2:05:23:44:4f:e3:
40:9b:e5:ae:b1:fa:c3:e2:e8:fc:5e:dc:f6:cb:71:21:57:2f:
1b:37:48:9f:2b:0a:fe:8e:bf:6c:a8:54:31:1d:77:97:4b:5c:
fa:bc:89:cb:2a:5f:cb:74:35:36:1d:7f:9f:42:b4:fc:e3:ff:
c0:97:33:61:84:75:ac:d0:cb:cd:17:e6:45:4e:7e:c9:94:b0:
5b:db:cb:0c:94:bd:62:b0:84:c5:1a:c8:26:d6:9f:b9:eb:1c:
81:8c:95:cb:d2:df:d7:a1:9f:05:4c:37:69:05:8f:33:b2:c9:
c4:7a:05:c9:16:a8:57:0a:96:ca:82:6c:29:51:b0:c5:6b:01:
4e:d0:53:23:d1:cf:f7:b9:3e:5e:ab:01:2c:93:05:03:a4:2d:
21:42:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org