Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa
File: 1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa (raw, json)
Hash identifier: Y7T+UWNzehwVxySXAZSRW5810qxbd8tm9b10Rl1h2sQ=
Subject key identifier: 40:7B:24:62:6E:5B:E0:26:59:74:F3:3A:76:42:02:46:AE:B1:E5:30
Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial: 010D0C9F432858437ED0DB2254EB5A7E10A72000
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa
Signing time: Mon 09 Oct 2023 18:24:52 +0000
ROA not before: Mon 09 Oct 2023 18:24:52 +0000
ROA not after: Sun 07 Jan 2024 19:24:52 +0000
asID: 1239
IP address blocks: 104.171.22.0/24 maxlen: 24
104.171.23.0/24 maxlen: 24
104.171.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:7e:d0:db:22:54:eb:5a:7e:10:a7:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
Validity
Not Before: Oct 9 18:24:52 2023 GMT
Not After : Jan 7 19:24:52 2024 GMT
Subject: CN=c70449f4-5f8f-410a-93f5-ee0c74ea8cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:58:d4:6c:16:b5:01:38:65:56:32:db:cd:
ca:81:6b:b2:01:12:f9:95:5f:ff:40:a8:66:27:5b:
e5:22:c5:3f:56:76:fa:15:32:4b:80:17:07:29:a8:
bf:2b:03:55:ef:44:46:3c:e8:2d:d7:2c:f7:16:a3:
5e:98:0d:67:a2:6a:9e:ea:7b:b7:09:4f:03:a4:11:
be:9a:95:90:28:df:ff:eb:cb:26:0e:aa:74:ef:c2:
e0:58:23:30:80:3d:56:c9:8f:9b:81:72:5b:d1:53:
c4:bf:6c:56:cc:5c:40:05:34:9d:a4:c9:99:76:0c:
04:3d:57:69:97:f2:25:45:e2:96:e3:6a:76:d0:e9:
ca:4e:45:06:45:2f:ae:8e:8c:09:e8:5a:92:84:91:
3c:cb:ef:ef:95:a0:de:bd:9b:6f:99:50:d9:44:b9:
cf:2e:4e:bb:30:b6:7a:82:ce:1a:05:6c:ef:8c:a5:
2d:f2:80:22:43:25:94:d8:5b:28:36:da:70:6e:78:
0d:da:9a:33:c6:fe:cc:6a:92:c6:80:85:af:a3:79:
63:3f:13:dc:dc:4d:5d:5b:af:2e:ac:88:29:65:25:
ac:46:3f:65:5a:98:f5:45:ea:50:96:a7:28:48:a3:
30:40:1c:f3:03:89:54:01:6c:73:39:38:e5:0f:02:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7B:24:62:6E:5B:E0:26:59:74:F3:3A:76:42:02:46:AE:B1:E5:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
X509v3 Authority Key Identifier:
keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.22.0-104.171.24.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f0:71:64:bd:28:65:cd:45:35:7d:0d:de:64:0d:83:1b:71:
d5:77:be:18:5f:5b:3f:c6:90:2a:5e:0b:f2:48:3b:ec:bc:bd:
41:af:3d:2f:a4:bb:27:1d:80:84:2d:58:f3:5b:0a:eb:8c:8f:
e8:8e:a5:d5:58:85:2d:e6:2c:9d:fb:5c:4d:c8:40:f1:cc:f5:
3b:62:a3:8d:0e:98:29:22:33:df:d6:8e:fc:9d:13:81:c1:23:
3a:5a:72:3a:af:1c:13:d0:f8:36:58:89:7f:f8:85:47:fc:a3:
61:39:d8:10:dc:fd:05:d9:f8:42:e6:87:30:3d:47:ae:fa:31:
dd:77:ad:79:66:5d:1b:29:c0:dd:83:64:d9:c0:95:ff:99:1f:
40:8b:53:41:36:5c:87:f2:c7:3b:a9:09:54:27:98:cc:d3:0f:
de:41:58:01:96:58:db:5c:9b:24:1d:10:d0:0a:01:0e:e9:c3:
3b:b5:43:1a:ca:09:5d:01:b9:5d:e4:31:6d:0f:ba:f3:4a:87:
86:99:3c:f8:bf:89:fd:bd:a5:bc:a8:3b:d4:ea:bb:21:f6:75:
0f:99:f0:6a:cc:69:52:dd:71:4f:05:da:da:2a:2c:a1:8e:c2:
7e:04:d7:c8:91:a6:d5:61:ea:4a:32:bc:48:82:f6:a4:cc:0e:
ea:89:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org