Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a644c40-d8b1-3a43-b360-e82877fb1b3d.roa
File: 3a644c40-d8b1-3a43-b360-e82877fb1b3d.roa (raw, json)
Hash identifier: UKfezBYXrGZyxuV6uwWpNeICmM+LTaSrWlDy70hy1GQ=
Subject key identifier: 92:DE:E0:B5:F8:BE:A2:AA:97:C1:94:20:3B:7D:B0:37:7C:74:51:7C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584428995A90B1D244A91C551100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a644c40-d8b1-3a43-b360-e82877fb1b3d.roa
Signing time: Sat 09 Dec 2023 14:00:21 +0000
ROA not before: Sat 09 Dec 2023 14:00:21 +0000
ROA not after: Fri 08 Mar 2024 14:00:21 +0000
asID: 9009
IP address blocks: 45.74.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:28:99:5a:90:b1:d2:44:a9:1c:55:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 9 14:00:21 2023 GMT
Not After : Mar 8 14:00:21 2024 GMT
Subject: CN=5649d295-780d-492f-9b73-122b66a8ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:e6:59:f7:dc:50:2b:22:3f:12:5b:4f:04:
d9:45:1e:27:f5:71:e7:e5:b0:b8:e2:79:fe:56:0f:
2d:be:06:14:b3:2b:fb:67:c6:93:77:7b:ff:a1:b3:
f0:4c:f9:b7:88:f7:9c:3a:8b:04:5a:d4:7c:7d:7a:
47:08:54:eb:3a:c0:7c:3b:ad:b8:b9:e7:0b:a9:34:
1e:fb:f7:76:4e:68:b5:1f:24:b4:72:26:eb:42:67:
3e:f4:b4:56:4a:33:58:d6:3d:f3:c8:42:25:d5:d1:
a8:96:48:49:c6:26:e8:ec:c9:09:75:82:c9:97:f6:
8e:bd:b6:9a:61:42:4b:1d:50:3f:5b:8f:44:9e:68:
b3:96:bb:72:6a:a5:88:85:d0:ac:9e:41:d4:8d:df:
3d:50:8a:d1:52:b3:2b:85:99:f9:d7:67:8e:c9:e9:
84:d4:76:35:bc:3b:d6:7d:6e:f8:49:0c:7b:de:ed:
be:88:3b:6c:4a:a1:df:fd:dd:00:14:11:60:d9:7d:
86:7a:f0:dd:da:31:6b:5a:bb:15:b2:e7:b1:03:af:
f4:3f:b5:d6:e6:06:a6:e7:8f:ec:6e:ab:98:46:fa:
5a:32:db:a2:22:fa:4d:80:99:be:4b:6d:a2:27:eb:
0b:16:fa:57:e9:8e:0e:df:45:cc:b4:75:ae:29:23:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:E0:B5:F8:BE:A2:AA:97:C1:94:20:3B:7D:B0:37:7C:74:51:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a644c40-d8b1-3a43-b360-e82877fb1b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:34:fc:bf:f6:6e:aa:d3:66:4e:d6:5c:6c:f9:b7:3d:9e:19:
8a:54:3f:80:dd:58:59:fe:35:72:92:9a:24:e0:08:64:18:71:
1e:a5:30:c2:26:d7:9c:d3:19:34:c4:f1:54:c5:dd:7d:2a:df:
25:2f:9c:8e:6e:19:c1:d6:d1:db:41:3b:15:52:53:73:83:52:
e0:6b:64:11:44:d8:8c:b8:aa:1c:11:dc:6a:58:63:42:59:2e:
ca:c2:40:6a:8e:b6:c7:1c:51:0a:1b:fc:11:93:e0:c8:a4:af:
c5:a3:e3:82:4d:b2:9a:0d:50:45:bd:c8:11:5b:52:30:f8:ab:
83:7c:d7:1c:c9:06:fd:73:e9:09:9a:d2:b9:61:5d:49:d7:01:
f8:fa:c0:18:0d:5e:4f:6e:6c:48:14:50:75:d8:8c:e9:ac:53:
45:aa:94:a0:70:63:da:bd:46:e1:63:46:b8:72:22:4d:0a:70:
36:12:07:56:9d:ef:3d:c9:ba:e3:5e:74:82:a3:e7:ef:20:3c:
74:24:f8:bc:24:e1:d8:7f:a3:19:04:c4:50:92:4c:73:26:81:
a5:2a:17:ad:dd:f8:f0:42:38:7b:3b:c6:d8:fe:27:b3:88:12:
56:2e:8d:57:3e:e6:7d:7e:ef:63:19:0c:d4:65:2d:b6:99:d4:
69:f0:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org