Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/55a0e839-9e43-3bba-9e15-bcb5d03f1349.roa
File: 55a0e839-9e43-3bba-9e15-bcb5d03f1349.roa (raw, json)
Hash identifier: 3vbznb7ecqUkjj8kyA1xcjjkO4RGwPAF5QdGzLNZv00=
Subject key identifier: D5:BD:F8:75:28:04:74:C6:C2:0D:E8:FB:F4:0A:54:DA:A2:DE:8F:7F
Certificate issuer: /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
Certificate serial: 010D0C9F4328584213D34638900D4D88A86BCF00
Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/55a0e839-9e43-3bba-9e15-bcb5d03f1349.roa
Signing time: Thu 01 Jun 2023 17:51:19 +0000
ROA not before: Thu 01 Jun 2023 17:51:19 +0000
ROA not after: Wed 30 Aug 2023 17:51:19 +0000
asID: 204843
IP address blocks: 74.80.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:13:d3:46:38:90:0d:4d:88:a8:6b:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
Validity
Not Before: Jun 1 17:51:19 2023 GMT
Not After : Aug 30 17:51:19 2023 GMT
Subject: CN=6709bdf9-d008-4b2c-a655-4ceb643b7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:64:ac:ec:68:aa:a7:95:a0:12:3f:5e:64:
80:8b:3d:17:9c:e4:a3:ae:21:0f:98:21:e0:b5:6a:
0f:7b:ab:66:a1:96:b9:c7:bb:ce:d7:60:fa:72:95:
28:c8:96:da:54:18:92:4a:92:9d:42:dc:42:48:39:
db:f0:14:6b:c2:bf:05:91:b0:8a:ca:45:53:a1:b0:
5c:7b:24:0d:b4:fe:c6:1b:ba:13:f3:ef:d1:6e:e0:
32:f6:bb:3e:aa:fd:2f:9d:34:31:94:b6:28:5a:22:
e5:07:1b:65:f2:1a:fc:c0:3d:5d:2f:d8:18:6c:f3:
b4:5f:f5:43:bf:3a:25:7c:42:55:f5:df:64:9e:9e:
66:51:5a:cd:dd:a8:78:ed:65:67:0e:75:d4:9c:d0:
01:5e:89:49:28:3c:6e:32:5e:08:91:9b:5c:39:e5:
81:ef:e4:13:47:fe:11:53:23:c3:a7:0e:a4:23:3c:
30:81:5c:8e:eb:9f:ea:2f:cf:2e:39:af:50:3f:54:
2e:45:31:03:62:67:f2:35:9d:4a:e0:2f:85:33:c7:
45:0f:11:8b:24:4c:ac:01:a8:bc:a2:2a:05:23:67:
09:8a:5d:43:41:c9:aa:d1:3f:49:2f:7e:ef:e0:42:
ee:4a:ba:5d:6c:a2:23:90:45:d9:be:2a:35:19:3c:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:F8:75:28:04:74:C6:C2:0D:E8:FB:F4:0A:54:DA:A2:DE:8F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/55a0e839-9e43-3bba-9e15-bcb5d03f1349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl
X509v3 Authority Key Identifier:
keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.80.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8e:01:67:ba:bf:b9:96:59:76:22:60:1e:86:de:e3:81:c4:
c7:94:8e:76:8e:a0:7a:2e:e3:b3:37:5a:56:79:35:2e:4f:6c:
20:56:91:25:f3:0d:6b:fb:a9:03:2c:0d:4b:eb:7c:47:5a:3f:
2a:78:aa:d4:f0:bb:63:e9:7f:ec:4e:80:55:b1:b0:0f:dd:b4:
af:4a:3e:eb:a7:9c:f2:6e:2c:74:1a:ab:46:8c:82:ee:05:48:
0f:a3:15:f2:63:33:f4:da:28:1b:ec:be:c9:0f:41:0d:62:23:
1f:01:70:b7:0d:1a:2e:bb:31:c8:07:78:9c:e6:6b:5f:3e:0b:
b4:50:dd:21:f5:56:cb:5b:86:e8:be:dc:73:c9:8d:54:12:93:
0e:b1:ac:64:9b:62:a0:9f:24:d6:ae:e0:a5:db:6a:79:fd:f9:
27:26:27:fe:11:b0:44:be:f5:db:29:75:0f:78:43:c4:1b:a6:
74:1f:d0:e2:dd:6b:dc:90:28:da:bf:78:6e:fb:d3:15:7f:45:
81:5b:b8:63:4f:d5:a8:13:0b:4d:d9:68:5a:1e:36:f0:0d:7f:
c0:db:8d:fd:26:d6:32:b4:1b:29:93:9f:f6:b1:70:47:e2:54:
59:6c:f3:d9:27:19:24:b2:c5:56:ae:24:0a:7e:68:7f:c8:52:
90:25:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org