Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/fdd45d84-20c7-3af7-aaf9-352d4330c2c3.roa
File: fdd45d84-20c7-3af7-aaf9-352d4330c2c3.roa (raw, json)
Hash identifier: vzgijWBZFAC9nTkTcEBULy8y0gWJ/tMaFb12vOVZ+uY=
Subject key identifier: 5B:86:18:F2:25:B6:72:0F:24:B8:AC:9A:CA:60:20:7D:11:FE:AC:9A
Certificate issuer: /CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
Certificate serial: 010D0C9F4328584322011F4C4095D47B65CC8F00
Authority key identifier: DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/fdd45d84-20c7-3af7-aaf9-352d4330c2c3.roa
Signing time: Wed 06 Sep 2023 12:31:57 +0000
ROA not before: Wed 06 Sep 2023 12:31:57 +0000
ROA not after: Tue 05 Dec 2023 13:31:57 +0000
asID: 174
IP address blocks: 199.7.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:01:1f:4c:40:95:d4:7b:65:cc:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
Validity
Not Before: Sep 6 12:31:57 2023 GMT
Not After : Dec 5 13:31:57 2023 GMT
Subject: CN=2406f86e-36c4-46c5-8273-61ff8df53291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:61:82:43:c8:db:d5:93:30:58:3a:a7:14:
16:24:b5:f0:dd:6e:e8:07:1c:0c:74:70:44:42:6b:
13:b0:76:2d:f5:08:97:e9:e9:34:ae:26:f5:c5:d0:
f2:08:03:f4:33:63:1a:5e:bd:07:9e:5b:f0:77:cb:
e8:73:9a:5e:c4:5e:1e:6a:72:69:a5:54:d4:8c:69:
d5:d9:a6:41:bf:c1:b3:d0:f7:f0:0f:ef:66:19:7e:
c3:d4:5d:a9:87:47:fa:48:73:39:37:96:7c:d3:c6:
de:c2:7b:6e:c0:76:38:5b:a9:b8:43:3f:c5:45:3c:
37:8c:1a:81:91:3f:59:3b:fb:8b:1b:97:c7:5e:7a:
71:5a:75:66:f1:ef:4f:8b:bc:c1:53:96:0e:ca:aa:
0b:cd:6f:f6:73:41:0c:bc:73:57:4a:e5:8b:13:33:
c3:57:cb:99:1c:88:cc:e6:3f:d3:7c:dc:d9:c7:62:
98:94:01:72:a9:7f:d9:07:14:91:59:21:78:7e:5e:
67:d0:b1:1d:e0:0a:0f:40:3c:e1:6c:d1:75:0e:f1:
f7:d9:a6:24:a7:68:e3:5d:f6:e1:03:d8:64:88:07:
c8:9e:34:e0:f2:e4:70:8c:33:80:3c:b3:a0:50:1f:
f6:8f:48:b1:14:b8:dd:0d:20:e5:b5:90:a7:f9:f6:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:18:F2:25:B6:72:0F:24:B8:AC:9A:CA:60:20:7D:11:FE:AC:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/fdd45d84-20c7-3af7-aaf9-352d4330c2c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl
X509v3 Authority Key Identifier:
keyid:DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0f:89:2b:94:dd:f3:b7:3c:1e:68:99:d1:f5:e8:04:67:40:
61:ef:a9:71:15:58:eb:94:ba:c9:b9:92:5f:5c:ec:50:c3:b5:
b4:82:0f:6d:9d:ae:26:4f:fe:ff:5e:91:46:e5:59:c2:0a:75:
86:6a:c3:09:bc:3e:dc:dd:fc:2e:66:78:ac:ed:f4:09:c6:8d:
c2:3d:0e:61:94:d5:9f:3c:18:09:79:3c:7f:9b:5f:0a:db:a7:
ca:9d:3c:b4:64:ee:a3:58:98:b0:b3:2d:21:c6:10:4f:c5:27:
a2:82:26:14:6d:c8:06:35:5e:4a:3b:d2:ba:6f:a1:d3:f3:ba:
55:89:d1:01:0f:70:59:8f:10:7c:03:fc:2f:e9:43:a2:e2:dd:
f5:dc:a5:77:99:32:de:10:d5:d8:d5:2b:dc:83:b9:a8:b2:dc:
e1:21:a6:b3:aa:20:42:86:28:b7:c3:55:e9:45:b0:3c:13:51:
b8:92:ea:39:e3:b1:1a:25:fa:5d:17:79:cc:eb:2f:45:60:35:
b4:12:2e:05:59:12:cb:d1:69:02:31:9b:5a:89:a1:07:81:a4:
bb:49:0b:70:55:42:dd:6a:45:73:40:69:5f:9f:e2:aa:0a:25:
62:5a:b1:f8:9b:c8:69:13:03:30:c9:2b:2b:c2:71:94:3e:7b:
9b:41:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:02 2024 by rpki-client on console-fra.rpki-client.org