Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/3b077d63-4369-3fe5-a724-fdd76771c826.roa
File: 3b077d63-4369-3fe5-a724-fdd76771c826.roa (raw, json)
Hash identifier: iwArsxxKaAd/lAHcynxwVQ1tbQx5c7UFxzsLseOTkqM=
Subject key identifier: 60:3A:0F:F3:9C:8F:6A:AB:67:E5:44:B1:C9:AA:90:E0:E0:DA:92:85
Certificate issuer: /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial: 010D0C9F4328583C8D23F8062F33BD008CDBB600
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/3b077d63-4369-3fe5-a724-fdd76771c826.roa
Signing time: Mon 10 Jan 2022 05:00:00 +0000
ROA not before: Mon 10 Jan 2022 05:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 104.249.160.0/24 maxlen: 24
104.249.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8d:23:f8:06:2f:33:bd:00:8c:db:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Validity
Not Before: Jan 10 05:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=7fa0585b-2550-4248-8177-318920bfbaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:22:0e:35:46:1f:fb:1b:24:7e:e3:4e:09:
b7:96:e3:1c:b5:00:63:f6:12:75:ff:94:b6:14:17:
6a:c4:61:d9:a2:f8:3a:54:ff:9f:29:9e:48:fa:a3:
e3:b3:79:a4:56:ef:58:e4:38:66:b0:26:5c:9a:13:
96:68:6c:42:72:31:9b:14:5a:16:e8:a4:c4:b2:59:
e6:02:ed:c9:c8:83:57:df:99:f8:5f:a9:9f:27:9c:
57:60:04:f7:70:b5:2a:35:10:fd:bc:61:57:3c:63:
49:e7:25:1c:14:10:f4:f8:26:fe:3a:5d:9b:83:2b:
e5:54:b6:eb:80:87:85:3e:06:a4:77:f7:58:a0:ae:
c0:b9:82:70:f3:2f:7a:d8:33:2e:79:d7:20:c0:27:
89:b5:da:e0:a0:9d:0a:1e:30:e4:83:73:b5:ef:79:
4a:37:7e:2b:fd:0c:0a:29:18:13:1e:d4:3a:5d:b5:
b6:28:02:96:42:eb:c8:d9:50:0d:d1:3a:26:0d:94:
bf:46:ca:ec:b4:20:42:ba:78:04:ca:e3:8c:61:61:
42:48:46:b1:3f:f0:e6:45:40:a9:e0:f6:62:bd:51:
83:08:68:f2:55:db:8e:87:02:f2:36:e9:44:e1:03:
a4:1e:23:ec:c3:5f:d5:ef:8e:fc:6d:01:2b:29:21:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:0F:F3:9C:8F:6A:AB:67:E5:44:B1:C9:AA:90:E0:E0:DA:92:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/3b077d63-4369-3fe5-a724-fdd76771c826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
X509v3 Authority Key Identifier:
keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:16:81:b6:97:27:45:57:a1:a7:87:5b:cc:4a:98:b3:21:25:
61:b7:3b:6a:19:77:1d:e3:aa:da:40:67:be:92:ec:36:98:47:
dd:05:f9:92:77:f4:41:1a:e6:f6:a4:c3:de:e0:a8:40:af:f9:
4e:7a:1c:3d:a3:37:f4:64:8f:12:70:17:85:c8:ec:7b:07:e4:
a1:15:74:05:1b:84:b2:ad:79:50:6f:20:0f:d1:3e:4a:99:16:
a9:a8:96:2d:f9:7c:cb:5d:6b:0a:00:86:68:f9:1d:a5:b5:57:
b5:64:ba:26:a7:66:6b:4d:29:9f:cc:c0:64:20:8f:a7:da:6e:
3e:f3:f9:2f:a7:01:83:20:16:3d:c3:b1:a8:f2:65:21:d2:06:
96:7c:82:09:4d:59:f5:b8:91:ad:a7:f9:1c:61:bb:bc:b3:ca:
76:e3:3e:53:77:76:17:a3:56:fe:84:f1:c3:23:db:b5:48:c1:
97:c7:b4:fc:7a:05:79:32:4b:8e:81:c8:d3:5a:a3:ed:90:36:
1c:3a:f0:4c:b2:21:29:5e:c7:20:b2:99:90:cd:57:9a:d2:4b:
65:5e:43:9c:67:1f:bd:34:c2:b8:6c:bc:96:bb:0e:05:71:4b:
78:01:7b:19:0c:46:40:d2:16:94:f7:6a:91:da:e7:3a:fc:fa:
03:26:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org