Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/466573e3-b6bc-33be-b0fa-4f42c9c5881d.roa
File: 466573e3-b6bc-33be-b0fa-4f42c9c5881d.roa (raw, json)
Hash identifier: +0wqaQ15qLf0xLnjwarJnkfoqTMxBRL73p0jHh6zG70=
Subject key identifier: EF:4B:7E:FA:F2:87:8D:A0:D4:36:CD:7E:7C:E9:BF:05:F8:76:C6:26
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BC832FE44B9EC1B8340
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/466573e3-b6bc-33be-b0fa-4f42c9c5881d.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 27382
IP address blocks: 69.84.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:c8:32:fe:44:b9:ec:1b:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=19006ca0-7426-4a80-9eff-3c657207c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:28:62:f2:aa:0e:28:e2:af:48:3d:04:0c:
00:f2:de:d9:ef:1a:ef:48:1e:1d:04:2a:0c:df:bd:
aa:58:91:48:08:c8:63:90:49:b7:ad:bc:40:72:e5:
81:8d:b4:63:2d:3c:68:bd:bc:f6:f7:cb:f3:f9:16:
88:50:4d:de:d6:59:dd:71:50:65:93:a4:6e:c9:2d:
87:f2:23:73:6d:08:05:29:cb:55:59:a1:5f:4c:de:
46:91:54:54:95:b2:2e:49:c5:7b:1c:6e:22:fe:3f:
aa:ee:53:ce:c0:63:f6:19:ce:b6:93:85:de:a5:49:
8b:0d:c3:8f:d9:58:5a:a4:1f:2c:e6:28:71:f6:f4:
92:23:a4:21:28:76:2f:d9:94:67:c8:16:58:de:c9:
84:ed:08:67:3b:f0:af:92:95:d7:b3:c2:21:0f:34:
74:2d:20:37:90:f8:54:f0:28:07:b9:d3:d5:29:6d:
7b:dc:13:b6:7f:10:9d:78:75:f8:ea:d5:82:ea:42:
71:78:ab:9c:79:f0:b9:39:0f:b3:6c:89:b6:b4:c6:
bf:c9:7e:bf:21:b6:94:9a:d7:39:a7:cb:3e:b7:90:
98:5c:bf:2f:1c:26:83:5d:8b:1e:c8:b0:73:22:71:
ec:b3:c3:65:82:2e:cf:55:be:7c:23:9d:08:02:41:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:7E:FA:F2:87:8D:A0:D4:36:CD:7E:7C:E9:BF:05:F8:76:C6:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/466573e3-b6bc-33be-b0fa-4f42c9c5881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.84.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:95:a2:aa:16:cb:58:dd:7f:d6:a7:a2:ab:89:40:9e:d2:e7:
c4:11:eb:2f:e1:8b:2f:23:06:58:e9:00:23:87:87:39:b6:89:
d4:5f:9b:ea:86:68:31:d4:a3:ce:76:f4:aa:8c:db:8c:ba:62:
57:be:1c:9a:02:88:79:8b:09:ed:4e:1b:37:8e:e1:96:39:4d:
c5:c5:99:df:3a:eb:4d:82:ef:f8:21:da:dc:fa:25:71:13:65:
72:e8:f0:d8:a6:f9:a7:24:3c:e0:3c:e3:17:79:12:cb:a8:c1:
6b:de:8c:52:79:19:80:00:02:b7:92:a7:69:4e:21:0c:e6:c2:
80:12:80:38:87:04:11:9d:44:ea:e6:dc:c0:da:f0:30:96:90:
af:05:2e:ac:1c:2d:45:30:2f:4c:98:76:53:f8:61:3a:0f:7f:
90:a8:62:50:4c:fb:dd:4c:cb:74:0c:ce:66:6e:a0:46:bc:c6:
42:b7:75:6a:18:7a:dd:c8:2e:84:7c:85:36:48:96:2a:e2:2f:
9d:ca:32:1b:e4:80:53:91:49:0b:2c:8e:70:47:b6:6f:90:3d:
00:78:54:8f:76:18:ba:3a:0c:49:a9:de:14:d2:06:c9:6d:47:
61:ef:7b:e4:53:9c:be:d9:39:61:74:1b:7c:4d:85:f6:cd:4b:
e6:50:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org