Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/795a4b79-107c-32f9-ad7f-439464870265.roa
File: 795a4b79-107c-32f9-ad7f-439464870265.roa (raw, json)
Hash identifier: SGbdZt0cGmmEyWO5k87GeczK4F60413T4oC3hpY+iCw=
Subject key identifier: CE:51:4A:FA:FB:6E:22:69:3F:C2:97:B1:CA:0E:C5:B0:CC:55:9A:48
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F95476B483B92F8207D80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/795a4b79-107c-32f9-ad7f-439464870265.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 15320
IP address blocks: 216.130.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:95:47:6b:48:3b:92:f8:20:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=21515374-579d-48dd-8712-7443a491a207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:3f:eb:90:c1:08:77:ab:23:b0:9b:2a:b9:
16:fc:ae:f9:6b:31:b3:34:69:d7:0c:d1:6b:97:72:
3d:49:89:60:e5:74:01:3d:e4:ea:6e:49:e9:16:47:
58:1e:bf:de:bd:4f:52:56:9f:e8:f6:92:43:cf:de:
59:04:20:1e:55:bc:03:56:9f:c2:40:6c:37:d2:cc:
58:55:24:a5:f3:02:57:dd:df:8f:f9:88:45:b0:b2:
3d:0a:c3:ca:7f:03:82:aa:c6:8a:48:5d:94:53:58:
9b:ca:e2:8a:ce:40:89:54:80:8b:c7:d1:bc:cd:32:
a6:5b:ab:47:e9:ef:61:c8:64:b2:57:3e:e0:01:88:
bc:15:47:77:82:d2:18:e1:f4:30:a5:7b:fb:62:72:
df:9b:b9:48:05:37:cf:e1:a0:8a:7a:1a:23:6e:eb:
5b:61:45:af:c4:d7:73:ef:39:a1:5b:95:4b:32:40:
fa:04:8f:4c:a1:66:22:d0:2b:aa:5c:13:38:27:e1:
be:69:56:0a:17:a3:97:13:b0:4c:29:55:a6:76:09:
c6:f7:07:97:09:62:f8:1b:e1:da:d5:4b:39:f6:58:
5c:ce:a1:45:da:c6:5e:eb:30:7b:23:9d:1c:0e:02:
9d:e2:3f:35:9b:c9:d3:45:0e:b9:1c:e8:68:87:85:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:4A:FA:FB:6E:22:69:3F:C2:97:B1:CA:0E:C5:B0:CC:55:9A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/795a4b79-107c-32f9-ad7f-439464870265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.130.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b9:a2:b8:6b:b4:1f:02:02:ad:40:8f:35:32:f8:52:5d:3c:
cb:35:d8:f1:71:c5:9e:41:c8:39:10:3b:72:7f:6e:cf:eb:1e:
ae:eb:8f:db:d6:2e:17:34:9a:d9:88:8a:1b:88:17:95:88:30:
fb:26:da:93:16:a3:af:89:5f:e3:0b:cc:26:7e:46:f0:08:01:
b0:f2:1b:66:05:93:dd:06:63:2d:4e:d9:f8:eb:54:1c:35:91:
e2:b4:e9:42:54:2c:8d:ff:e0:33:3f:b6:83:6c:39:13:44:84:
4b:39:fb:94:8a:c1:60:4a:6c:9a:44:35:4c:34:6f:fc:b9:bd:
05:b6:3e:c1:21:68:aa:a2:95:d0:7c:f1:a9:bb:aa:04:a7:54:
c4:a7:ad:50:15:0c:c9:3c:9c:b6:ed:2b:65:3f:e4:4f:19:0a:
42:d9:16:29:9d:72:20:56:34:d0:af:68:72:f2:58:09:61:a2:
75:d9:69:fa:81:a8:f6:db:9b:a5:ab:f3:0f:26:6a:a2:21:ca:
1d:db:33:f4:5d:72:bd:86:36:df:c4:6c:f9:72:43:cf:95:2b:
6b:82:a0:9d:25:c0:16:a5:2a:9c:c1:e0:55:f3:a6:f1:e5:74:
1a:e4:90:87:f1:57:f0:32:60:10:55:8f:af:19:3c:fa:27:6a:
f3:1b:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org