Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8347b224-591e-3a8b-83d3-6d06cd062e11.roa
File: 8347b224-591e-3a8b-83d3-6d06cd062e11.roa (raw, json)
Hash identifier: eh/2YDJ+Qc4Sox4sDzhMHPEB8/DAkg5UcZrvDyc8AMM=
Subject key identifier: A3:12:51:F4:23:A6:2F:E9:50:92:D3:0E:29:16:27:8C:1D:D9:13:87
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F8F18747E6C9CE8DCE8A0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8347b224-591e-3a8b-83d3-6d06cd062e11.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 8120
IP address blocks: 209.94.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:8f:18:74:7e:6c:9c:e8:dc:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=2114bcc6-186b-4a35-bebc-ac9d1c08b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:d4:1e:bc:d5:3b:a0:6d:82:dc:59:fa:67:
e0:c4:95:ce:72:ce:aa:26:50:79:33:e6:be:02:f6:
1a:1a:c1:3b:90:4f:69:6e:dd:a2:95:30:72:be:63:
57:85:26:71:31:f5:9c:97:08:76:76:ef:a0:81:d1:
f5:e4:e0:3c:8f:a8:ae:ec:01:cd:22:56:b1:a7:e7:
bf:28:8a:04:b4:61:9a:66:e0:da:d1:d8:8c:d0:0a:
5f:bf:df:42:00:37:10:e4:46:0a:86:45:75:e6:35:
a4:b3:82:bd:36:2e:42:4c:be:b4:1e:ec:4f:3d:56:
0a:0c:89:56:7d:2d:ea:a0:a8:a0:7d:20:a4:27:94:
05:86:97:2d:d7:91:ed:06:4a:12:34:52:3a:44:fb:
8e:1e:74:d7:b3:e6:ee:9b:78:36:80:47:32:3b:3b:
cf:1d:3b:de:b6:ab:a8:1e:19:1a:17:03:47:2e:09:
46:86:32:0d:fe:c7:59:e7:30:ea:21:a5:6b:b2:ca:
0e:81:e1:35:4f:7f:3f:76:7a:a9:8d:d2:aa:42:49:
09:cf:0e:1b:90:a5:0c:58:52:d1:57:bf:b3:02:0c:
39:2b:51:d5:aa:7b:b8:e8:35:01:c9:53:62:7c:8d:
9a:2d:a7:c7:ae:30:5a:df:9b:e6:00:97:18:96:85:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:51:F4:23:A6:2F:E9:50:92:D3:0E:29:16:27:8C:1D:D9:13:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8347b224-591e-3a8b-83d3-6d06cd062e11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2a:7e:6f:ea:3d:4d:3a:47:01:6f:5c:42:40:86:d1:ac:c3:
09:ef:91:58:0b:a9:77:c6:b2:e2:9a:e3:31:87:a7:70:a8:65:
13:10:87:6b:c1:9c:b0:2c:87:fd:1d:d7:d1:22:6c:4f:83:61:
b6:9b:84:30:13:e3:e2:99:8f:92:2b:54:d1:00:61:9e:45:c9:
3e:70:b2:f3:95:a8:05:e6:c6:7d:4c:b9:44:ae:51:10:bb:b5:
dc:cb:83:46:1a:36:f3:68:7a:52:fb:0d:69:6d:c2:68:a6:52:
26:86:5f:94:89:e0:a1:36:f9:be:4d:07:5f:e2:01:c3:45:25:
17:5d:aa:53:fd:82:05:52:48:66:41:22:c1:d7:4b:24:fa:dd:
a0:3c:ac:fb:64:49:66:2d:ed:e9:b7:37:7b:64:14:01:ed:a6:
5f:27:74:ce:ce:2c:8e:b2:9e:5e:c3:55:bb:44:01:65:ed:68:
5c:bb:45:b1:e8:ea:d9:b9:8f:fa:b6:fc:4f:c6:3e:33:d8:a3:
f2:0c:8c:22:64:e5:70:fd:e9:f3:b4:93:93:22:91:0f:80:1d:
1c:fd:59:3a:46:ff:b0:f6:71:0a:e2:ea:af:11:5c:91:63:df:
31:0f:fb:d1:ae:c7:91:d5:74:76:df:07:4b:83:57:af:bf:0d:
9b:06:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org