Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e3cd9eb2-6b31-3588-b9e7-4cbc92cbf11d.roa
File: e3cd9eb2-6b31-3588-b9e7-4cbc92cbf11d.roa (raw, json)
Hash identifier: Ak6cOqiplKUYV6aD1vAMeVm3MI4qwx8AWUcWSH3rYeQ=
Subject key identifier: 8F:F7:D9:01:E2:3D:8D:B9:4B:A3:50:31:23:52:BA:DC:E1:29:D9:54
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F953B7BC000EA9E61D380
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e3cd9eb2-6b31-3588-b9e7-4cbc92cbf11d.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 5738
IP address blocks: 64.17.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:95:3b:7b:c0:00:ea:9e:61:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=63e6ef29-a652-4caf-941d-527347c8491b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:91:0a:33:43:b5:96:4c:3b:5c:13:ce:9e:
d8:8a:5e:8b:b0:e7:c4:ec:3d:03:12:48:3c:41:1d:
bf:dc:51:f5:6e:f6:21:d9:aa:8d:5f:02:6a:3f:f0:
48:5d:51:6a:fc:22:a5:4e:27:6c:41:61:bf:00:51:
84:28:be:cd:98:1a:1c:46:66:4d:3f:0e:cb:24:11:
8f:83:98:8b:f0:a0:84:3c:e8:95:4e:11:a9:18:09:
e5:f6:89:8f:dc:fa:b5:86:16:2f:09:0f:e3:56:b2:
d3:f5:95:aa:96:4b:3f:7a:c8:64:4a:95:c6:67:6f:
bf:72:cc:09:4c:40:fa:6a:4d:ab:3b:c4:20:53:2d:
fc:77:f9:e4:b8:ef:2e:60:f9:f4:d2:28:96:df:56:
fa:ef:e8:96:a3:a5:40:3d:8d:21:cc:86:c8:eb:bd:
e1:d6:81:74:aa:78:15:f7:e3:08:09:88:06:ed:c4:
96:f7:ad:62:6e:44:03:36:da:30:b1:3e:eb:aa:44:
cd:73:ce:ea:a7:35:b4:57:5e:a3:67:f5:7f:2d:00:
ba:2d:01:b7:8d:7c:0b:38:92:f7:e8:99:75:a6:32:
d0:9b:28:ed:ed:21:b4:e5:ba:fd:82:22:41:6b:5a:
1c:b4:66:39:62:17:71:61:89:30:30:0f:95:aa:45:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:D9:01:E2:3D:8D:B9:4B:A3:50:31:23:52:BA:DC:E1:29:D9:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e3cd9eb2-6b31-3588-b9e7-4cbc92cbf11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.17.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b0:53:3e:de:d5:35:f6:0b:e5:1d:d4:d1:f1:ef:0c:41:c3:
68:db:e8:c4:10:27:77:31:ec:a4:da:d1:e8:f6:0c:e5:38:3e:
be:69:fd:b4:a5:f9:5e:96:3f:e8:08:07:97:b9:f7:d1:ce:77:
5c:06:7e:b8:16:e9:36:4f:4a:63:05:c5:89:cf:9e:31:ea:6e:
a8:c2:02:d3:7a:8f:19:d8:fc:27:6c:8e:31:81:72:a6:aa:88:
f9:c4:4d:d5:32:6c:4a:57:92:cb:c5:26:75:8e:a6:67:ad:a6:
89:79:fb:0c:a7:c0:7e:b2:c0:e9:44:87:21:e7:29:cc:6f:ea:
ff:ca:7e:83:93:79:dc:2d:73:db:34:7f:f4:0f:c6:c1:bf:cf:
dc:88:63:25:b8:a7:da:39:da:90:03:3b:9b:e4:80:00:84:83:
68:6e:eb:3e:62:fb:ea:3d:e2:a3:b0:a2:91:97:5d:94:0a:f0:
f7:66:1d:77:b9:c2:f3:1d:06:36:85:f0:52:d5:03:8c:f5:b9:
2a:55:63:ef:29:44:b4:5e:1a:97:28:f5:bb:c7:cd:8f:3c:c2:
f7:a9:b3:ea:97:3b:52:bc:18:df:89:bb:7b:73:0d:ab:72:0c:
00:42:ee:a3:60:f9:41:18:a5:90:88:43:bc:5d:4a:8a:34:54:
24:f5:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org