Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d2ca5047-1d2e-3125-9736-aa26520cd389.roa
File: d2ca5047-1d2e-3125-9736-aa26520cd389.roa (raw, json)
Hash identifier: Yv8HQggez/uVG7gAHDtwe5nnV85Dg4BNlTIAk6GJm9Y=
Subject key identifier: 20:3D:EF:14:82:4B:45:4E:77:FD:88:40:86:DB:98:6F:41:A2:79:17
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F43285844D17FC34126562963DA430040
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d2ca5047-1d2e-3125-9736-aa26520cd389.roa
Signing time: Thu 08 Feb 2024 02:00:26 +0000
ROA not before: Thu 08 Feb 2024 02:00:26 +0000
ROA not after: Wed 08 May 2024 01:00:26 +0000
asID: 13335
IP address blocks: 64.68.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d1:7f:c3:41:26:56:29:63:da:43:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Feb 8 02:00:26 2024 GMT
Not After : May 8 01:00:26 2024 GMT
Subject: CN=9405767d-6e95-4ce6-bfd3-5ab7c8a4f6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:2b:ca:39:e3:14:ef:c4:f9:6e:ce:38:06:
71:27:da:0d:b3:88:4d:f6:12:11:3d:22:58:62:55:
85:4b:40:a6:a3:79:bf:8e:f3:24:02:f7:f0:01:ca:
57:f9:74:56:32:df:00:a7:61:a3:0d:78:cb:0a:3d:
8e:34:ec:04:1e:3b:6b:16:16:04:a1:b0:68:90:b8:
42:db:b2:d3:25:4c:7a:ce:43:6a:54:ce:a3:6e:e8:
e1:e7:b8:14:47:29:24:4b:bb:90:0e:65:40:ae:31:
2c:8c:e0:63:a4:7e:ce:8c:ec:fe:f6:4a:24:54:7e:
fb:16:dc:44:cb:fb:eb:e6:8e:49:36:3c:a0:2c:3e:
10:26:05:31:1e:8e:8c:dd:f6:a2:32:81:c9:1d:dc:
41:bc:e0:3f:36:99:97:0e:90:71:a1:4c:fc:27:0e:
47:cd:90:0f:da:07:fa:71:6a:bb:9d:84:5b:41:5e:
20:1d:af:08:ad:95:f5:92:69:99:4c:b6:9f:e7:0f:
be:3e:22:df:f4:38:1d:a7:b1:2a:82:c5:22:9b:9e:
85:99:34:03:8c:d6:c3:6a:ff:47:1d:69:ef:7f:2e:
d8:04:c8:70:fb:a6:87:28:f7:24:c3:68:5b:99:78:
ef:3b:78:ee:31:e0:e9:19:bb:fa:29:f7:0f:40:12:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:EF:14:82:4B:45:4E:77:FD:88:40:86:DB:98:6F:41:A2:79:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d2ca5047-1d2e-3125-9736-aa26520cd389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b7:50:d2:19:2c:f6:34:98:e3:1f:c0:82:cc:4b:be:02:f1:
57:30:86:0d:66:0b:51:48:68:c5:8e:1e:a2:76:0a:34:c5:83:
e7:34:82:61:04:db:c0:b0:26:6c:c5:16:09:ad:e6:20:36:c2:
61:7e:d7:07:d3:b7:38:ed:f8:32:d3:84:46:a8:bf:03:24:5b:
12:22:0e:ce:8b:09:14:71:c1:53:85:d6:77:97:74:59:ff:b5:
f8:dd:35:16:ae:c0:6b:6b:9e:b8:95:db:ca:f2:88:21:b8:48:
62:a9:12:b8:3c:1e:97:0b:08:e7:bc:88:45:5b:00:5a:df:d5:
64:e5:7d:1d:4c:bb:2a:5d:98:42:26:47:ff:f1:0e:0a:a7:20:
8a:f2:aa:22:eb:a5:53:05:e2:fd:07:3a:9f:e3:5a:95:40:2e:
43:c9:ca:f6:8d:ad:01:87:a2:5a:5c:74:4d:51:a3:7d:82:e1:
5c:a8:73:f5:2a:c1:76:a6:c3:60:f9:fd:be:c6:38:48:2b:6f:
56:d6:ed:b0:e3:bf:c6:83:5d:44:c5:78:f1:cd:10:9e:2d:4c:
de:f3:f2:38:b6:7a:24:9e:2d:25:22:4f:db:ce:2f:39:87:8e:
77:31:f3:c6:ce:a1:18:5e:db:44:38:4c:ea:fa:af:8b:e2:0b:
84:25:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org