Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/d966ce7c-c6e9-397b-bacd-bcf6e5424243.roa
File: d966ce7c-c6e9-397b-bacd-bcf6e5424243.roa (raw, json)
Hash identifier: 3dpHh0Ljqzb31/0bru72rISF7vC3+FDYXGSbIaAY03U=
Subject key identifier: AA:B7:3D:92:0E:07:C7:84:AB:A0:57:3C:1D:5E:64:F3:E1:EE:BB:44
Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial: 010D0C9F432858425924E3D27F5476212A433C80
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/d966ce7c-c6e9-397b-bacd-bcf6e5424243.roa
Signing time: Mon 26 Jun 2023 13:46:32 +0000
ROA not before: Mon 26 Jun 2023 13:46:32 +0000
ROA not after: Sun 24 Sep 2023 13:46:32 +0000
asID: 397563
IP address blocks: 207.167.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:59:24:e3:d2:7f:54:76:21:2a:43:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Validity
Not Before: Jun 26 13:46:32 2023 GMT
Not After : Sep 24 13:46:32 2023 GMT
Subject: CN=e75ffbef-2591-4fb9-8ef0-1ccc0458ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:e1:e7:f0:fb:76:30:a9:b1:13:1d:d6:d9:
dc:23:31:8e:2f:cf:f2:70:9a:8f:70:96:8b:5d:75:
83:4f:9d:2a:a9:59:54:8d:4b:ba:b7:cd:0d:2b:38:
2e:65:7a:59:e8:9a:ba:bc:56:2f:7a:d3:ee:8c:4f:
76:fc:75:ec:fd:18:e7:92:70:8e:52:c9:97:ba:16:
3f:d8:c2:56:ce:63:c6:f3:12:5d:d8:bc:fa:5c:1d:
dd:a3:c6:23:95:d3:d7:60:4a:0f:c2:ac:e2:b8:4c:
c0:11:cb:53:7f:4e:0b:94:cb:13:99:e1:ab:84:b7:
fd:8b:cd:80:86:6d:18:ef:f9:87:cf:5b:d1:f1:99:
94:19:3e:69:a9:9c:7a:89:83:41:c8:2f:75:4d:ce:
d3:c5:43:2b:93:fc:6a:9c:6e:63:ba:bc:29:ba:a5:
93:e8:a0:ed:97:5b:a4:9e:d1:2b:57:35:50:24:e4:
26:be:51:b2:98:20:18:1d:17:24:c6:43:2e:21:26:
54:bc:f2:1b:77:21:a4:eb:31:4e:c7:84:ed:16:7b:
90:c3:d0:ea:28:e2:37:a0:1f:59:e7:95:bd:65:0a:
4c:ce:79:c2:a0:88:4f:85:66:78:14:60:9d:e1:2f:
0d:37:eb:80:52:80:7e:c1:5e:7e:ef:ae:d1:a7:93:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:3D:92:0E:07:C7:84:AB:A0:57:3C:1D:5E:64:F3:E1:EE:BB:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/d966ce7c-c6e9-397b-bacd-bcf6e5424243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
X509v3 Authority Key Identifier:
keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f9:4f:d9:e4:17:df:84:9b:f8:a0:d5:46:f4:80:3d:2f:9d:
a7:b6:0c:ae:1c:08:67:17:ac:55:a0:2e:d0:2a:b6:b6:ad:61:
00:7a:e6:eb:da:03:fa:a9:04:2b:5e:92:a0:82:eb:5b:a9:2a:
be:89:ef:57:0f:b9:79:45:e9:e9:1f:0f:2a:be:ef:ef:a1:b9:
ba:3c:04:94:db:13:84:4a:66:a5:64:ee:ed:8f:8c:88:a4:f3:
e5:b9:fc:9a:01:16:ad:3a:b7:39:1c:46:31:f5:6a:6b:b6:16:
1a:40:8b:1d:96:35:80:74:6a:22:01:30:c8:8c:0b:cc:c7:db:
92:d6:d2:67:36:71:bd:24:f8:25:1e:c3:12:eb:ad:45:a7:0e:
43:de:e1:c9:d1:d3:a9:01:43:87:03:ec:77:f7:d7:51:9f:52:
5f:ee:10:56:27:e9:23:4a:d0:08:d0:db:c5:d6:a0:5f:2c:9f:
b8:af:58:e1:49:6c:ab:6f:d3:c7:cc:25:e2:a1:77:07:e0:40:
17:eb:36:46:86:a8:5b:72:8e:00:9e:4e:99:29:b7:a9:b6:75:
4d:b7:c6:68:f9:ff:17:e0:2f:63:2d:f7:54:c2:d7:4d:83:04:
6e:58:14:8c:94:11:ca:3e:0b:9e:3b:e3:00:5c:85:b7:60:86:
b9:b3:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:54 2024 by rpki-client on console-ams.rpki-client.org