Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/49966f06-1962-329d-99c0-df203ecd8cb8.roa
File: 49966f06-1962-329d-99c0-df203ecd8cb8.roa (raw, json)
Hash identifier: m6kiw6c7HrM+NrwPH7acLw2apHOmFFuPCV0O8wumloA=
Subject key identifier: 35:4D:05:00:6A:9F:9A:D3:AE:88:B0:3F:40:F4:12:94:4C:85:94:CC
Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Certificate serial: 010D0C9F43285842F91F629F25B0B1BAFE4B8A80
Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/49966f06-1962-329d-99c0-df203ecd8cb8.roa
Signing time: Tue 22 Aug 2023 21:04:47 +0000
ROA not before: Tue 22 Aug 2023 21:04:47 +0000
ROA not after: Mon 20 Nov 2023 22:04:47 +0000
asID: 16801
IP address blocks: 104.255.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f9:1f:62:9f:25:b0:b1:ba:fe:4b:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Validity
Not Before: Aug 22 21:04:47 2023 GMT
Not After : Nov 20 22:04:47 2023 GMT
Subject: CN=0d2dc7af-4b06-4b8d-9bb6-0c2b907dae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:04:2f:87:9b:94:65:4a:34:89:3a:c4:3b:
62:aa:07:4b:52:f5:cc:eb:2b:b8:d4:00:37:f1:b1:
25:f1:5d:bf:4a:d8:ca:7c:43:19:96:b0:4e:41:07:
80:00:ab:ae:c7:1a:52:59:21:2d:b8:ed:55:e7:7d:
20:dd:71:40:1a:25:90:f2:1d:37:d6:30:35:ff:75:
26:b2:b9:91:89:e4:c6:2e:6d:9e:58:73:42:f4:46:
d7:65:4d:5f:e2:31:58:d5:78:cc:e3:f5:11:cd:ad:
90:79:4f:8e:3f:0f:12:66:31:2e:ea:d3:ec:13:4e:
fe:db:66:49:e6:94:3f:a2:40:c5:ac:f2:2b:c8:fd:
b2:7b:9c:a7:be:15:b7:04:8b:d5:78:9a:06:e7:f6:
63:46:a2:62:e7:f8:2d:d7:fe:d0:07:14:45:1a:0e:
ac:a7:e9:dd:ee:49:84:0d:ce:a3:63:60:a9:31:b4:
19:42:1a:e1:48:2d:da:5b:c6:99:b7:c1:bc:e3:7f:
b9:41:0e:cc:49:49:22:74:34:e6:62:93:1a:b2:3f:
47:b3:54:0e:40:7f:a7:2e:2f:ba:93:d9:ac:e4:05:
6f:05:0c:72:1e:06:3a:ac:1c:57:fe:eb:88:cf:b4:
13:32:aa:ec:7d:f4:bc:cb:ea:1b:18:82:c9:5e:6a:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:05:00:6A:9F:9A:D3:AE:88:B0:3F:40:F4:12:94:4C:85:94:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/49966f06-1962-329d-99c0-df203ecd8cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl
X509v3 Authority Key Identifier:
keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:0e:15:29:aa:37:98:79:35:50:38:e7:1b:8a:95:06:a6:00:
27:26:9d:20:ab:3c:61:70:2f:08:9e:ce:cb:d6:6f:ee:6a:f5:
cd:7f:7e:8e:5f:5b:71:58:ec:91:e9:a0:ff:29:af:b0:96:bd:
ea:77:6c:c8:c8:6a:e6:ba:4b:ca:14:e5:a5:01:5f:66:ec:a0:
55:67:31:9a:06:a2:59:64:e1:3e:bf:50:83:54:5d:72:42:19:
80:5c:d2:fb:70:04:46:ea:c9:cc:76:13:a1:de:1d:32:65:df:
a0:f6:9e:8c:55:c9:a5:59:f0:f2:68:9d:45:75:35:aa:f7:17:
26:c3:53:34:34:9b:85:58:e9:fe:fd:53:02:9c:e7:7a:2a:b8:
48:e1:fa:a5:c5:73:d3:67:25:bf:6d:b9:1f:97:f2:be:5b:6a:
33:39:65:c6:5e:6c:87:4a:d8:b9:be:b4:ea:44:ef:dd:16:6b:
fe:89:df:2f:7f:85:61:05:7f:67:e6:0c:e5:f9:22:24:04:5e:
d8:7a:9f:92:a4:6c:52:26:ba:f9:40:3f:91:a9:09:75:54:77:
0d:d8:85:c0:55:d5:3b:eb:12:4a:cd:e7:3a:95:2f:c4:9e:67:
c8:c6:d3:91:52:36:ff:fd:ce:40:30:4e:f8:31:24:3e:83:c8:
35:02:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org