Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/9e97394b-3d3b-3fd0-aa35-cd5aa20e634c.roa
File: 9e97394b-3d3b-3fd0-aa35-cd5aa20e634c.roa (raw, json)
Hash identifier: P2Hb/H92RlXZK+3bRM9nQCJOp9VQCVMIKVxfF3Zmm1o=
Subject key identifier: F1:2D:8E:2D:E3:22:08:63:50:72:6A:74:ED:65:C2:99:01:2A:62:8F
Certificate issuer: /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial: 010D0C9F4328584280D17008FB0DD5A386583400
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/9e97394b-3d3b-3fd0-aa35-cd5aa20e634c.roa
Signing time: Mon 10 Jul 2023 18:50:43 +0000
ROA not before: Mon 10 Jul 2023 18:50:43 +0000
ROA not after: Sun 08 Oct 2023 18:50:43 +0000
asID: 62802
IP address blocks: 170.4.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:80:d1:70:08:fb:0d:d5:a3:86:58:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Validity
Not Before: Jul 10 18:50:43 2023 GMT
Not After : Oct 8 18:50:43 2023 GMT
Subject: CN=88baf04a-bc3a-4171-8aad-35a7c72f4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:69:11:5f:74:03:d5:34:57:df:03:43:cd:
0e:99:45:9b:4f:09:2b:12:71:1a:3a:05:7f:e1:ea:
62:34:79:bd:fc:2d:f4:8f:33:26:23:27:98:c4:6c:
8d:9c:fe:dc:da:37:59:11:34:07:cf:83:75:f4:0b:
7a:03:a9:08:19:d4:f1:31:50:1f:07:ed:3b:e1:ab:
b9:cf:22:54:b0:90:f9:fd:e9:3a:af:39:af:44:96:
17:91:84:88:05:0a:e3:e4:26:a2:68:92:59:e9:3c:
e4:ad:77:5a:ff:9e:f1:10:5b:13:7d:7b:66:d7:31:
6a:e2:a0:7f:7e:24:df:6e:a2:90:9e:a1:c7:19:5b:
97:44:bd:48:35:8a:bf:33:47:cd:2f:0e:71:e8:9c:
74:8b:bd:35:64:86:a4:60:97:19:62:2c:9c:61:ed:
12:65:18:40:e4:55:bd:68:69:38:20:7d:58:b1:19:
fe:2d:d8:6e:6a:66:14:6f:cf:9c:b1:30:89:26:5b:
63:11:cb:2e:4c:44:4b:9a:46:e2:3b:8d:cb:89:82:
c3:b7:b1:9b:21:6e:b2:ee:27:ae:86:ca:1d:69:5e:
e6:52:a5:4e:cf:1d:3a:22:c4:6a:39:10:9f:3e:15:
b9:72:93:d2:7a:74:9b:d8:ac:22:98:b3:d0:b7:15:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:8E:2D:E3:22:08:63:50:72:6A:74:ED:65:C2:99:01:2A:62:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/9e97394b-3d3b-3fd0-aa35-cd5aa20e634c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
X509v3 Authority Key Identifier:
keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
sbgp-ipAddrBlock: critical
IPv4:
170.4.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:40:92:13:87:30:99:fc:03:d0:ae:97:42:6d:14:f9:33:e7:
29:36:7e:23:92:b9:9f:f4:76:91:c3:2c:5a:bf:38:6a:4e:d8:
b7:e6:ef:2b:29:24:aa:eb:9c:70:6e:44:0c:e0:fd:ca:a6:53:
3b:89:e2:62:63:10:e5:f4:20:9c:65:1d:9b:b4:ce:33:36:1b:
6c:a7:ce:9e:84:9b:8c:b6:58:ef:18:b0:0e:77:79:58:8a:34:
83:ab:84:f8:d4:72:d0:f7:35:fa:30:bc:1f:a5:2f:63:b0:49:
7d:37:7d:83:63:da:c1:8c:49:dc:78:a2:7b:3e:41:a2:f9:5e:
ce:f9:3a:34:97:a3:e3:aa:63:46:f0:cc:f9:03:fb:11:48:9c:
e4:9f:4f:d0:86:52:42:42:83:e7:06:80:64:65:2e:25:5b:66:
a0:1f:eb:da:a5:53:78:67:da:ce:fa:c7:71:42:20:1f:24:4d:
85:c1:ea:85:21:26:f3:29:9b:38:59:51:82:5e:4e:1b:01:72:
2f:5f:ab:3d:cd:2f:a2:98:21:5a:26:87:b5:9e:76:f9:ea:16:
3a:6c:4f:ea:c6:db:af:a4:53:47:1a:be:63:a4:27:03:1f:4e:
56:17:3a:fc:71:47:c7:0a:b4:11:1d:36:87:4a:78:db:26:18:
62:ee:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org