Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/ca732274-3dba-3986-91a0-5aad6f0f67a4.roa
File: ca732274-3dba-3986-91a0-5aad6f0f67a4.roa (raw, json)
Hash identifier: zjDe6V4aq8CwslVOQsp0RvszxCc602ZnWbVN9BRbhEo=
Subject key identifier: 33:BD:24:70:CE:65:29:FD:86:4B:BC:0B:21:C2:B7:EA:0D:F2:08:E5
Certificate issuer: /CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Certificate serial: 010D0C9F4328576D51CC73C042CFC1725C6736CF
Authority key identifier: 6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/ca732274-3dba-3986-91a0-5aad6f0f67a4.roa
Signing time: Thu 28 May 2020 17:49:27 +0000
ROA not before: Wed 27 May 2020 04:00:00 +0000
ROA not after: Wed 31 Aug 2022 04:00:00 +0000
asID: 32808
IP address blocks: 66.29.160.0/19 maxlen: 32
70.36.80.0/22 maxlen: 32
107.191.0.0/19 maxlen: 32
204.14.20.0/22 maxlen: 32
208.64.88.0/22 maxlen: 32
2604:7b80::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:5c:67:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Validity
Not Before: May 27 04:00:00 2020 GMT
Not After : Aug 31 04:00:00 2022 GMT
Subject: CN=312546e7-c5b5-4350-8711-ae034ce096a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:4f:d9:af:a1:a7:62:1d:05:27:09:0e:b7:
7e:14:d6:93:ce:66:dc:bb:e8:1d:3e:bc:68:86:3b:
e0:6a:e2:85:6e:2c:e8:a9:1d:78:81:7d:51:5e:9d:
01:25:06:9c:a9:30:26:60:6a:e5:cd:cb:9d:48:c4:
73:53:bf:41:35:f8:9d:99:b3:c9:08:c5:e3:c4:21:
1c:cd:7c:bd:bd:40:2a:99:8f:cb:fc:07:65:f7:1b:
c7:5e:f4:e7:59:d9:5e:86:c6:02:d7:98:1d:8c:7c:
c1:8c:29:95:c8:2f:79:96:6d:ca:8c:43:c1:71:79:
3b:9a:10:4c:e8:4c:ec:b6:b4:07:58:be:2f:79:32:
b7:c9:b4:5d:5d:e9:8a:ca:29:60:e1:55:bc:f3:b5:
dc:46:cc:7d:50:20:90:1c:ad:0e:ca:d4:c8:d0:9e:
91:98:e7:e9:72:32:65:87:ca:15:33:19:21:4d:67:
42:8f:41:19:89:74:d5:1d:69:73:84:cc:4b:be:a7:
bc:2e:ba:ef:af:7f:05:c8:72:cb:18:0c:22:96:9d:
72:83:a7:86:68:ff:53:60:e8:cd:66:3b:2f:55:30:
4d:73:76:63:61:19:fe:d0:f9:e5:13:63:1e:93:ed:
a3:e5:61:a3:16:74:b3:50:eb:3c:06:5d:74:95:a8:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:24:70:CE:65:29:FD:86:4B:BC:0B:21:C2:B7:EA:0D:F2:08:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/ca732274-3dba-3986-91a0-5aad6f0f67a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl
X509v3 Authority Key Identifier:
keyid:6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
sbgp-ipAddrBlock: critical
IPv4:
66.29.160.0/19
70.36.80.0/22
107.191.0.0/19
204.14.20.0/22
208.64.88.0/22
IPv6:
2604:7b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:53:44:2b:7d:0a:60:3e:28:10:7b:ae:b2:fb:b0:84:12:dc:
65:77:94:27:93:16:25:63:00:1a:89:0d:e3:e5:23:65:2d:34:
23:e6:33:68:05:92:d7:e1:0d:08:77:4d:39:16:a7:75:43:69:
fd:4a:35:a6:a8:2d:e2:d1:c3:5c:a0:49:af:98:64:a3:74:0f:
3d:aa:c3:de:87:df:ed:b5:e0:76:72:17:7d:3c:c7:4c:61:ef:
15:02:4c:ca:1d:69:89:33:8d:06:9e:fb:60:0d:f9:a7:5f:17:
bb:ae:20:c9:89:6a:dc:ff:25:fb:e5:00:85:8a:a8:6a:db:c5:
e4:33:1d:04:36:30:fb:a9:69:fc:b4:4e:e7:68:43:c9:f5:49:
ea:cd:ad:97:67:b2:8f:ac:5f:f0:2a:4c:f5:f4:0e:f2:0c:ad:
f8:25:05:13:db:7f:8c:22:aa:e9:ef:0c:b1:3e:1b:b8:e5:f8:
72:5e:cd:63:21:fc:4e:00:19:c2:4a:f3:df:59:4f:84:86:44:
16:c6:a5:12:45:5f:62:ee:48:c0:0a:18:2d:a8:2f:de:6b:fb:
b9:9c:fa:a8:a9:0d:51:96:5a:99:b4:e9:f9:aa:7d:16:cd:27:
92:97:94:e5:47:a4:e5:3a:15:7f:9a:2a:e4:c3:15:a2:f3:78:
9e:8e:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:58 2023 by rpki-client on console-fra.rpki-client.org