Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4f5733a0-bd5f-32f0-936b-c51c7589750b.roa
File: 4f5733a0-bd5f-32f0-936b-c51c7589750b.roa (raw, json)
Hash identifier: P/wf1T4FyLe1nT4LnaPuZiStAebqQDL1h6+W8Ur7D6g=
Subject key identifier: 48:B4:E1:9F:A5:D4:A1:37:F3:23:27:B9:F3:46:47:C9:3F:3D:E3:2C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858446E64735493D0146A9AEEA40B
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4f5733a0-bd5f-32f0-936b-c51c7589750b.roa
Signing time: Wed 03 Jan 2024 14:00:21 +0000
ROA not before: Wed 03 Jan 2024 14:00:21 +0000
ROA not after: Tue 02 Apr 2024 13:00:21 +0000
asID: 64267
IP address blocks: 147.53.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:64:73:54:93:d0:14:6a:9a:ee:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jan 3 14:00:21 2024 GMT
Not After : Apr 2 13:00:21 2024 GMT
Subject: CN=725cd10c-3890-41cb-bae0-30bf9c710e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:c8:8c:fa:7d:d4:07:da:11:a8:e0:99:36:
4e:0e:f0:61:1f:18:2b:02:63:27:1e:2b:98:31:10:
2b:67:f3:b4:cf:f6:b6:ab:cf:fb:21:77:4d:c5:99:
36:b2:6c:ae:43:2e:57:3c:19:f7:ff:c0:d1:11:00:
d9:c7:f3:0f:0d:ce:e5:04:9b:33:bf:eb:e9:99:3d:
6d:45:f9:d9:63:1a:5d:33:fc:8e:c5:3d:c3:9a:f0:
a2:dd:00:8e:13:a2:3b:72:a0:f9:c5:65:9f:03:a6:
8e:29:05:ce:f9:3c:ce:34:4b:26:f0:e9:fe:f1:77:
ab:12:70:f5:56:0b:64:75:c1:51:fc:b7:80:e8:1a:
c2:b4:53:d4:17:5f:0c:62:d6:a4:52:b5:9b:f4:e8:
a4:91:be:2b:d1:ca:96:64:57:5d:a1:73:86:dc:5c:
cb:3f:b1:c0:d0:a9:ad:d6:fb:21:e8:78:35:73:ab:
99:b2:63:3f:35:77:d8:0a:09:cb:0a:47:0a:a9:c5:
50:21:54:24:04:2e:5c:15:b5:e5:c2:73:2a:f7:19:
10:b0:c9:63:e3:d6:a7:58:0d:a6:1c:fe:82:3a:30:
a4:22:91:7e:98:f4:c1:91:a0:71:94:5c:20:a3:e4:
ea:89:a3:31:91:4e:9d:50:bb:ac:5b:e4:65:af:0f:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:E1:9F:A5:D4:A1:37:F3:23:27:B9:F3:46:47:C9:3F:3D:E3:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4f5733a0-bd5f-32f0-936b-c51c7589750b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
147.53.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:d3:70:0e:0f:eb:fb:70:80:4b:12:fd:83:07:96:30:88:23:
e4:29:88:e1:50:2d:6f:49:41:d0:08:03:47:55:ea:28:00:5e:
07:4b:0e:60:ae:f6:e8:37:b5:c4:b4:70:bd:e3:64:b7:c7:2b:
7e:2a:7a:23:48:be:e6:2e:fb:79:57:d7:f8:3b:ec:74:31:74:
bf:d9:2b:a4:c6:05:90:5e:07:23:d4:17:31:7f:63:2b:ad:9a:
29:db:06:39:d4:bc:09:f7:59:9f:10:14:97:b2:3c:de:ae:c7:
03:38:78:ce:40:07:87:bc:50:14:9a:13:6d:7c:52:f6:f0:6b:
be:d5:12:88:3e:d4:e0:54:79:74:0d:55:ab:41:f3:bc:4d:f6:
54:a2:86:aa:f5:ed:b9:75:98:2f:81:39:a6:21:78:22:be:11:
7f:77:7d:0b:fa:01:25:ca:5e:44:39:00:0f:98:c2:56:62:fd:
de:86:e4:8a:97:61:9a:2e:2d:a4:6d:0a:a4:65:68:8d:60:37:
9d:11:e5:de:3d:b3:83:ae:40:4b:df:be:03:18:49:32:93:db:
b2:70:51:5a:f0:2c:0c:5e:c3:e2:96:54:51:88:f5:82:72:fb:
83:32:e8:25:2e:08:50:c4:ad:bb:d6:7c:b0:62:98:d7:11:fb:
42:ee:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:39 2024 by rpki-client on console-fra.rpki-client.org