Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/099d0c1f-e0b7-34bc-ba5d-08b1af3cdb9e.roa
File: 099d0c1f-e0b7-34bc-ba5d-08b1af3cdb9e.roa (raw, json)
Hash identifier: 0+03pBthLQzdBLHzDcV3XJc+letIWwJNw5cm2ibxWzo=
Subject key identifier: 2A:7B:56:C8:52:8A:80:9C:8D:1A:3B:FB:66:29:91:56:B8:53:39:AA
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328583919B0ED01274325C4C125FE40
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/099d0c1f-e0b7-34bc-ba5d-08b1af3cdb9e.roa
Signing time: Mon 21 Dec 2020 05:00:00 +0000
ROA not before: Mon 21 Dec 2020 05:00:00 +0000
ROA not after: Sat 03 Jun 2023 04:00:00 +0000
asID: 1239
IP address blocks: 144.168.24.0/22 maxlen: 24
144.168.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:19:b0:ed:01:27:43:25:c4:c1:25:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 21 05:00:00 2020 GMT
Not After : Jun 3 04:00:00 2023 GMT
Subject: CN=4e96a215-92b6-4cda-9d5d-9950d9a3b2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:6c:f3:93:c9:75:4f:fa:c7:b2:66:f0:1e:
c6:1f:fb:0c:27:2f:22:2e:58:b0:e4:3e:e0:03:72:
a0:39:0b:b9:2c:24:8b:22:1f:27:5b:b4:f8:3d:62:
13:03:a1:04:60:bc:0b:b4:39:d3:48:5d:6f:55:83:
d6:18:ab:be:f0:96:54:24:0d:58:e6:3f:5c:f9:2a:
d9:d4:1c:a3:54:0e:ee:88:67:d1:34:b5:0a:f2:2a:
03:6f:a9:32:9b:ec:f0:eb:61:96:68:02:80:b9:2d:
da:5c:44:67:48:d5:91:87:88:9a:aa:80:28:40:cc:
0a:11:f1:b8:0a:e6:3f:33:f9:82:0c:11:d1:d2:21:
72:5a:27:79:8b:30:60:7e:3e:9c:03:1b:33:0b:e0:
48:0f:63:47:89:f5:e6:8e:07:9b:65:3a:c0:27:10:
95:dc:d2:53:b9:2f:36:c8:35:20:9f:6d:df:bb:93:
85:65:9a:8a:53:61:69:37:1e:23:6c:63:3c:ea:9c:
2b:5c:64:80:8d:c6:53:0f:11:03:1f:94:d8:a6:7a:
1c:f9:5e:ea:d6:a8:24:96:66:b8:c8:e6:dc:09:7c:
2a:75:df:fb:cd:62:77:6c:21:4c:09:33:38:4a:38:
95:9b:f3:42:62:16:a5:24:bb:92:60:2c:bf:dd:85:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:56:C8:52:8A:80:9C:8D:1A:3B:FB:66:29:91:56:B8:53:39:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/099d0c1f-e0b7-34bc-ba5d-08b1af3cdb9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:f9:5a:88:cd:ba:bc:2b:64:09:63:3c:ef:ab:f9:88:db:1a:
9d:90:c0:eb:48:99:e4:3b:3b:b0:9c:bf:9f:83:13:7f:ca:e5:
8d:ff:91:a8:48:b9:d8:47:6c:53:8c:4a:a8:b8:03:92:13:c0:
9a:2d:3f:fe:60:9b:4f:36:3c:47:83:66:94:98:40:f0:a8:bd:
b7:13:1b:22:1b:1c:f7:79:b5:c2:ce:4d:00:e1:da:d2:30:40:
fc:bf:e6:7c:68:ad:54:23:23:a0:e8:d9:62:cb:04:c3:43:87:
5c:af:32:cf:d6:b3:e0:8e:cc:d6:b6:72:a8:40:9a:ca:34:8a:
a6:87:0d:ac:6b:24:cf:27:39:b4:0f:47:0b:23:69:b6:ef:43:
ad:47:b7:0b:99:33:da:10:80:06:4d:fe:56:ec:1e:56:4f:09:
58:33:c0:02:7e:e5:a1:dc:44:cc:46:3c:b7:2c:e3:3b:cf:04:
aa:a8:a3:93:5a:e8:e4:49:0d:da:38:ec:18:76:ef:44:23:1b:
6c:bb:f5:29:86:c5:f9:af:d1:a3:c8:a1:c1:f3:73:1a:cc:a6:
dd:75:a1:c5:ae:45:91:0c:ac:ac:56:e0:ae:17:35:81:fb:7d:
a6:66:9e:5a:c0:89:4c:d3:e5:13:46:b8:7b:fa:3a:36:02:11:
f6:b4:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:59 2023 by rpki-client on console-fra.rpki-client.org