Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/1717452e-a10d-3dc4-80bc-22869ece1bb1.roa
File: 1717452e-a10d-3dc4-80bc-22869ece1bb1.roa (raw, json)
Hash identifier: FgYvs3ip//9K/IhL2OB/mzh1F5Bw9vjJnCJO7IAH0OE=
Subject key identifier: 56:13:9D:DF:E7:C4:70:5B:07:9B:98:37:8D:5D:19:00:0E:F1:6C:DF
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858426F6372B7159A1A778D1EE800
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/1717452e-a10d-3dc4-80bc-22869ece1bb1.roa
Signing time: Tue 04 Jul 2023 13:00:18 +0000
ROA not before: Tue 04 Jul 2023 13:00:18 +0000
ROA not after: Mon 02 Oct 2023 13:00:18 +0000
asID: 49999
IP address blocks: 144.168.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6f:63:72:b7:15:9a:1a:77:8d:1e:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jul 4 13:00:18 2023 GMT
Not After : Oct 2 13:00:18 2023 GMT
Subject: CN=c832a71e-018b-46b5-96ac-d6ede711a57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:12:7d:fa:24:d5:d8:fd:4b:a3:e3:05:78:
90:ba:94:1b:29:3a:8f:54:2f:0f:7c:ea:dc:9a:6f:
16:4c:aa:f0:8c:35:45:4c:65:c2:27:47:82:60:e2:
bf:0e:7b:bd:5c:79:e9:6f:ef:1e:15:8b:8e:e7:f1:
ca:ba:e9:65:68:ff:07:13:60:48:e9:be:4c:fa:8e:
df:a4:af:5f:74:99:be:3f:0f:86:61:ad:a1:02:23:
17:12:aa:d7:90:82:40:92:d5:a2:82:70:b3:9d:62:
37:ca:12:ce:0b:d6:2a:a0:c3:9d:7c:6a:c0:a3:36:
c6:7b:bb:20:d4:3e:4f:53:00:92:ea:df:be:80:c2:
42:c9:23:20:98:43:96:10:3e:5f:95:c5:47:5a:8c:
39:99:61:2b:58:49:ed:fb:fe:24:f1:d0:fe:67:1f:
37:07:43:6c:2f:29:17:e5:5c:b0:0a:4f:17:f5:ff:
49:39:8f:02:4e:7c:47:00:c4:56:8f:d1:ba:b8:5d:
0b:cf:d8:10:70:6b:e9:32:1d:de:29:e1:af:00:8a:
18:4a:d0:68:d7:31:bb:6e:61:65:87:7e:ba:1b:91:
f1:fb:20:60:62:d7:8b:cd:69:3e:28:e3:83:54:8a:
f7:e1:66:cc:c8:2d:08:74:99:a0:6b:3b:7e:83:be:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:9D:DF:E7:C4:70:5B:07:9B:98:37:8D:5D:19:00:0E:F1:6C:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/1717452e-a10d-3dc4-80bc-22869ece1bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:46:5a:14:0a:7c:f9:d4:31:f7:c2:dc:49:42:11:a0:69:27:
d8:6c:2b:37:26:d6:c6:05:be:13:2d:4e:09:eb:72:78:27:9a:
09:23:c8:d8:d6:44:84:39:0e:e6:13:a3:ce:13:d9:74:56:66:
5a:53:d9:9c:45:f5:fa:9b:df:92:81:37:3a:e0:e2:f2:cb:dd:
cf:b2:49:32:39:55:00:5c:bb:c5:0a:39:c5:bf:8a:5a:95:aa:
74:be:0f:a8:4d:73:14:f3:7c:38:da:87:04:fc:93:36:cf:56:
ff:f2:3e:11:66:53:37:94:bd:4e:0e:bf:83:d1:a2:22:8b:5f:
23:f3:4b:31:14:ae:b2:91:96:87:4f:01:1e:f3:8c:4d:56:c7:
cd:4b:42:9f:ea:72:e6:26:68:91:11:68:8a:ad:25:8a:0b:5d:
0a:d1:83:41:ec:06:65:82:ba:75:ac:44:22:88:73:b4:eb:97:
57:8e:b7:4f:ad:33:28:a5:2d:ec:a1:87:61:74:4b:3e:36:67:
dd:67:f2:10:36:95:76:60:fb:86:c3:5d:b9:03:b2:d4:f0:57:
92:00:1b:3c:96:5f:bf:6c:22:33:90:09:57:32:77:63:58:ae:
df:51:b6:e8:6a:b8:97:a0:fc:10:88:ea:cd:ed:bf:60:49:16:
c1:fc:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:39 2024 by rpki-client on console-fra.rpki-client.org