Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/e08f2c43-ddbb-34dd-8fda-ea4c82d40270.roa
File: e08f2c43-ddbb-34dd-8fda-ea4c82d40270.roa (raw, json)
Hash identifier: eXESuo9izDuQJ2jmcmKetZSoN9aVPRg6fhuYSDUY5bc=
Subject key identifier: DA:09:E6:8E:E0:49:57:FE:0B:94:2D:0B:BD:B6:E9:C6:D8:DD:47:E8
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285845131AE4E723A745A059E72100
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/e08f2c43-ddbb-34dd-8fda-ea4c82d40270.roa
Signing time: Sat 02 Mar 2024 14:00:31 +0000
ROA not before: Sat 02 Mar 2024 14:00:31 +0000
ROA not after: Fri 31 May 2024 13:00:31 +0000
asID: 19437
IP address blocks: 144.168.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:13:1a:e4:e7:23:a7:45:a0:59:e7:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Mar 2 14:00:31 2024 GMT
Not After : May 31 13:00:31 2024 GMT
Subject: CN=060335f9-6c17-4c16-be13-8593149040e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:0b:23:70:e0:fa:7b:dd:30:e4:b0:dd:65:
9f:73:dc:1c:9c:97:9c:86:a0:c8:74:f5:ff:d1:7b:
2f:b1:fc:d2:0e:a1:a1:8f:5f:25:8e:9c:50:36:bf:
0a:88:1e:79:3d:ba:ca:80:37:f7:27:0b:29:fc:11:
c1:6d:c7:44:3f:21:d2:7f:39:ed:85:6b:7f:05:26:
d9:20:8f:0f:ee:d4:1f:9f:30:d8:93:c5:eb:54:08:
40:1c:3f:50:b0:a7:d7:b6:5f:f5:eb:be:6f:c2:f1:
38:e5:03:7d:ee:92:77:3a:c9:60:7a:23:82:96:21:
9d:35:6e:a4:d2:a7:76:3c:34:e6:2e:8f:ea:4a:5a:
f3:a2:e3:1e:3a:9a:7e:7e:a5:f4:4b:96:f5:55:48:
cb:04:64:c6:75:3c:0c:1e:12:ae:f8:36:04:83:07:
14:aa:72:08:c0:c0:29:05:d7:78:c1:10:cd:ba:13:
c3:7c:ed:29:a5:46:f2:84:0d:2e:32:3d:be:1c:01:
bf:cd:0a:25:bd:60:61:c0:6c:19:27:4f:72:12:5d:
3f:05:9b:1f:41:a3:13:17:d8:2d:cf:7f:0d:e8:cc:
62:dd:68:dc:e8:0a:c7:48:85:fe:66:4e:8f:0e:aa:
61:88:ba:a0:b2:79:24:26:69:95:3f:94:23:f3:03:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:E6:8E:E0:49:57:FE:0B:94:2D:0B:BD:B6:E9:C6:D8:DD:47:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/e08f2c43-ddbb-34dd-8fda-ea4c82d40270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:7a:f7:55:08:9a:74:5b:cd:44:3e:3a:f6:39:e6:25:27:39:
05:c9:fa:32:03:7e:80:7a:29:1a:5c:6f:c6:bf:01:60:bf:b9:
91:29:5d:25:41:ea:67:cd:bb:77:96:36:38:bb:c6:43:9b:a5:
e1:10:21:0a:7c:5f:22:18:41:36:66:cf:16:40:61:d3:45:12:
a7:ad:a4:37:bd:63:a4:ba:d5:b4:35:ef:25:23:81:fd:19:33:
1a:f4:20:0c:96:8c:31:7d:f8:dc:46:f1:5d:de:3e:45:c9:58:
55:c7:e5:6b:f2:68:0a:73:a0:fc:35:83:05:dc:ba:51:e9:bb:
63:24:93:38:df:1f:22:7a:80:08:a6:4e:a9:99:6b:08:6e:01:
54:99:90:8b:14:7f:f2:1f:14:74:b7:cf:ed:66:e1:d7:de:6f:
15:4d:28:a7:29:d2:6c:47:79:65:f0:7b:6f:52:21:83:74:e6:
72:03:0a:87:74:34:8d:0b:a9:7b:d4:98:ae:6a:3f:c2:7a:08:
a5:a2:87:72:2c:ab:9a:2c:05:e6:48:81:73:04:b5:71:f3:44:
44:65:66:8b:3b:5b:25:88:36:64:6d:86:32:7c:e8:8d:23:41:
b7:ae:09:35:2b:3c:9f:75:d8:76:c4:6c:00:51:b6:4e:23:05:
c5:b1:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:40 2024 by rpki-client on console-fra.rpki-client.org