Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e3357a7-01bd-3453-97e5-c7d860c1f6f2.roa
File: 3e3357a7-01bd-3453-97e5-c7d860c1f6f2.roa (raw, json)
Hash identifier: y8S8DpGdup9j0w9MflhyWw2fYwyURgtFR4OzmpYC7tw=
Subject key identifier: D9:18:E5:5C:F6:55:AC:5C:60:12:D5:C5:53:87:BC:42:B4:11:A2:6D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285841E4473F0A1ACF54DD66DCD580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e3357a7-01bd-3453-97e5-c7d860c1f6f2.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sun 04 Jun 2023 10:52:18 +0000
asID: 852
IP address blocks: 204.191.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:3f:0a:1a:cf:54:dd:66:dc:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jun 4 10:52:18 2023 GMT
Subject: CN=83098213-b101-4010-8754-1fa7fd756091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:30:c3:be:33:0d:76:d1:d5:ec:2d:54:7d:
3d:4d:fd:94:eb:b3:af:4b:24:1b:b3:d9:b2:0e:1b:
3e:9f:d9:0a:ec:f9:42:92:21:ed:01:d1:ba:d9:fa:
86:32:4a:f8:13:49:90:47:1f:0f:af:07:99:27:c0:
f3:7c:05:0c:68:4d:9d:ba:2f:be:ea:16:ee:56:75:
41:46:17:cf:7b:91:17:40:14:41:2a:9f:bd:29:d4:
5f:05:0c:56:0e:fd:73:10:bc:97:cf:ab:0c:2b:0f:
c3:e1:33:a9:77:b9:aa:6d:24:9f:01:3e:4d:68:c9:
dc:9e:81:1b:ba:a3:87:20:c1:4e:96:79:21:f9:d4:
27:52:50:eb:76:d7:72:f4:f8:f4:d5:f4:ec:53:de:
8f:14:c8:31:cf:2f:c0:39:75:1e:36:8c:a7:06:88:
19:9e:71:ee:a9:49:ae:80:27:b7:c1:11:d2:e4:9e:
44:e8:d9:9c:fb:dc:24:ee:c7:de:d2:a9:bb:fb:2c:
98:74:7a:40:7e:9f:56:8b:43:89:ba:3e:af:b5:57:
fa:75:49:81:d1:a7:87:e7:e9:29:88:cd:53:13:c2:
60:69:99:3f:74:02:ea:d0:8c:bb:2e:ce:df:c5:fc:
e1:bf:ad:32:5a:e0:43:46:64:f7:58:5b:1b:dd:25:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:E5:5C:F6:55:AC:5C:60:12:D5:C5:53:87:BC:42:B4:11:A2:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e3357a7-01bd-3453-97e5-c7d860c1f6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
204.191.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c3:77:73:4d:13:d8:df:21:15:b6:7e:34:3c:18:55:92:e3:
dd:8a:c7:17:ff:64:ed:3c:22:48:a8:42:d8:d1:18:be:4b:41:
6e:0a:95:ac:6d:74:de:17:d5:93:55:fe:6c:ac:3a:28:64:52:
26:29:b5:b7:6d:86:62:15:50:43:01:ca:fd:a7:31:c5:f1:11:
06:27:93:47:fd:60:86:92:21:92:c1:fa:59:f1:91:14:ab:ca:
26:64:58:a8:83:f0:25:6c:f2:e8:32:9e:d5:cc:ea:79:f1:f0:
f1:33:92:8d:9e:fc:08:2e:d0:88:37:66:5f:e9:2e:00:75:0d:
e1:93:d2:45:84:38:47:6c:e7:8b:3f:76:2b:99:c9:df:fd:e3:
4b:94:9b:03:6e:da:24:41:bb:e1:7f:4e:63:45:be:3c:76:50:
6d:59:6b:cf:14:d0:6b:02:9c:7f:f1:6b:aa:6b:cd:64:e2:b1:
fe:3c:50:38:18:41:2e:6d:2c:67:5d:c2:70:63:76:88:db:0b:
ba:69:68:64:4f:af:32:de:a2:0a:36:91:35:77:5e:f5:e1:e0:
28:57:40:32:e1:73:30:1f:00:cd:ef:25:1c:52:db:03:36:d4:
db:36:97:3f:59:e5:da:73:76:15:60:10:a2:c2:55:ab:da:33:
0a:57:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:57 2023 by rpki-client on console-ams.rpki-client.org