Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b7c1c6-b524-3efa-88fa-9ab807f070db.roa
File: 90b7c1c6-b524-3efa-88fa-9ab807f070db.roa (raw, json)
Hash identifier: KAe23bm7HVQB7J1CjakK66KZLletMQGoLOOumjTsfXg=
Subject key identifier: E5:6D:C7:B2:DE:F7:E0:90:4F:C7:5D:9A:0B:2A:0A:EA:E3:27:F8:A8
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4E33ADCD2AD5FDD7E659A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b7c1c6-b524-3efa-88fa-9ab807f070db.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 206.108.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:e3:3a:dc:d2:ad:5f:dd:7e:65:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=3df659cd-275b-48c0-9514-99b53d99f7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:c9:be:09:9d:07:5d:1c:c8:59:ce:73:ba:
c9:a1:61:96:44:2a:42:1f:77:f5:4e:46:83:d1:05:
d3:9f:09:0b:5d:e9:6a:e1:e3:27:08:9d:f2:ca:02:
b2:b0:2e:d0:d5:46:94:2e:e6:64:f4:a7:dc:97:a2:
76:a5:7a:0e:bb:aa:9e:bb:20:b8:24:14:c5:ae:c2:
51:77:6d:10:d8:94:32:3b:46:0f:ed:35:5d:9f:00:
c3:86:2e:2f:f9:34:14:39:62:e0:15:b9:e8:72:11:
18:bb:29:ba:f1:1d:e4:52:d0:ad:33:34:19:c2:69:
3b:12:9a:0b:82:4c:c3:a5:41:c5:7e:71:a1:87:68:
0e:3a:41:1b:80:1c:8e:72:77:b8:c2:a2:dd:09:79:
8e:96:40:6e:75:e2:15:bc:e4:f5:1b:cc:3d:6f:89:
7a:65:73:84:b9:f3:76:80:02:59:23:c1:c1:b7:ca:
ec:d1:77:bb:0e:7e:42:c9:9a:96:e3:83:fb:99:db:
64:bd:27:20:76:86:06:6c:f6:ec:02:d2:96:bf:7c:
04:ad:f2:f4:4c:c7:1e:54:54:0c:ad:19:d1:b3:86:
93:22:2e:54:e5:29:ff:88:f7:14:01:c6:e7:8c:17:
d3:bb:61:60:57:ca:95:a9:db:79:6f:54:cf:9e:ce:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:C7:B2:DE:F7:E0:90:4F:C7:5D:9A:0B:2A:0A:EA:E3:27:F8:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b7c1c6-b524-3efa-88fa-9ab807f070db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:c6:e9:b7:07:8d:92:d6:2d:c7:36:ce:75:72:49:69:43:06:
c2:aa:76:3a:dd:8c:1e:60:fb:cd:03:83:bb:45:05:af:c7:59:
2e:74:dc:7b:be:02:16:da:5c:6d:bc:df:8e:91:ec:85:15:ad:
37:3d:f2:74:39:06:b3:f3:46:1d:13:a6:2f:41:ab:2f:c8:90:
61:01:39:bd:c4:e2:3c:62:8f:bf:e2:06:30:ab:8b:48:d4:8d:
22:a0:59:12:73:00:d4:92:02:6e:cd:3b:16:21:18:ad:5e:f6:
b8:e3:e9:e6:46:8a:ec:6e:3e:fe:32:0b:56:85:84:2d:a7:0e:
7a:1b:f6:d4:7e:3a:cf:c4:b3:e0:f5:8b:9e:32:94:09:11:e0:
7d:1e:12:2b:fa:41:02:9f:c0:90:01:b9:83:a1:80:e9:ff:56:
62:20:28:89:ca:d3:d6:fd:e6:0e:0c:30:27:ef:bb:d6:4b:a8:
a9:86:11:63:10:e5:f9:1a:84:9a:f1:76:cf:55:77:89:54:bb:
0f:b9:6d:62:ed:d0:d8:30:82:7b:3b:8f:fd:df:29:47:88:75:
8c:6d:bd:ae:f4:a1:51:fc:ce:e1:ef:75:55:1d:7d:91:d5:63:
1d:e4:17:09:d7:f5:ec:aa:64:7c:30:23:26:9e:a8:6c:a5:87:
19:35:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:04 2023 by rpki-client on console-fra.rpki-client.org