Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/aebb6f0e-cef5-337f-8ef1-e1b2efd15474.roa
File: aebb6f0e-cef5-337f-8ef1-e1b2efd15474.roa (raw, json)
Hash identifier: bX8ZpQMbye0Nj43b78qx+5wbz/xS0VV1d7Wvhz6DEgo=
Subject key identifier: 7C:49:4A:55:87:EF:62:CB:A1:CF:60:35:84:A4:30:12:07:3E:85:44
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328583D2748FB6664DC97C427D7A400
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/aebb6f0e-cef5-337f-8ef1-e1b2efd15474.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Sun 07 Jan 2024 05:00:00 +0000
asID: 1239
IP address blocks: 104.167.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:27:48:fb:66:64:dc:97:c4:27:d7:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Jan 7 05:00:00 2024 GMT
Subject: CN=c6ce4895-0fe6-45e9-9127-2a4f521a956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:13:2a:46:61:38:1a:7d:ee:b5:63:e8:8a:
a9:af:17:9d:cb:a1:39:20:f4:07:88:f5:2c:3d:f3:
21:53:c7:ad:f8:f8:80:d9:a2:86:40:dc:92:0a:aa:
31:5a:23:0b:02:6e:bf:9c:01:61:60:65:5e:56:a3:
b2:98:c7:7f:12:a8:b3:db:5f:2d:b8:54:49:ad:e4:
2b:94:81:6b:55:e5:d0:a3:9d:eb:3c:bb:16:c5:ce:
ac:f7:13:f9:59:98:1f:8d:34:ad:09:b3:1a:b9:ab:
39:e5:39:b4:ff:25:f5:62:61:38:31:8d:0a:7d:ad:
7c:71:1b:a7:3a:cc:71:3c:25:a4:e8:cb:85:b5:da:
44:34:16:34:f1:55:e8:82:61:0f:b1:0c:c8:ed:4e:
84:cf:7d:13:e4:e1:77:b0:96:b2:e5:16:0a:91:e6:
a7:e9:65:90:53:30:77:11:d3:16:a5:1d:7b:f4:fb:
bd:c8:6d:95:51:53:73:f9:54:18:f4:f4:2d:e1:6b:
97:37:e7:88:9c:30:6f:2a:a6:2b:8f:53:a9:a9:5f:
ef:a0:80:1e:b9:28:e9:b2:fa:9d:a1:ee:1c:dd:f2:
d0:aa:48:9f:fe:88:39:7b:14:d1:a9:09:ef:7e:d3:
cd:21:ec:53:7a:9b:8b:ac:28:61:05:03:33:d0:39:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:4A:55:87:EF:62:CB:A1:CF:60:35:84:A4:30:12:07:3E:85:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/aebb6f0e-cef5-337f-8ef1-e1b2efd15474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3d:2c:b6:c6:0a:d6:e7:f0:72:fc:0a:c9:5e:59:1a:53:f1:
6a:c4:e3:16:93:64:38:2a:f4:57:ef:8b:d0:1c:39:5b:18:09:
c3:e4:ae:98:95:21:e5:0b:3a:ee:94:8e:4e:ee:43:3d:75:99:
cd:c6:16:3a:30:91:93:61:ba:43:56:60:17:2a:78:00:6a:79:
d2:8d:33:36:7b:d5:ba:6a:1b:02:15:15:e8:e8:9f:8f:8a:91:
b7:c0:3b:7c:bb:0b:dc:7e:57:a6:16:ec:77:08:d2:5e:54:3c:
b2:c5:8f:70:ee:19:3d:43:0d:dd:d4:16:4a:4c:88:bb:5e:3b:
7b:56:67:da:bd:f1:3c:c0:04:e4:cb:41:04:a7:75:fa:6e:7b:
dd:5a:dd:1a:5c:2a:ff:e7:d5:8a:dd:60:75:06:45:4d:11:aa:
43:d1:06:9f:3e:58:d9:ea:2a:b5:95:89:b4:73:fe:74:a7:65:
92:e2:31:47:88:c7:6b:c2:e8:22:a8:77:bd:a0:5b:76:40:c1:
dd:d9:07:3b:a1:2f:5a:57:6a:9e:4d:8d:8b:e4:e2:6f:86:52:
ea:70:8b:1e:b7:1b:06:04:6e:3f:d4:18:ea:db:63:b7:08:7b:
bb:65:4b:8d:1f:78:55:c1:e3:1c:10:66:80:71:58:f1:39:18:
fc:75:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 07:38:05 2024 by rpki-client on console-fra.rpki-client.org