Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/414e375a-d953-3789-8d2e-1e323042827d.roa
File: 414e375a-d953-3789-8d2e-1e323042827d.roa (raw, json)
Hash identifier: kB1l7cDVXZClEpsNT1NG6bMaX0MAHCrdeMM7CANXFFc=
Subject key identifier: A6:A4:89:71:00:62:C0:CA:E7:E5:85:33:CC:5E:2C:13:54:44:76:DD
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7C48D0511F04D3336C41480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/414e375a-d953-3789-8d2e-1e323042827d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 64.9.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:8d:05:11:f0:4d:33:36:c4:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=82b8ceca-04f3-4f0f-8ef8-d97f2d759c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:de:06:f0:5d:6c:31:d3:5a:6c:8d:4a:ac:
c1:90:f5:f2:d1:59:bb:7d:62:cf:fd:02:5f:ab:45:
fb:97:23:b4:05:f6:74:56:e2:8c:81:64:0f:c6:14:
fd:0a:4d:ae:7e:5e:fe:9f:1b:b5:ce:da:0e:be:b7:
77:66:65:86:0e:cd:78:30:42:11:1d:f6:41:78:21:
a7:e8:08:12:3b:08:43:b3:9d:a6:be:54:89:ae:ca:
6e:29:0e:a3:10:15:4e:33:46:fa:e9:ec:2c:f5:3c:
76:ee:dc:c3:c3:99:90:d5:ec:00:a5:e8:15:cb:2f:
7b:a7:78:76:ff:5f:06:72:1c:bf:88:d6:5e:f7:a1:
17:8f:a4:78:32:9c:62:4e:c1:8c:f9:0a:ed:1c:3f:
e4:14:d1:16:a1:a5:21:01:e3:26:da:ab:fe:b1:ae:
a9:ef:5f:48:81:c3:6f:89:e5:3c:fa:de:8a:53:1a:
b7:a5:88:40:7b:36:6b:cd:31:04:04:10:ce:44:61:
ec:af:06:08:79:6e:ab:2e:b2:b4:ca:b4:84:8c:ba:
b3:3a:44:fa:ee:00:fe:93:19:15:66:e2:e7:5b:22:
6d:14:80:17:b4:99:f9:02:1a:e7:ee:aa:f1:45:5b:
3d:83:74:be:d5:37:04:d6:65:19:47:c0:be:9c:c6:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:89:71:00:62:C0:CA:E7:E5:85:33:CC:5E:2C:13:54:44:76:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/414e375a-d953-3789-8d2e-1e323042827d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:03:40:d4:b4:48:17:dd:b6:4b:22:7f:94:03:8f:49:07:a5:
f0:a6:bb:7c:b5:64:36:72:73:ad:bc:05:d9:fd:96:bf:52:ea:
f1:02:e2:06:aa:2e:4a:ec:b4:19:f1:1e:71:ae:0a:5a:56:11:
32:a6:fd:72:6c:8e:44:34:c6:08:23:b3:e6:a3:ea:39:89:35:
13:69:4a:09:e2:1c:68:09:8c:e1:ae:cd:89:3d:c1:a0:18:34:
40:5c:7b:56:7a:f9:52:f4:4b:ed:75:ba:45:f1:6c:b6:f3:a6:
70:f6:5b:9a:83:82:14:4a:1c:74:e2:85:b6:b5:3e:5d:1f:7e:
9e:1e:2e:c4:58:da:10:c2:ed:25:23:02:95:62:d0:ae:63:00:
a4:be:f0:f9:39:0e:04:1f:ac:94:7a:2c:01:cd:71:f1:af:66:
6b:60:e8:8e:dd:c9:b3:7b:7f:09:3a:04:12:82:53:ab:b9:0c:
b1:c8:b5:b8:fb:35:48:3f:2c:1f:c9:fc:4c:85:3c:92:c8:8e:
0f:f3:8e:87:9c:0d:be:aa:62:b0:aa:17:6b:d6:40:75:d8:f9:
c1:14:28:1d:04:0a:ba:cb:18:03:5a:af:fc:68:a2:11:73:34:
64:4e:7e:3d:ff:58:b9:af:4b:9a:7e:9e:6b:53:1d:71:5f:b5:
cc:12:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org