Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/aa7ae7b4-c8af-31b7-bea5-ce442b3cee37.roa
File: aa7ae7b4-c8af-31b7-bea5-ce442b3cee37.roa (raw, json)
Hash identifier: o9ywGWU7rzRMbKQxlFB3XUVZyxubkZw5F4ajXye9pUY=
Subject key identifier: 75:C1:35:FA:AF:E5:47:09:6D:06:AF:0D:9C:06:1D:2F:A9:19:AB:5F
Certificate issuer: /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial: 010D0C9F432858393C883DB71325B9DE839F3800
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/aa7ae7b4-c8af-31b7-bea5-ce442b3cee37.roa
Signing time: Fri 18 Dec 2020 05:00:00 +0000
ROA not before: Fri 18 Dec 2020 05:00:00 +0000
ROA not after: Thu 15 Jun 2023 04:00:00 +0000
asID: 20249
IP address blocks: 169.196.66.0/24 maxlen: 24
169.196.67.0/24 maxlen: 24
169.196.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:3c:88:3d:b7:13:25:b9:de:83:9f:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Validity
Not Before: Dec 18 05:00:00 2020 GMT
Not After : Jun 15 04:00:00 2023 GMT
Subject: CN=38915962-2b79-460c-ad6d-137dd11d767a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:7a:ec:54:7b:1f:09:4f:09:03:d8:50:8d:
00:65:95:40:12:0c:26:66:11:61:d7:93:2e:2f:de:
8d:dd:45:99:94:a8:53:9f:62:83:ef:98:27:a0:9e:
94:da:c8:7d:81:86:ec:68:e2:1f:60:1e:49:b0:8b:
f5:d9:4a:40:47:ec:4d:a5:84:a0:84:85:78:66:ca:
b6:7a:73:e2:29:a1:ea:c3:79:ee:fa:4b:ca:73:e5:
b2:ba:1e:c9:62:a8:13:b6:dc:36:84:ed:94:67:a8:
32:bc:b0:fd:19:62:c5:ee:ff:cc:ed:39:94:2c:14:
b4:53:47:14:37:ab:38:2f:68:b1:a4:9c:9b:38:bd:
d4:0f:b2:92:65:f1:44:ba:8e:fe:65:da:2e:93:d6:
07:cd:70:a0:f0:e5:7f:58:ad:2d:32:81:0a:9c:76:
b1:c6:7b:6c:24:dc:c0:f2:72:33:ff:12:53:af:58:
df:fe:98:08:a0:02:de:cb:37:b3:52:4c:33:f2:aa:
db:6a:3f:35:67:a4:e3:1b:d3:ce:fe:2c:5d:9e:d5:
c2:c2:d5:d5:dd:18:f8:d2:f2:2e:15:46:55:b9:e7:
a3:c1:a7:8a:40:11:73:62:b2:40:35:8f:0e:cd:bd:
4b:6e:f1:a4:58:6a:87:51:99:f5:88:de:7d:e9:e2:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:35:FA:AF:E5:47:09:6D:06:AF:0D:9C:06:1D:2F:A9:19:AB:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/aa7ae7b4-c8af-31b7-bea5-ce442b3cee37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
X509v3 Authority Key Identifier:
keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
sbgp-ipAddrBlock: critical
IPv4:
169.196.66.0-169.196.69.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c9:64:4d:f9:37:be:9d:f9:ea:62:6b:88:c1:5a:a2:79:41:
a4:9a:f5:fc:3e:9f:5f:d3:05:30:bb:57:76:89:91:7e:00:7d:
92:e3:e0:12:0b:e5:1d:34:78:ab:b9:ce:36:6a:9a:4a:8b:fb:
33:3a:e5:31:f3:4c:5f:f2:8f:25:ab:35:75:b3:be:9c:67:5c:
d6:dd:a9:ff:4e:b2:59:db:42:ae:0a:c9:af:a2:18:dd:71:5c:
63:3b:68:2d:e3:62:ba:6d:39:cc:bf:f1:c4:c8:83:6d:7d:04:
70:51:4b:53:dd:70:a3:dd:a4:e3:5e:f3:ac:63:dc:e5:c5:4f:
db:fa:c1:8b:91:a0:e1:89:63:44:77:1b:0c:b1:a2:d7:df:ef:
83:41:9b:ab:14:39:fb:c9:f6:51:88:89:94:ed:66:c2:8e:25:
55:27:84:aa:58:f0:61:fc:31:84:4e:f6:7d:d2:d3:e4:42:4c:
f8:38:00:ae:55:21:30:dd:f0:6a:f6:cb:fa:7c:f3:b5:f3:5e:
01:e2:43:52:e1:fb:ca:5b:85:31:89:c6:75:95:f6:7c:f4:70:
bd:58:7e:9f:79:ba:00:50:dd:05:26:98:60:48:f6:56:fe:fa:
14:3c:cf:a5:ef:96:38:4a:ee:4a:86:6b:08:a4:83:58:52:0c:
d3:0a:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:09 2023 by rpki-client on console-fra.rpki-client.org