Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/b84ce814-c2d8-3001-a3dd-978558a73620.roa
File: b84ce814-c2d8-3001-a3dd-978558a73620.roa (raw, json)
Hash identifier: iposnLnsvXbRMCoEBsNwvO7joQzavGTSHEEjbjHc/aw=
Subject key identifier: 3A:F0:49:59:CC:A5:24:8C:B3:3D:E5:30:8B:A5:6E:48:AD:68:BE:2D
Certificate issuer: /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial: 010D0C9F43285838A0296F377B23312BDFC94640
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/b84ce814-c2d8-3001-a3dd-978558a73620.roa
Signing time: Fri 18 Dec 2020 05:00:00 +0000
ROA not before: Fri 18 Dec 2020 05:00:00 +0000
ROA not after: Thu 20 Apr 2023 04:00:00 +0000
asID: 198949
IP address blocks: 169.196.128.0/18 maxlen: 18
169.196.224.0/19 maxlen: 19
169.196.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:a0:29:6f:37:7b:23:31:2b:df:c9:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Validity
Not Before: Dec 18 05:00:00 2020 GMT
Not After : Apr 20 04:00:00 2023 GMT
Subject: CN=bd19e67a-a921-4f36-9077-b69aaa9476b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:6d:a3:6f:34:ed:cd:73:85:57:27:71:c0:
e2:4f:93:c0:9c:b7:4e:9b:29:0c:b9:42:98:bb:ec:
7d:3f:a9:0d:41:fe:68:b3:81:79:9b:9a:a8:f8:01:
ea:6a:1a:3f:d8:5b:f7:4f:dd:65:62:f3:27:77:5f:
bc:b6:42:86:74:ee:9d:c7:7d:7e:39:ed:90:15:65:
76:88:29:8d:00:f4:99:0c:b6:63:12:73:c8:34:ff:
f2:3f:ce:fb:f7:3a:94:a1:22:ea:fe:c4:7e:c3:76:
83:4d:c4:bf:dc:1e:ff:77:6e:09:57:15:20:09:ba:
92:b6:92:f4:1f:66:c3:ee:bc:78:2c:54:dd:f1:58:
f1:30:f9:e3:f2:b4:53:0d:48:d9:c9:e4:b1:0f:2f:
89:5d:ba:cc:86:64:e5:31:ae:6c:9e:ba:d2:ff:86:
f2:ed:58:89:ba:1f:0a:07:40:a7:32:17:c8:c3:09:
99:af:bb:f5:01:a1:ad:7a:ff:87:47:72:2b:ff:6f:
79:71:fe:72:7b:7a:59:8f:0c:05:ea:15:a0:4e:a2:
59:24:1d:1f:60:e8:f3:90:1a:5f:33:b7:ae:1d:1a:
35:b3:d6:21:86:c4:63:20:74:1e:d0:f6:7e:96:de:
4c:37:b6:f0:36:26:e1:04:b8:58:cc:70:dd:43:c7:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:49:59:CC:A5:24:8C:B3:3D:E5:30:8B:A5:6E:48:AD:68:BE:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/b84ce814-c2d8-3001-a3dd-978558a73620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
X509v3 Authority Key Identifier:
keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
sbgp-ipAddrBlock: critical
IPv4:
169.196.128.0/18
169.196.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0f:28:3c:44:51:c5:4c:68:45:f0:98:bd:8f:67:46:d2:af:
2e:94:fa:ac:a2:b6:4f:0d:52:9b:9e:8a:09:88:af:73:74:44:
4f:8a:41:b6:6f:80:4c:3f:ac:1a:bf:ee:0b:36:a5:26:37:ce:
23:44:5a:60:ac:58:30:e7:d5:3f:a4:eb:e6:f1:68:6b:58:40:
c2:12:08:4e:77:da:4e:fd:2b:65:0a:19:e9:06:4f:3b:cc:f2:
43:33:09:08:b4:6a:cd:b1:63:8d:50:12:2d:f4:96:23:b6:98:
f2:c1:a3:7d:0d:d9:31:bd:8b:8f:3c:72:de:1e:cd:b7:60:72:
cb:04:b8:1f:dc:5b:50:76:97:2d:4c:6b:f6:98:a2:e1:df:8a:
e5:52:bb:14:50:c7:22:57:b2:44:63:e5:52:57:74:a1:1e:ee:
0f:61:c0:e3:41:a2:aa:53:a2:98:1c:a9:d1:ba:95:7a:a0:85:
c3:d6:9c:32:dc:41:ec:eb:60:60:3f:b7:33:46:56:3b:76:0e:
8d:36:6e:f6:2f:42:65:e3:9c:d4:4a:ae:cd:3c:64:91:19:6a:
34:fb:e8:38:68:3c:ec:20:a1:2e:76:c8:05:e2:27:be:5b:be:
86:ef:3a:1b:a6:db:9b:a2:16:4a:33:c5:bf:8f:01:66:f4:b1:
60:67:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:09 2023 by rpki-client on console-fra.rpki-client.org