Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3dbde0d9-f70b-3fd8-a762-9e2d90e792ae.roa
File: 3dbde0d9-f70b-3fd8-a762-9e2d90e792ae.roa (raw, json)
Hash identifier: 8t+VTqH/L2H4llgZ7BJ1RxrJX5XLs/MxNGZMLEuhPmw=
Subject key identifier: 7E:B6:77:17:00:01:EB:21:B0:70:AF:30:FE:35:93:86:DF:17:DF:9C
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7BC29EEDB84C74A97585EA0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3dbde0d9-f70b-3fd8-a762-9e2d90e792ae.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:29:ee:db:84:c7:4a:97:58:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1c8af6b5-66fc-4828-a662-5a19a374f3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:11:49:be:5a:0a:31:95:94:2c:72:31:04:
2e:6c:ef:b6:71:46:52:26:94:4b:f5:78:c8:94:65:
50:a0:a3:88:36:5e:b9:9d:a6:9e:9e:3c:1c:e2:e0:
e6:3c:80:c4:bc:d2:6e:82:9a:f7:c4:2c:d6:b9:bf:
5f:88:b5:6d:f7:49:35:9b:fb:3f:9d:27:53:0c:d0:
ee:c2:94:34:08:f9:95:0f:df:f8:23:e4:8e:9e:db:
68:d5:b1:6d:07:77:28:0e:bc:7c:35:08:51:7c:08:
b3:05:a4:93:1a:2c:14:d6:76:e4:c0:2d:f0:ee:89:
fb:7d:87:d3:59:77:b0:05:61:26:74:c7:43:eb:0f:
00:e7:41:56:a2:d8:f8:fd:a8:0b:76:32:58:6c:32:
69:d1:f7:52:1c:50:75:66:0b:82:13:5c:9f:3a:ae:
db:54:2c:b7:74:dd:ce:8e:ed:aa:27:ce:47:c4:08:
51:0d:f1:04:a3:c2:ba:53:09:c9:08:d2:d7:b7:84:
07:09:da:6b:0f:ca:99:c6:9b:6d:66:cd:c1:41:65:
a9:70:f0:cc:d3:5b:1a:86:10:9c:90:0e:0a:af:e0:
5d:fa:12:df:4a:ba:f2:10:7a:e1:58:55:5d:9a:c2:
31:54:af:7e:d2:ca:00:a4:66:5c:7c:03:9f:b6:d9:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:77:17:00:01:EB:21:B0:70:AF:30:FE:35:93:86:DF:17:DF:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3dbde0d9-f70b-3fd8-a762-9e2d90e792ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e2:b4:c9:31:57:a0:c3:7a:10:b3:1c:9f:b8:11:ba:2a:d0:
c0:b7:d0:45:b0:7c:2b:33:2d:30:34:2f:a0:c9:1c:68:69:34:
36:e5:ef:43:52:0c:ba:09:cf:72:6e:f8:df:bf:0a:20:20:36:
0f:f4:52:7c:31:65:f4:9f:c9:ca:fa:46:82:3a:ed:03:0e:73:
c9:7e:5e:5d:5c:d8:47:12:f4:06:00:a0:57:e1:2e:37:32:12:
2f:c5:41:df:09:e6:b0:4a:f0:aa:50:be:34:00:57:7e:5a:87:
93:74:d7:81:b0:2f:a3:4c:07:e1:6e:71:f8:a9:a6:0f:b3:42:
40:dd:db:65:48:c9:75:0a:5c:38:dd:f0:02:15:a3:2b:47:f9:
d5:a5:82:56:f6:fd:42:d9:e3:54:4e:0f:0f:da:f1:62:dd:54:
9a:4a:93:f3:bd:c6:8e:34:38:15:02:30:de:f8:7c:e9:7f:03:
d0:87:77:62:ad:63:7a:67:e8:97:81:4c:44:a1:98:69:c0:e3:
56:a9:08:cb:8e:2b:ed:48:b0:f7:3e:f9:15:d9:cc:bc:a9:1b:
36:d2:03:27:7e:9e:ff:eb:da:21:f0:1f:55:b9:f2:ab:41:f6:
c2:08:59:51:86:76:b6:ca:b2:5f:03:af:d2:28:4a:0a:4d:f0:
ef:60:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org