Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4330d847-d7d0-373a-a2a7-f032bfabdc10.roa
File: 4330d847-d7d0-373a-a2a7-f032bfabdc10.roa (raw, json)
Hash identifier: qXrChKeyqbSbk2E96JOaPnAkFtmmTYxMGwTzw4Gcinw=
Subject key identifier: D1:4E:90:D6:45:20:A1:46:6E:6B:2C:5B:23:FF:63:22:FE:89:BF:84
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7ACA763D91ECF753E7A1780
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4330d847-d7d0-373a-a2a7-f032bfabdc10.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:a7:63:d9:1e:cf:75:3e:7a:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ea70f5cd-fc5f-429f-827b-a79c480ec0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:08:33:e1:ff:dd:e6:d0:5a:0f:0b:66:aa:
ce:cb:e8:81:8e:b3:69:dc:8e:65:7b:4f:e2:82:83:
a1:71:6a:ab:81:05:5f:04:28:05:f1:b7:b9:d3:a8:
00:cc:90:5b:7b:9b:00:a9:da:f4:32:a4:cf:16:b0:
a4:1c:cf:39:1d:f0:bd:7e:4f:03:f4:19:54:1b:96:
42:01:29:d8:0c:13:da:8a:ac:ba:51:65:2c:11:0b:
b3:ed:d8:ec:6e:cb:b6:ee:ee:ab:53:d6:1d:b2:5e:
65:c3:86:d3:d5:30:c2:34:71:24:41:d6:fc:4e:0c:
cc:a3:a7:5d:8e:a9:16:34:31:fa:79:c0:43:9d:88:
2f:91:65:f9:10:50:84:95:2d:77:20:42:f3:14:ff:
04:68:86:dd:f6:5d:23:b4:ca:ef:3b:61:dc:30:ae:
0d:2f:72:ef:66:fc:14:d0:bc:b3:25:6c:48:57:d2:
21:63:87:3f:66:6c:07:54:de:c2:20:c5:56:38:fd:
7b:9f:fd:1c:97:4f:1b:83:a9:09:93:d6:d1:bc:6c:
ee:67:13:8b:75:fe:9a:5d:b1:94:6a:5a:e3:0f:3d:
5f:a4:07:6a:27:98:f7:05:1b:7b:93:9a:f3:8b:a4:
39:7b:f7:e0:6d:1f:2d:5f:3b:46:d9:f3:17:2d:8a:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:90:D6:45:20:A1:46:6E:6B:2C:5B:23:FF:63:22:FE:89:BF:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4330d847-d7d0-373a-a2a7-f032bfabdc10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b0:41:b4:e9:47:0c:43:1a:d8:0f:ce:24:87:6e:bb:60:41:
fb:2b:8e:49:1b:98:47:82:c6:9d:5f:d6:51:66:f7:7e:1b:31:
18:ef:0b:de:9c:4a:0f:26:b8:a8:65:43:36:5b:6f:41:c9:14:
38:b1:bf:48:a5:c1:65:89:72:6d:08:fc:48:4d:1b:60:bd:0f:
77:7e:d8:8f:85:91:70:85:12:d4:a2:c9:b4:fd:02:ee:eb:ed:
57:49:18:21:0f:25:70:a6:76:cb:eb:36:a8:b9:2b:01:fe:64:
0a:54:43:e7:10:2a:67:85:7b:cf:6b:e4:c3:62:e0:77:56:27:
6b:8f:c6:ab:36:ab:9f:d8:91:34:aa:67:6c:ad:47:1a:03:dc:
44:29:ea:06:12:ad:1a:05:bb:10:5d:d3:f7:a7:38:7a:30:ae:
0e:6a:03:d2:04:b9:47:41:82:c5:c7:01:91:da:0b:96:00:38:
de:6a:16:cb:ca:72:06:2e:a3:6a:6f:37:2d:20:3a:2d:40:99:
b6:01:63:0c:3b:5e:bd:df:79:bd:52:7e:38:e8:aa:e8:dc:86:
18:fe:dc:50:b6:80:91:21:a6:fb:b9:f4:84:9c:e7:7f:11:e3:
87:ae:8d:99:f5:36:e9:79:ae:b7:10:c2:0c:08:de:d6:d1:32:
fc:8d:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:29 2024 by rpki-client on console-ams.rpki-client.org