Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/be4df7e3-f97c-37a9-852e-dec001a02bfc.roa
File: be4df7e3-f97c-37a9-852e-dec001a02bfc.roa (raw, json)
Hash identifier: Q1kWrAs5IvN+lpyoQ1xH1B4C4NygPTmLa8upZ0MzvX4=
Subject key identifier: 1F:A4:42:16:04:E6:FD:93:24:47:0A:FA:D8:4F:02:6A:B0:20:A5:9D
Certificate issuer: /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial: 010D0C9F4328576D51CC73C042CFC17390C58F9B
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/be4df7e3-f97c-37a9-852e-dec001a02bfc.roa
Signing time: Mon 27 Jul 2020 14:55:33 +0000
ROA not before: Mon 27 Jul 2020 04:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 15038
IP address blocks: 74.116.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:90:c5:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
Validity
Not Before: Jul 27 04:00:00 2020 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=0a2f08a6-64b5-495f-90f9-f7fa161b3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:67:7d:bd:03:44:00:70:61:e8:0b:2d:6f:
17:fa:62:ec:e7:4e:f7:b5:2f:93:d0:b0:d2:e1:91:
88:0c:c7:bb:25:20:00:48:f2:1c:d4:76:ba:40:8e:
80:84:6a:98:bc:02:40:43:b0:93:30:15:a4:7e:06:
71:8b:44:e3:f8:48:7d:1a:58:1e:76:66:0c:cc:2d:
53:72:1e:55:39:c9:94:18:5c:ca:7d:02:7c:4c:a6:
54:71:1c:2d:8f:1c:b1:12:0b:b5:1c:48:92:d3:3e:
3c:1f:58:ca:46:61:51:ce:8b:ad:d2:3a:85:3f:90:
50:1e:a5:77:0f:a4:3f:a8:ad:a8:bf:79:c8:2c:6c:
07:e7:5a:09:eb:22:ce:5f:b3:50:54:83:a4:8d:50:
9b:20:d1:ba:be:34:a7:da:72:5a:30:3c:5c:33:40:
95:18:cb:31:22:9a:42:86:d7:4b:75:12:64:b6:2f:
44:34:03:cd:4e:05:49:de:cf:56:12:a0:39:1a:4e:
4f:b3:0c:14:d8:9c:07:ae:d1:ee:65:b0:43:2b:ee:
95:3d:84:3e:0e:f1:43:50:1a:b2:be:b8:9e:5f:3a:
a5:e7:32:72:27:85:cc:7d:de:8b:88:22:fe:9d:e9:
ce:56:dc:77:0e:c4:84:03:b1:da:68:df:c5:f0:bd:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:42:16:04:E6:FD:93:24:47:0A:FA:D8:4F:02:6A:B0:20:A5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/be4df7e3-f97c-37a9-852e-dec001a02bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
X509v3 Authority Key Identifier:
keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:72:ad:9a:c5:ca:bd:70:64:da:02:80:29:79:44:90:05:e4:
bb:9e:93:1a:e8:89:a5:6b:b2:b9:79:62:33:da:dc:fe:ce:f3:
bd:83:97:a9:d0:9c:9c:ac:98:a3:fc:fb:06:9f:2f:03:08:2d:
23:89:db:66:49:74:db:fb:33:f2:3c:8b:60:f1:0a:29:6b:3b:
ad:af:06:7d:e6:8c:17:17:51:cd:a4:62:e1:0f:7d:84:84:51:
86:9d:0c:97:48:ef:4d:35:de:46:34:db:48:71:6f:69:f6:f6:
cb:18:1d:6a:14:b2:82:d6:18:eb:33:8d:15:a0:ea:29:f9:5d:
26:b1:04:a9:ab:8a:76:d3:d1:22:46:01:34:4b:c0:d1:b7:b1:
cb:5f:5c:bf:87:34:48:f2:26:8b:4e:0f:18:84:e7:84:a1:f4:
f9:a0:13:9e:1c:c1:e3:4f:c8:9b:8b:9f:ef:7c:03:08:ae:33:
a2:4b:e5:7b:b9:69:8c:f7:a3:b1:69:9d:4a:b7:a0:03:fa:9a:
35:a0:4f:77:92:c0:0b:26:29:d9:fa:a7:27:bc:4a:d8:24:05:
59:13:5a:7d:d5:27:07:b4:0b:fe:f9:9e:ad:c6:80:b4:bf:2d:
7a:48:30:7a:47:6b:31:05:ac:ab:41:27:a8:7d:e8:db:48:0c:
33:1c:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:13 2023 by rpki-client on console-fra.rpki-client.org