Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4685be82-763c-3695-914e-7835d2d79abc.roa
File: 4685be82-763c-3695-914e-7835d2d79abc.roa (raw, json)
Hash identifier: o3IDS1rGHzk+DX3uD9ENz1ZAsb5rCnafHt8RMJtjGlQ=
Subject key identifier: 83:90:3B:22:D5:D4:B2:7C:59:99:B8:1D:5E:AD:98:EE:63:6C:C8:F3
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F4328584367DA60E5F034BF88530FE260
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4685be82-763c-3695-914e-7835d2d79abc.roa
Signing time: Sun 01 Oct 2023 13:00:25 +0000
ROA not before: Sun 01 Oct 2023 13:00:25 +0000
ROA not after: Sat 30 Dec 2023 14:00:25 +0000
asID: 54874
IP address blocks: 104.167.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:67:da:60:e5:f0:34:bf:88:53:0f:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Oct 1 13:00:25 2023 GMT
Not After : Dec 30 14:00:25 2023 GMT
Subject: CN=a2d34d39-b97f-4cc6-8506-018b6233ce6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:7f:23:29:c2:80:72:0d:94:0e:4b:18:41:
dc:d5:c3:c0:09:3c:9a:26:ba:14:b6:1a:a7:61:8d:
75:fe:8c:69:b4:68:c6:b6:d6:6e:83:41:53:4f:30:
8b:08:ac:f4:bc:53:a2:57:71:69:76:39:91:6d:df:
1d:8c:fb:3c:de:b5:5c:e1:d0:e3:4f:45:1b:de:6d:
50:c3:48:01:0b:55:d6:f0:a1:d6:c9:a8:b0:32:c1:
15:a3:9d:25:9a:58:e6:38:74:7f:74:78:1b:e6:47:
87:c0:8b:2e:6b:5b:a6:47:9f:41:d4:25:3d:5e:50:
01:e0:68:6d:ad:d7:c8:b5:66:25:c0:fa:d4:af:34:
6a:22:25:77:01:a4:28:a5:9f:e0:ec:3c:06:4f:f6:
ae:d2:3a:97:86:62:83:84:b2:fe:5f:48:e6:43:51:
41:5f:e3:db:41:6f:28:87:29:97:81:05:62:3c:79:
a5:df:bf:26:88:ac:80:0b:5e:f4:5d:05:c3:ef:f8:
04:1d:84:9e:79:cd:d2:43:fd:57:0f:90:08:79:69:
a9:9a:9b:14:aa:07:f8:bd:1b:36:0f:7f:36:90:00:
50:9f:a2:06:41:6c:47:b2:76:c8:6e:5f:90:1e:13:
b7:9c:99:df:3c:ca:df:79:48:44:7a:13:06:41:cc:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:3B:22:D5:D4:B2:7C:59:99:B8:1D:5E:AD:98:EE:63:6C:C8:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4685be82-763c-3695-914e-7835d2d79abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7c:b8:04:b0:89:a8:4b:be:64:4c:59:48:9b:d0:2a:2e:6c:
86:7a:33:a9:b8:75:a4:c5:bf:a1:3a:e1:c5:30:0a:8a:09:41:
f9:bc:d9:2d:fe:d0:ca:61:d3:7a:e7:12:1e:66:e6:0f:90:99:
c8:4d:27:3e:1c:7d:af:fb:59:6d:b6:fb:af:48:a1:9d:c9:6a:
05:9b:b3:5a:98:1f:6b:77:d9:bb:d9:7b:62:54:15:a0:48:9c:
92:3f:fb:11:e3:e6:0a:b1:7c:0a:f1:eb:ee:00:6b:e6:99:c8:
8c:ab:d8:8e:cb:60:a0:c0:92:cf:50:7d:50:03:1d:72:03:c3:
6b:02:59:6f:ed:56:1d:2c:41:18:7f:a9:4c:67:fc:28:67:e5:
21:ff:01:4a:72:1d:ca:e2:28:61:80:47:a5:3d:01:19:ee:66:
82:c0:ec:75:59:e5:19:84:3a:52:3f:bc:f7:e0:04:83:10:e4:
dc:8c:0f:8d:78:37:63:82:26:af:cc:69:7f:9e:e0:fd:08:db:
bf:2c:da:02:b6:8e:3e:d1:13:36:3b:c0:12:23:5e:92:b1:1e:
15:33:e9:85:d9:35:09:33:7f:c3:67:05:07:1f:5a:f6:c3:47:
6f:8c:d1:b4:21:2f:22:cb:e5:63:ef:9c:d2:f1:94:62:de:ef:
36:13:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:58 2024 by rpki-client on console-fra.rpki-client.org