Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa
File: 3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa (raw, json)
Hash identifier: e7Qqm3TXEdVg2pWLeYkW0X5Xoa1phYcYF74YGgHhF0k=
Subject key identifier: 80:F0:01:AA:E2:47:37:38:89:8F:75:ED:CE:2D:BB:BD:AD:62:BB:3C
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285842A632774BF35CA9D143C05C00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa
Signing time: Mon 24 Jul 2023 04:11:08 +0000
ROA not before: Mon 24 Jul 2023 04:11:08 +0000
ROA not after: Sun 22 Oct 2023 04:11:08 +0000
asID: 834
IP address blocks: 200.229.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a6:32:77:4b:f3:5c:a9:d1:43:c0:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jul 24 04:11:08 2023 GMT
Not After : Oct 22 04:11:08 2023 GMT
Subject: CN=b5db0714-544c-442b-a3c0-ef24ee513dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:43:cd:cf:0d:be:00:93:43:e7:68:17:2f:
5f:a1:11:ed:eb:b3:6d:c1:55:65:de:ca:47:5c:f3:
13:d8:5f:f5:0b:5c:74:59:84:3c:13:d3:80:c3:d2:
d5:5d:7a:4e:3d:0e:ac:b9:c5:f8:57:bb:0f:2c:47:
cc:3a:4b:ac:e4:db:0a:61:0e:89:82:3c:21:9e:d4:
09:5e:6d:68:d2:3f:21:9e:75:e6:4f:1e:0e:90:84:
20:ac:29:aa:51:01:4f:28:91:01:64:8a:1f:eb:36:
07:0e:03:93:4f:fc:1d:f2:1b:75:a8:97:03:df:09:
49:bd:78:79:94:92:fb:0e:28:76:33:71:da:f3:bc:
86:49:03:f0:50:6a:99:d3:a1:57:25:ba:cd:ba:63:
15:60:cd:23:5b:00:98:cc:94:54:66:e3:72:98:56:
dc:73:ed:ae:0a:68:77:36:ca:3f:0c:29:3c:a1:02:
c0:11:f5:fc:6d:c4:e0:df:a9:6f:69:b7:8f:93:3b:
a0:56:d8:32:45:29:0a:69:a4:1b:69:c8:e6:03:f6:
e7:14:82:7e:62:1b:50:4d:ff:fe:c9:bb:67:ee:bb:
54:b8:58:90:dd:0d:fc:7f:ac:bd:ca:12:b3:df:5f:
35:a4:56:be:c5:6e:78:22:75:07:1a:fd:25:b3:93:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F0:01:AA:E2:47:37:38:89:8F:75:ED:CE:2D:BB:BD:AD:62:BB:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d6:15:66:86:20:76:66:c2:3e:bc:c4:7b:bd:f5:86:00:8e:
f6:d0:f6:81:1c:7b:2f:fc:3a:95:3c:cf:a8:bc:66:02:9c:e5:
38:d3:a1:5b:2b:23:11:d8:9c:06:3f:0b:e5:5b:6c:5d:a2:0a:
04:73:c5:0d:04:21:a5:05:45:f1:b8:30:71:fc:c7:db:30:e3:
e9:74:be:9c:44:bc:50:d5:fe:b9:35:3d:ad:82:6e:57:c3:15:
e4:17:ae:1c:3e:20:a7:27:e6:40:ac:03:0a:07:79:6f:3e:b6:
7a:21:56:8b:3f:d4:66:e7:a8:55:71:df:42:31:aa:5a:ed:93:
46:6d:ff:04:8d:22:d6:1b:84:13:35:fa:d3:c8:41:c9:9b:eb:
87:12:a0:0f:4e:a5:b5:41:30:a9:82:a4:88:03:ad:9f:6e:aa:
dc:9c:be:ac:cb:da:9f:bb:25:a8:b4:6b:69:83:92:d4:c3:10:
c2:da:fd:3c:7d:76:18:2c:c4:1a:c2:1d:34:7d:62:ee:df:05:
22:3f:68:c0:08:bc:ba:90:7f:d9:fd:91:38:ee:96:ef:2d:27:
db:50:f1:d3:d7:fc:ef:01:8b:34:f4:fb:5e:c4:38:09:9b:e5:
12:5a:ee:30:3f:69:b2:f9:08:47:f1:62:df:f7:f5:97:fe:3a:
fd:07:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:08 2024 by rpki-client on console-ams.rpki-client.org