Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8098a7f7-0159-3d10-9b76-6c973bb18a4b.roa
File: 8098a7f7-0159-3d10-9b76-6c973bb18a4b.roa (raw, json)
Hash identifier: pWwJG5LVGnIy4aHBqyNhfP21fUKEESACJXixqcIzxsw=
Subject key identifier: F2:2C:2A:6E:E5:86:7C:D0:AC:02:85:1A:FD:83:E4:4C:39:81:BD:D1
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285843BD5AECA2AA76DEBDEA8931E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8098a7f7-0159-3d10-9b76-6c973bb18a4b.roa
Signing time: Wed 01 Nov 2023 04:03:11 +0000
ROA not before: Wed 01 Nov 2023 04:03:11 +0000
ROA not after: Tue 30 Jan 2024 05:03:11 +0000
asID: 834
IP address blocks: 216.24.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:bd:5a:ec:a2:aa:76:de:bd:ea:89:31:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 1 04:03:11 2023 GMT
Not After : Jan 30 05:03:11 2024 GMT
Subject: CN=9ccb5f7a-453d-45b0-a53a-c8104f375790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:8b:45:02:f9:a3:9e:4f:b5:4e:57:3a:55:
90:6b:88:24:5a:68:70:85:6b:4d:7e:39:bd:95:b2:
c2:bc:d5:a9:81:c3:26:36:49:7a:c3:7b:b3:0e:8e:
d4:81:24:a0:fd:b0:57:f8:7d:6b:d9:e1:9b:72:3c:
8b:e7:c8:28:67:b0:1f:09:4c:10:8a:90:71:a1:0e:
da:98:c1:80:11:fc:42:d8:34:81:7a:a3:ff:0f:78:
e6:8c:9b:aa:22:2f:81:26:ee:fc:80:e8:9c:57:2c:
73:97:78:68:81:26:15:1d:8e:34:91:ed:12:0c:e3:
f4:2c:f8:da:e1:28:5f:c4:ab:4e:7a:45:93:30:16:
3e:3e:59:38:12:8f:72:d2:d4:79:07:dc:f7:9e:8d:
46:a1:f2:79:1d:3e:c8:0e:67:32:ff:06:f6:59:6d:
4d:eb:46:95:0a:b7:26:72:47:c7:fb:f2:31:e1:ef:
69:fa:1b:86:3f:57:e4:b8:c4:68:ae:7c:3d:9b:68:
26:09:de:cc:72:26:47:dc:57:76:7e:e6:a4:77:8d:
e1:b5:dd:95:11:5a:b1:e5:5d:cc:54:f6:0a:d0:47:
d0:25:d5:45:2a:e3:4c:39:16:7a:7d:05:1e:a7:52:
f4:0e:d8:c7:db:8f:9d:65:f4:5d:3d:6c:1e:d8:6b:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:2A:6E:E5:86:7C:D0:AC:02:85:1A:FD:83:E4:4C:39:81:BD:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8098a7f7-0159-3d10-9b76-6c973bb18a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:74:92:b3:aa:71:da:7d:a4:1f:33:23:3b:bc:5e:5a:df:67:
cc:31:c3:a4:e6:61:09:6d:79:f3:56:fc:65:8b:c8:73:fc:02:
c6:47:66:54:6a:97:f7:3c:d8:26:4a:67:3f:aa:fb:bb:d9:e1:
49:cb:65:0a:1c:7a:b8:75:2f:bb:19:89:06:ae:95:0c:91:15:
06:d0:9a:a3:60:e3:59:09:91:29:89:80:7f:54:c3:4e:a6:2a:
9c:14:5c:f8:8c:98:a5:b3:de:e7:f6:cb:d1:08:ea:89:96:e5:
f2:5c:03:ae:6a:85:6f:ca:9f:c6:eb:87:9a:3c:98:6c:0c:a4:
29:39:d3:a0:86:2e:a5:a8:90:67:d8:0e:d9:f6:b9:81:93:96:
36:c3:bf:64:54:b5:4c:67:ea:52:6b:88:9d:e9:aa:53:69:78:
59:9c:28:04:e5:22:25:4b:20:b1:70:0b:3c:39:f3:8c:49:fd:
56:4f:90:b1:8b:4e:40:a0:05:d4:c2:25:fe:cb:43:c2:d6:a8:
49:f8:bf:dc:be:34:40:22:9c:76:21:3c:b2:f0:86:19:78:3f:
61:bf:46:be:92:14:05:4d:8a:a6:84:6f:ff:77:51:35:b7:b1:
ce:2b:9d:26:89:27:33:61:85:d0:d5:23:36:65:22:04:98:fb:
0b:0f:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:55 2024 by rpki-client on console-fra.rpki-client.org