Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/b180d053-3b03-33ab-b0ca-cdc4da7da502.roa
File: b180d053-3b03-33ab-b0ca-cdc4da7da502.roa (raw, json)
Hash identifier: wKn+MAo6ve2VWMApyWcn47pGAABBJcWKqdAIw0vuFi4=
Subject key identifier: A2:5B:28:62:F3:06:03:B6:1F:71:32:E6:E1:1D:D8:E1:39:61:95:03
Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730681FCE5
Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/b180d053-3b03-33ab-b0ca-cdc4da7da502.roa
Signing time: Tue 30 Jun 2020 18:34:09 +0000
ROA not before: Tue 30 Jun 2020 04:00:00 +0000
ROA not after: Mon 03 Oct 2022 04:00:00 +0000
asID: 3801
IP address blocks: 149.248.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:06:81:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c
Validity
Not Before: Jun 30 04:00:00 2020 GMT
Not After : Oct 3 04:00:00 2022 GMT
Subject: CN=64f9372d-5ed1-4790-8874-3f9346ff5aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:0b:6f:9f:85:dd:90:d4:80:19:1c:79:ae:
c7:45:ad:22:fd:12:e0:fc:cd:a3:31:53:9b:b4:63:
1d:4e:38:0d:30:4a:cc:d6:53:ac:26:37:e5:d9:67:
a9:f3:f0:9c:92:ed:ba:c2:9f:56:fb:2c:b1:2a:74:
f8:23:9f:cf:af:ea:65:42:b4:eb:ad:9e:b9:c2:70:
80:88:f3:ad:4f:4c:ab:12:20:3f:b3:55:f5:3d:0f:
2d:7c:b2:92:7d:b0:9d:3b:c8:74:8c:f7:73:13:76:
de:cc:1a:80:50:84:3c:5d:78:69:4b:24:f4:c0:d1:
92:ed:45:d2:c3:4f:fe:5c:88:b3:34:1b:31:77:49:
3e:21:ca:ee:9e:0c:a8:03:20:de:92:08:f6:71:49:
c1:30:8b:17:08:6b:32:46:57:ea:54:ff:9b:23:ec:
9a:51:72:b9:59:89:5b:8e:33:47:f0:49:68:15:f6:
af:5b:4c:9f:09:39:ec:46:3f:d2:bf:28:0f:a5:79:
2c:59:49:3f:cd:5e:69:e9:a2:4f:0f:58:b8:7f:35:
60:fd:0b:4b:f2:18:f1:a7:0c:27:a0:ff:71:b6:f4:
4e:c0:a3:b8:ca:29:43:76:65:63:a9:02:cb:f2:a2:
7e:19:2c:dc:bb:7f:39:65:fe:22:ab:8e:8f:ef:28:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:28:62:F3:06:03:B6:1F:71:32:E6:E1:1D:D8:E1:39:61:95:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/b180d053-3b03-33ab-b0ca-cdc4da7da502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl
X509v3 Authority Key Identifier:
keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:07:5b:1e:82:a0:9b:68:5d:ca:6d:85:b2:99:1f:ae:f8:2e:
90:52:23:62:5d:75:fb:36:e2:70:be:ce:44:1b:e6:63:15:9d:
7d:57:ec:6b:a0:07:d3:d0:70:0e:75:be:ab:d9:df:9d:70:55:
47:37:a1:87:c9:2a:e9:94:d4:77:c6:9c:91:fe:16:46:14:20:
49:d8:24:32:0e:76:aa:7d:6e:b4:df:8b:92:0c:5e:8d:7d:77:
c1:ff:c3:e8:0f:c8:4f:39:ae:8a:08:ab:5e:c1:91:c7:73:f8:
87:d9:68:2d:91:a1:6b:82:3f:55:e0:bc:18:a9:69:47:f4:bc:
ef:a3:97:ba:fc:bf:84:94:3a:07:f9:a7:e0:cc:54:23:5a:a6:
97:d9:0f:10:8e:5c:ba:17:71:3a:48:c5:63:e3:78:3d:d2:b4:
88:46:81:18:cb:b9:4e:32:a8:81:e1:50:fc:b6:c4:6d:e2:bd:
7c:dc:46:d3:49:72:2d:a0:c1:f6:26:82:80:86:b2:98:cf:f3:
2e:a2:c6:71:71:40:b1:14:48:f9:09:2d:f3:d2:3e:ae:a0:85:
9e:1f:c7:a1:3f:4b:21:e6:2e:fe:e9:14:d1:6f:01:1d:21:9a:
75:0d:85:d9:18:3e:33:f1:cd:6b:cd:ef:93:d4:e8:fe:de:a3:
75:5b:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:19 2023 by rpki-client on console-fra.rpki-client.org