Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/3e8e8e16-d6c2-33b0-855f-df59bab453b2.roa
File: 3e8e8e16-d6c2-33b0-855f-df59bab453b2.roa (raw, json)
Hash identifier: gdI0z9C7uOcLi+0bATb5ZfvkH0ScZMwSQ/+1Q3ow88c=
Subject key identifier: 79:92:AD:64:6C:46:CC:17:8F:E8:F6:A3:99:11:B8:5A:8A:01:56:E6
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328583801D3F1A39C06C0CD716F27C0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/3e8e8e16-d6c2-33b0-855f-df59bab453b2.roa
Signing time: Wed 30 Sep 2020 04:00:00 +0000
ROA not before: Wed 30 Sep 2020 04:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 10747
IP address blocks: 68.65.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:01:d3:f1:a3:9c:06:c0:cd:71:6f:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Sep 30 04:00:00 2020 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=28d2a6c5-ab73-407c-a45a-e66427d243b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:65:f6:95:f4:db:3b:24:ee:a3:a8:bb:7c:
cf:5f:30:d8:52:31:1f:ea:6d:df:85:29:2e:ed:c5:
d4:02:81:65:9b:fc:f3:37:44:26:a0:3e:09:d0:63:
48:5c:b8:f4:fe:0c:b7:6e:e6:c3:c8:6b:78:d6:b3:
52:ad:e5:77:70:ba:0a:cb:7b:93:96:25:e6:47:5a:
c9:90:c1:62:a5:81:8e:aa:13:57:46:ff:41:30:4b:
c3:04:08:2b:ab:4b:6b:8c:54:f9:66:81:05:83:c7:
a3:05:bd:27:cf:70:a0:77:c4:d4:30:c5:d7:e7:12:
99:16:25:e5:09:25:67:d2:c0:ad:95:6a:03:66:fa:
06:04:5b:25:3c:b7:8d:b5:c0:5a:ca:50:de:ed:f8:
c6:a9:84:f2:48:ff:b5:f2:6d:e4:ce:13:00:d5:7a:
f1:85:4e:91:58:12:d4:2b:cb:67:da:4e:2d:93:2c:
00:47:22:dc:b7:59:fd:c9:53:20:42:43:28:e8:98:
d9:4b:67:05:3c:29:f0:ab:42:6c:e7:70:b1:9d:98:
5d:9f:ec:97:67:f2:cd:cf:57:12:b7:d2:fb:40:53:
c5:84:a8:49:35:47:66:50:03:e8:b0:75:10:a3:4b:
9e:84:0e:99:4b:17:e1:87:bb:00:88:2e:a7:2c:c3:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:AD:64:6C:46:CC:17:8F:E8:F6:A3:99:11:B8:5A:8A:01:56:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/3e8e8e16-d6c2-33b0-855f-df59bab453b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:80:eb:61:19:c6:c5:52:2f:bf:76:5b:62:12:db:a6:e6:29:
71:5a:52:c8:43:50:20:2c:78:9f:c3:c0:44:58:e9:48:76:b7:
c1:cd:d1:52:ed:d0:c3:33:0a:dc:8e:f9:42:15:c6:4e:56:7f:
75:8d:48:3f:0c:12:21:d0:37:1e:5e:35:5b:97:fc:57:14:ba:
42:37:f5:46:1b:83:d9:13:22:a1:05:e3:08:28:8e:63:81:b4:
c7:57:a3:bb:67:71:dd:0f:bf:4f:15:b7:61:59:08:1d:72:fb:
82:2b:71:72:af:26:f8:1f:89:24:65:3d:27:95:64:93:d9:e9:
a2:05:98:cf:7b:02:54:ac:f3:bc:0b:44:4e:85:90:3a:ae:cf:
d2:92:b6:72:e6:8e:66:97:c4:8c:d1:14:bc:fd:a4:57:aa:c7:
14:f1:6d:59:35:38:0f:55:71:cd:98:80:18:2e:2c:83:c9:22:
d5:1f:b4:36:ed:32:2c:2a:fb:92:60:e0:23:0f:83:a6:19:e9:
92:43:56:b5:79:4b:b9:b4:28:00:5d:ca:40:6a:ea:ab:c0:e1:
c1:46:c5:b2:cf:a9:92:b0:04:85:e2:2f:21:b0:ba:77:e5:0e:
0a:20:fa:42:5c:dc:51:d3:79:a8:46:21:c9:27:fc:a8:0a:51:
1e:b5:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org