Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa
File: fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa (raw, json)
Hash identifier: Dgt0k+k2/xca4DrM6h1jQ5Rf0gzd9Y2U2HMoJNGRXLQ=
Subject key identifier: 39:BE:A6:0C:24:49:98:F0:DC:F5:F1:49:34:E2:94:AE:C2:80:F6:7F
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328583A6FABAD658AB57B58F9A5AEC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa
Signing time: Wed 30 Sep 2020 04:00:00 +0000
ROA not before: Wed 30 Sep 2020 04:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 10747
IP address blocks: 170.133.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6f:ab:ad:65:8a:b5:7b:58:f9:a5:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Sep 30 04:00:00 2020 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=c0ca0a21-1995-4fca-8a2f-499b9feb8351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:c5:5a:ed:4f:3c:82:97:9e:48:02:16:61:
1a:1c:75:62:5b:55:b4:83:93:15:30:a2:7c:8e:12:
12:18:43:d8:b0:38:27:5c:6f:b8:57:10:78:ff:b1:
ce:e1:58:22:ca:a1:2c:57:fb:ec:73:1b:98:86:66:
ae:5c:94:c0:09:5c:09:eb:fe:fc:d7:3f:d6:b4:ef:
ba:39:78:87:33:ea:48:94:a2:3f:5d:76:b2:96:29:
af:60:4e:c8:96:fb:9b:ff:7e:20:a3:cd:38:46:2e:
48:d3:27:9a:6e:bd:6f:6c:5d:7b:3b:8e:4c:09:2d:
3f:cb:07:8a:ff:27:dd:55:10:6d:92:a3:d8:90:b7:
11:88:05:c3:22:b0:06:16:f4:10:7c:e5:4d:d2:00:
d4:73:9a:21:61:06:0e:01:3a:ab:6b:e6:2a:26:32:
50:ee:92:00:51:53:af:3b:06:1e:2c:80:25:f2:69:
8b:91:ad:ff:b2:94:b7:a8:a2:89:1f:47:1e:24:7a:
68:53:50:02:03:48:56:eb:a4:d4:01:eb:61:3d:d2:
e5:6e:4f:0b:7e:52:30:f6:24:50:84:46:fc:d8:b5:
f0:6f:29:1f:4d:7f:49:b2:00:d8:dc:e3:fb:6c:74:
af:18:4b:b6:6b:41:2a:0c:df:45:1e:a3:c2:f2:aa:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:A6:0C:24:49:98:F0:DC:F5:F1:49:34:E2:94:AE:C2:80:F6:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:45:e9:0f:0e:8e:8c:31:60:e6:4a:64:52:97:f0:96:0c:2f:
de:48:be:15:6f:34:04:71:e8:db:e6:ab:82:79:ff:75:25:78:
fa:7b:7a:09:65:a7:a7:be:91:00:3c:cc:90:e3:47:5d:82:28:
24:dc:dd:64:a1:bc:f2:08:23:08:82:30:21:4f:51:e4:9c:b3:
a9:ab:7c:34:a7:9b:ce:96:22:1c:61:52:54:7c:20:05:a5:1c:
cc:5c:88:31:7c:0b:3c:7e:e1:42:82:2f:ab:eb:d6:3f:1e:c1:
74:99:cb:55:ae:96:c7:53:36:f0:1e:90:a1:44:24:c1:8e:fe:
31:2a:6b:6e:c2:00:7b:8d:e7:6d:3b:60:53:6b:ae:02:ce:0b:
e3:a0:e1:f6:7d:a8:d5:46:d7:02:ef:bf:82:af:91:98:13:72:
99:e5:24:62:ea:11:3f:18:16:87:35:9f:84:11:03:97:22:9b:
c0:29:f6:79:2e:3b:2c:a4:11:68:06:61:6b:a0:4d:13:2c:7e:
71:5c:4f:7f:77:a9:63:e0:5e:bf:7b:41:7d:b6:18:57:38:4f:
91:80:ad:a8:e7:dd:d0:77:ac:34:b7:9a:6a:c2:af:6e:bb:4d:
82:e0:4e:c2:d3:2f:3d:5b:2f:27:c7:af:96:73:ed:c7:05:c8:
53:61:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:10 2024 by rpki-client on console-ams.rpki-client.org