Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1af380db-4503-3566-991e-7295a17b7578.roa
File: 1af380db-4503-3566-991e-7295a17b7578.roa (raw, json)
Hash identifier: Sc67MKdmpPLdurF25OTELCerJUXEwT1u271+VeCIlq4=
Subject key identifier: B6:5C:BF:C0:60:A2:5A:B4:6B:4E:53:49:FD:D5:D8:A6:12:77:36:E9
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F4328583C4219C1547F355B5CC5092440
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1af380db-4503-3566-991e-7295a17b7578.roa
Signing time: Tue 14 Dec 2021 05:00:00 +0000
ROA not before: Tue 14 Dec 2021 05:00:00 +0000
ROA not after: Sun 17 Mar 2024 04:00:00 +0000
asID: 36040
IP address blocks: 207.126.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:42:19:c1:54:7f:35:5b:5c:c5:09:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Dec 14 05:00:00 2021 GMT
Not After : Mar 17 04:00:00 2024 GMT
Subject: CN=1a2adf92-05ef-4f60-898f-e3d67812f2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:ea:cf:4a:d0:42:ba:19:0c:69:3b:0d:29:
29:e6:ff:fa:3a:f4:a4:91:d5:56:86:2d:71:3c:b2:
ac:05:e2:35:16:bd:f8:64:51:4b:de:00:10:d1:2e:
d1:32:e4:95:da:ea:9c:9f:9c:bc:fb:d7:ac:52:81:
35:d0:8c:1b:29:8f:dc:0b:cd:bd:b7:27:69:3a:52:
5b:5c:78:1d:87:49:ee:e5:42:33:c7:81:6b:d4:62:
ce:9f:3b:d4:19:5d:28:d2:d1:a6:56:fb:a2:86:34:
a3:af:eb:12:28:1e:39:0c:13:83:c3:b2:ad:61:8f:
bc:e4:c5:20:3c:82:f7:51:39:cd:26:93:d4:d6:30:
9e:a3:9d:5b:e2:60:f2:64:3e:2c:24:04:88:47:1d:
36:02:97:47:95:a5:85:1e:65:cc:7c:48:15:d2:3b:
af:13:e4:56:fd:43:9c:06:c0:a6:5d:26:7d:54:25:
75:ad:4e:b1:6e:f8:86:f2:45:88:55:7e:75:12:3d:
ce:15:e7:09:ca:6a:ef:73:de:c9:2e:1f:e5:8c:32:
7d:88:b9:17:26:21:3a:a3:d9:b1:33:df:c3:24:90:
bb:b1:bd:36:33:8c:37:73:35:3d:5e:b9:a8:44:5f:
04:f7:d5:14:91:7a:01:9b:72:a2:41:c7:98:4a:80:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:BF:C0:60:A2:5A:B4:6B:4E:53:49:FD:D5:D8:A6:12:77:36:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1af380db-4503-3566-991e-7295a17b7578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:31:d1:49:6d:24:7a:77:81:f6:e7:8b:79:77:51:b2:00:d3:
24:6b:e8:fc:49:29:46:32:61:3f:2c:23:28:30:ea:26:50:3d:
20:63:44:67:12:0f:30:3f:83:b5:96:e3:c9:7a:c6:92:55:e3:
41:f6:63:03:6b:57:ec:11:d9:54:ff:b0:4c:9c:b0:df:82:b9:
be:80:a7:c5:6e:2b:ea:5c:27:f7:55:22:1c:1f:2a:5d:88:f2:
7b:9d:5c:4b:f5:3e:69:86:32:c7:23:cf:c4:0e:ba:a0:cd:97:
ec:f6:2a:56:08:b9:7a:be:30:ce:71:d6:dd:cd:11:3f:8e:be:
1b:21:62:2e:2a:69:34:fb:c0:bd:9b:43:e8:82:48:30:3a:f0:
7c:e4:3e:f8:5c:7d:da:b8:9b:90:ca:de:68:19:e2:3b:e4:72:
5f:dd:cd:d8:d9:53:e6:ed:12:69:e7:f1:96:be:88:6c:03:07:
72:a6:fa:79:01:27:9e:0d:f2:2f:ef:0f:fb:b5:d3:8c:af:8d:
10:95:eb:55:3c:ce:8f:4c:c6:0e:2d:7a:93:24:ab:dd:b0:e2:
07:43:ad:b5:de:d6:d6:23:eb:b2:ad:99:8f:2f:47:69:fc:5a:
c5:b6:09:d8:d4:8e:d0:2b:d4:23:64:df:59:a9:c3:cc:43:3f:
1c:b1:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 07:49:21 2024 by rpki-client on console-ams.rpki-client.org