Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa
File: 2ee01639-0f27-3709-bb78-e8972913ef86.roa (raw, json)
Hash identifier: 7WziL+Hv8WdRVkUTi2dkii6DcUQJUJkni01N3ldw/NA=
Subject key identifier: E2:0C:59:1E:F2:2D:45:AF:78:74:74:FC:65:63:A1:34:BF:8F:E4:3B
Certificate issuer: /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial: 010D0C9F4328583FD7D7F30921B04C4E02D4BA00
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa
Signing time: Tue 08 Nov 2022 16:24:57 +0000
ROA not before: Tue 08 Nov 2022 16:24:57 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 204968
IP address blocks: 216.252.145.0/24 maxlen: 24
216.252.146.0/24 maxlen: 24
216.252.147.0/24 maxlen: 24
216.252.148.0/24 maxlen: 24
216.252.149.0/24 maxlen: 24
216.252.150.0/24 maxlen: 24
216.252.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d7:d7:f3:09:21:b0:4c:4e:02:d4:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Validity
Not Before: Nov 8 16:24:57 2022 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=7ac33895-75c4-4fb9-865f-d1fefdcaec86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:cf:5d:b6:0e:cf:2c:a7:24:7b:d0:a9:f3:
4c:df:52:2c:4e:cb:5f:4d:5d:b6:12:84:0e:d4:d0:
d8:79:67:a2:57:dd:0c:de:c8:40:cb:3d:5f:bc:96:
fe:d3:cc:82:a1:89:a1:ab:c8:3b:08:ec:f6:10:f0:
39:03:2d:1a:60:d7:02:36:04:52:73:15:2a:09:6a:
75:2a:67:3d:0c:1d:42:cd:60:9a:13:97:ad:42:0e:
cb:bd:98:4d:d2:5f:0d:1e:ba:29:9c:88:30:4d:53:
51:32:da:0c:07:c1:d0:e8:7a:f7:39:36:e0:fe:43:
fd:41:b4:8d:93:59:73:92:a5:5e:01:39:ad:f6:63:
23:5c:87:9e:b4:6f:4b:dd:0b:63:86:55:c6:7a:82:
db:17:57:71:61:40:69:b5:8f:90:c0:ef:91:15:55:
ab:33:52:13:23:77:77:50:16:36:de:15:88:98:59:
98:63:d3:06:48:da:c2:81:bd:b2:b7:5d:f5:13:53:
11:bc:22:94:f5:9a:be:fd:fc:e5:b1:8a:19:68:46:
ff:cf:72:f4:f3:25:9b:4b:6a:04:d1:d0:be:db:10:
b7:a5:76:97:db:0d:15:0f:fd:ae:97:61:cd:d4:26:
b1:60:f7:cc:cc:0f:3b:45:15:eb:53:72:be:fa:f8:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:59:1E:F2:2D:45:AF:78:74:74:FC:65:63:A1:34:BF:8F:E4:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
X509v3 Authority Key Identifier:
keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.145.0-216.252.151.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:8f:2c:52:8f:f6:29:71:a8:b9:d1:34:23:8d:b2:e0:94:40:
e1:a6:2e:4e:8e:69:fc:a1:87:fe:af:f0:b4:a5:c8:e0:ff:09:
53:01:81:15:c4:f9:0e:e2:3b:c0:a1:d2:9a:f7:c7:55:02:b3:
a7:61:3c:cf:a0:ff:28:b8:b8:e4:32:98:6a:4b:a9:af:99:75:
b6:92:f2:92:38:97:7b:96:81:f9:16:6e:55:97:0d:3d:bb:79:
b1:80:eb:00:8c:ed:a6:7c:f2:03:71:3c:a2:e1:8f:ae:d8:14:
e5:ea:4c:7d:93:ec:54:10:5f:e5:3e:b4:72:38:9c:be:df:4e:
6d:ba:b5:6b:b7:2b:cd:fe:94:88:20:09:16:49:04:ab:f2:42:
d6:1e:af:8a:0a:8d:b0:a5:78:10:a6:dd:17:3d:d0:5b:1c:4c:
fc:ff:9e:b5:5c:dd:1e:a0:ea:f6:7f:a1:c5:9b:91:87:fe:e6:
a5:74:80:93:b0:6e:63:9a:27:2b:74:00:47:0f:8f:dc:41:dd:
8c:21:3c:eb:a3:c8:d3:97:16:72:04:c6:45:4d:92:96:4a:b7:
b7:08:1d:f1:3d:0d:c8:8c:69:52:fb:ff:3a:01:52:3f:f9:42:
12:38:bf:c5:77:5f:1a:00:9a:22:cd:e9:d8:f6:50:2f:70:68:
f6:3a:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:22 2023 by rpki-client on console-fra.rpki-client.org