Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/7223673d-687d-32e0-a6d6-5c5f13117384.roa
File: 7223673d-687d-32e0-a6d6-5c5f13117384.roa (raw, json)
Hash identifier: hdl4uFbP52BhXfKPQ1x6gKvsevadlHG0Ys5qWsP1+a8=
Subject key identifier: E8:A9:1B:97:C7:C6:E1:B1:BC:A6:A2:9F:BD:4E:77:FA:E2:44:9D:AE
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7BF3260E97D3A4320894600
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/7223673d-687d-32e0-a6d6-5c5f13117384.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bf:32:60:e9:7d:3a:43:20:89:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=69603c0f-b917-4ff3-8069-62b63dc1fce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:7a:00:2a:ec:29:ec:f2:ec:b1:00:97:3c:
b1:bf:c8:a4:c2:6d:ca:0b:5a:f0:8c:40:cb:42:8c:
55:46:01:34:85:7e:68:06:d3:97:3f:16:a4:8e:fd:
62:d8:14:a0:0b:8e:ae:c6:52:33:40:8e:31:87:e3:
4c:e5:c9:f9:16:8a:7c:cd:ea:87:da:2a:78:5c:88:
f3:0b:1d:d1:0a:ce:43:3a:df:30:4d:76:fb:f8:27:
ba:34:35:b5:28:61:b1:e6:1a:d1:63:ff:a8:07:8e:
82:13:1a:6e:95:a7:67:45:34:66:9e:c8:a0:8e:11:
8a:67:29:59:2a:3c:0b:c1:f2:45:9e:f3:a2:f9:23:
8b:de:fa:b2:fa:91:b1:56:23:5d:b2:e4:5e:64:a8:
ed:5c:d9:d4:68:ef:cb:d6:a9:51:b0:22:1a:8a:bb:
b3:6e:09:17:ca:a1:1f:d1:b9:e5:6b:ce:7e:d7:ef:
84:c1:4c:75:0b:3f:eb:b4:ac:0d:5a:48:98:c5:9c:
3c:bf:3d:20:12:f1:18:19:cb:08:7b:ce:26:47:eb:
7a:45:78:18:99:8e:f3:81:c2:5c:68:30:23:36:29:
26:15:83:7b:63:42:cb:79:e5:4a:2e:ca:fe:64:fe:
c6:a4:3f:cd:b0:16:06:d2:38:40:57:a7:39:08:1d:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:1B:97:C7:C6:E1:B1:BC:A6:A2:9F:BD:4E:77:FA:E2:44:9D:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/7223673d-687d-32e0-a6d6-5c5f13117384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:80:8a:42:eb:01:39:0a:0e:e1:eb:32:04:1f:f5:30:16:9e:
ed:3f:e6:a0:7a:87:a1:84:83:7e:18:19:00:38:38:72:e0:e8:
a3:00:72:ef:7f:6e:68:17:40:f1:19:d8:7a:97:21:6c:3c:46:
ff:8e:a4:96:64:ec:db:b1:9a:df:6f:76:5e:c6:dd:dd:f4:4d:
ee:38:ae:52:0c:99:4d:10:e2:9e:3b:db:dd:29:10:b4:4c:b0:
d9:24:1b:1d:f1:b5:6b:15:8c:32:4f:57:8e:ed:74:dc:7d:ad:
f7:a7:4d:b0:2f:6d:92:2f:65:e6:44:f1:eb:da:02:9b:5b:19:
93:76:0f:71:b2:91:84:64:85:90:ad:aa:73:3e:6e:54:5c:e6:
45:23:4a:b9:8a:b7:17:9e:72:9f:57:18:bc:e6:99:af:06:97:
0f:a2:18:35:37:1c:10:c4:dd:6c:03:50:de:64:20:ad:6e:5d:
51:73:dc:61:5c:ca:4d:5c:75:61:41:be:d5:23:9e:62:d2:5c:
69:6d:2f:18:f1:c3:7f:7d:c0:16:77:1f:d5:09:74:9a:97:9b:
96:f7:a2:9c:24:ba:4d:4f:ce:a2:ce:51:8b:0d:a5:2e:ee:05:
6d:26:48:36:49:d8:b4:df:d5:7d:b1:77:cf:08:d5:5f:7e:bd:
9c:39:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org