Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d88c127b-4a67-3b3e-a2f6-9050559ee7b2.roa
File: d88c127b-4a67-3b3e-a2f6-9050559ee7b2.roa (raw, json)
Hash identifier: sKlBwHH5tS1j74cPPljX960JmMMakEKX3RufA+CYfgg=
Subject key identifier: 7F:AC:9B:D4:FC:68:42:F6:D3:D7:C6:AC:F5:88:34:67:C6:B4:F3:63
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F43285844D01A6B628EAF92E39F49C300
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d88c127b-4a67-3b3e-a2f6-9050559ee7b2.roa
Signing time: Wed 07 Feb 2024 14:00:29 +0000
ROA not before: Wed 07 Feb 2024 14:00:29 +0000
ROA not after: Tue 07 May 2024 13:00:29 +0000
asID: 49348
IP address blocks: 199.119.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d0:1a:6b:62:8e:af:92:e3:9f:49:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Feb 7 14:00:29 2024 GMT
Not After : May 7 13:00:29 2024 GMT
Subject: CN=b4e35445-58de-436b-b800-aea28999b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:31:17:16:62:26:52:af:d0:c2:68:c7:8e:
48:35:e9:a8:ed:32:7e:63:2f:4d:fd:e6:f5:0e:8f:
d2:84:1b:77:1f:31:93:b7:31:76:ad:97:60:b5:6b:
8b:50:8a:9e:13:0c:57:f8:24:bd:0e:b9:76:79:3c:
b1:1d:89:e7:34:c7:19:db:0e:39:37:18:f2:5c:3b:
78:dc:6c:ca:f3:ce:c4:80:6e:5e:35:56:94:ed:d8:
5c:65:51:d9:3e:06:29:cd:9a:94:a4:c0:74:db:bc:
56:fa:55:95:65:df:bb:ba:7f:f8:ed:4c:8b:28:86:
22:40:f5:c8:fb:20:6c:a3:1c:05:0d:c1:0c:a0:65:
3b:a5:ed:9f:2d:ff:12:df:af:e2:eb:86:19:fc:3d:
ce:a5:6d:4a:d4:43:39:78:0d:2d:7d:40:af:f4:b5:
70:ee:52:a3:a7:13:e7:6e:dd:a8:20:db:70:fc:0e:
d1:70:35:0d:ba:53:a9:03:47:76:cb:52:0a:54:57:
87:b1:9c:ff:04:88:6f:e1:18:bb:d6:d3:3b:01:1e:
45:d5:ec:6e:80:40:e8:31:9a:e7:cf:79:96:78:59:
85:86:65:e6:85:dc:11:1f:ce:d2:45:8f:5a:9a:d2:
7d:24:6a:3b:c5:5c:9d:87:16:ea:71:19:30:37:e9:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:9B:D4:FC:68:42:F6:D3:D7:C6:AC:F5:88:34:67:C6:B4:F3:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d88c127b-4a67-3b3e-a2f6-9050559ee7b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ba:b6:e9:b5:41:2d:5e:f0:60:7c:fc:5c:28:05:c1:d8:9c:
fa:7d:31:80:44:67:07:0f:66:a3:a6:ba:1f:df:81:f9:17:3e:
8d:f0:ca:8a:31:91:93:25:06:a7:0b:95:89:1a:cd:be:c4:a6:
6c:d8:ba:2c:82:fe:95:e3:42:60:3c:38:d6:44:ad:55:0a:1c:
d1:89:fc:93:50:4b:e2:bb:93:ce:df:4e:fd:89:9a:ab:b2:8b:
48:46:94:54:1a:48:76:ad:89:a1:b6:15:fe:37:d1:5d:f5:e8:
ce:14:28:5c:7b:a9:c9:1b:c6:b4:23:30:8b:b8:f7:79:31:44:
c5:35:f7:d6:ac:5c:9e:4e:f8:80:64:23:5a:2c:bd:eb:a5:75:
9d:f7:c5:89:16:61:e0:83:61:77:b3:e4:31:c3:f8:71:9c:04:
be:8d:66:77:c2:6e:68:60:ac:de:6e:ee:a3:5b:7d:aa:d5:33:
a9:c5:76:79:25:2a:75:e6:e2:b4:35:57:58:49:f2:28:ad:ef:
4f:79:58:a8:4e:12:fa:0b:4b:4e:2c:b3:fd:d7:5a:ec:5d:53:
2a:c7:50:ba:eb:ef:07:18:af:14:b8:51:46:ca:31:0f:5a:a8:
71:ca:f6:7a:8f:af:a6:64:4a:d5:0a:e7:77:41:98:b7:06:77:
00:7f:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org