Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa
File: aff2bb6a-aa2a-3202-a216-cf7b987522da.roa (raw, json)
Hash identifier: Oox8z5CfPpYlVYWqx8WmV7aFTgO8Ks1xaEzWFI/KxGE=
Subject key identifier: 77:BF:1B:41:64:EE:D4:21:42:A3:04:78:7E:54:ED:A2:A1:A6:BF:DD
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858430624753E8DA4B1675717AD00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa
Signing time: Sun 27 Aug 2023 13:00:24 +0000
ROA not before: Sun 27 Aug 2023 13:00:24 +0000
ROA not after: Sat 25 Nov 2023 14:00:24 +0000
asID: 27602
IP address blocks: 198.145.72.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:06:24:75:3e:8d:a4:b1:67:57:17:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Aug 27 13:00:24 2023 GMT
Not After : Nov 25 14:00:24 2023 GMT
Subject: CN=c2c1c58e-5bb2-4b29-a20c-ddb7e24ab5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:2e:f8:02:a1:4e:4b:9a:e5:f0:30:15:3e:
b5:b1:59:09:3b:7a:40:fc:f1:90:f9:d0:b2:60:ec:
4f:46:a2:05:af:e4:f3:4c:46:ff:25:a6:15:fb:b6:
5b:8f:f6:7a:79:94:d8:83:69:a2:99:92:15:8b:1f:
2f:cb:b6:e5:1a:52:71:9f:86:8d:f5:c5:49:6a:eb:
49:65:23:8f:d7:43:42:01:4f:f1:1c:04:36:9a:7e:
7d:c0:bd:ba:bb:ce:4e:6c:7b:48:d1:54:6e:67:fa:
df:2a:f6:04:4b:e9:56:28:b3:99:7a:f5:f8:4c:85:
60:2e:44:ca:a6:5e:ae:58:6f:82:01:43:15:4b:b2:
b9:76:90:62:2a:34:9d:ff:2b:9e:e3:53:96:43:25:
76:dd:97:5e:b4:7a:10:5c:b7:41:70:e2:d6:d5:69:
00:8c:cf:f9:73:6f:a1:3e:dd:2c:e7:bb:9b:5f:d6:
be:77:c6:0c:b3:2c:f3:ac:29:d1:f5:55:55:dd:86:
29:13:ec:31:80:ac:1d:03:ca:9b:51:20:ce:c2:f7:
ba:bd:dd:f0:24:f6:e3:e5:1b:24:5e:b1:06:a8:14:
4b:51:4f:af:c9:d1:38:97:15:dc:ff:2a:69:ee:48:
28:27:01:ac:eb:9f:b0:71:ea:1c:33:dd:fd:54:c3:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:1B:41:64:EE:D4:21:42:A3:04:78:7E:54:ED:A2:A1:A6:BF:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:c6:88:8f:77:d4:b3:89:f1:a4:9c:0d:17:5a:15:5f:50:51:
b7:71:00:9c:db:89:e9:17:82:12:db:ad:2a:54:0f:e2:8a:fa:
e4:fe:a8:8e:59:0b:c2:ce:f9:5d:5e:03:75:57:9d:17:63:61:
9f:ec:75:a0:87:7d:76:9f:99:80:a3:c6:24:86:14:53:2b:63:
fe:ac:2c:32:51:0c:f3:66:44:32:e8:d6:d9:16:10:98:79:80:
41:2a:22:90:54:85:5e:2f:58:86:03:1d:36:84:4d:87:3e:06:
09:6e:42:ba:dc:86:6f:f9:f9:e5:4b:14:cf:a7:3d:11:11:70:
35:08:03:0a:e7:68:48:d6:25:22:96:05:85:49:31:de:c0:8a:
24:0c:e7:51:59:0b:a0:32:0c:8b:03:56:87:6a:e2:9c:f6:76:
c9:a7:52:92:05:af:35:72:df:78:72:9b:41:75:cc:15:3f:46:
99:f9:f6:e1:93:e7:40:c0:c7:68:68:12:43:05:e5:12:3f:d9:
d1:92:3d:16:38:2f:65:eb:d9:00:2a:aa:dc:77:6c:16:c7:84:
49:0d:b8:55:9a:4d:55:5f:48:6d:28:af:51:4a:b6:8a:73:8b:
55:e5:e8:44:8e:ba:12:b1:91:1c:78:75:4e:10:cc:2e:90:99:
34:d5:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org