Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/d8ff3426-934e-373e-abd8-991a11abd6eb.roa
File: d8ff3426-934e-373e-abd8-991a11abd6eb.roa (raw, json)
Hash identifier: XuhBSRstd/hsO0432hFwakzv3LeGKqB9uV/upThlH10=
Subject key identifier: E3:51:0D:46:2B:67:A1:C2:86:67:1E:B3:77:8C:C2:FA:81:EB:DB:82
Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial: 010D0C9F4328583881DA41ECB557700FDDA4E1A0
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/d8ff3426-934e-373e-abd8-991a11abd6eb.roa
Signing time: Tue 05 Jan 2021 05:00:00 +0000
ROA not before: Tue 05 Jan 2021 05:00:00 +0000
ROA not after: Mon 10 Apr 2023 04:00:00 +0000
asID: 22552
IP address blocks: 199.87.232.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:81:da:41:ec:b5:57:70:0f:dd:a4:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Validity
Not Before: Jan 5 05:00:00 2021 GMT
Not After : Apr 10 04:00:00 2023 GMT
Subject: CN=2fcb0b15-d9ed-4052-b2c9-246b9379e408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:ca:b8:91:5c:f7:a0:32:fc:2a:9c:13:1b:
bb:4a:7c:33:ab:c1:7a:15:e6:87:be:b1:ac:d0:ee:
54:2b:fa:90:88:02:60:f4:09:f6:ae:fd:54:e6:b0:
b5:99:57:7a:6f:e0:06:4f:9f:64:86:e8:12:bd:cb:
7e:5a:98:33:54:6d:67:f5:d1:3c:dd:80:d1:4b:de:
67:75:8f:93:47:2f:80:2b:1c:29:73:ff:7d:c2:dc:
4d:6e:99:8b:94:f7:bf:40:2c:60:48:78:98:c4:9e:
3e:38:59:9c:df:d2:b0:65:ab:95:99:10:19:d7:a8:
c1:1f:20:11:14:2b:02:d6:99:2c:64:ff:60:ba:c7:
e9:ed:a6:d5:a5:69:ec:9a:6f:65:2c:23:b5:6b:13:
09:e8:dc:68:cd:a2:f8:6d:24:ef:fe:6a:c6:93:17:
c6:de:b1:d2:1f:6f:ef:e0:e9:97:71:ca:4b:2d:ad:
11:51:74:2e:68:76:ea:80:b8:bb:9e:e2:2b:df:81:
29:c1:01:b6:69:d6:75:fb:23:3e:21:03:16:fa:68:
38:a2:99:ad:c4:9f:62:03:e5:2f:90:1d:55:f6:e8:
67:df:51:10:47:81:b3:86:69:60:91:47:c3:af:cc:
3c:6a:08:60:ef:59:fb:19:f3:bd:6c:6c:21:2c:32:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:0D:46:2B:67:A1:C2:86:67:1E:B3:77:8C:C2:FA:81:EB:DB:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/d8ff3426-934e-373e-abd8-991a11abd6eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl
X509v3 Authority Key Identifier:
keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:cb:d4:54:48:f6:d3:96:4b:e5:d0:ec:ae:2e:24:fc:2e:46:
02:99:d7:fc:ab:14:0e:d9:2d:0c:5f:f4:a7:a4:00:64:98:e0:
a6:d3:a5:81:62:c9:53:04:fe:41:48:39:71:79:81:52:85:14:
ae:fe:6c:fb:af:c1:8e:d3:73:a0:59:db:b6:61:fc:b9:ba:b5:
0d:52:4a:ef:ef:5d:06:bd:ee:43:c7:d6:b4:99:5a:7a:af:dc:
e9:0e:95:5f:b2:23:7e:16:1c:8c:29:a3:09:12:ce:ff:a7:a9:
a1:8b:cf:e6:20:c2:61:4b:67:e1:24:a4:f5:b2:2c:db:56:d4:
77:72:2a:6c:c6:1b:de:29:09:92:e3:04:65:e1:1b:8e:b0:99:
1c:4d:9b:ec:7b:71:67:ae:27:48:40:a8:db:a1:12:1c:46:cb:
1d:6a:2c:78:a9:69:ac:27:cf:ae:87:20:3d:1a:15:07:6d:de:
cc:00:e6:99:29:88:1f:34:5c:fb:92:92:a5:49:25:62:d2:d2:
96:4c:a0:9d:93:68:14:16:51:31:fc:76:d6:ed:d8:68:7e:43:
36:1c:54:29:5f:81:c3:12:d3:dd:49:ac:94:f9:61:23:a2:b7:
ec:c7:a6:1d:4a:36:dd:4d:3d:9f:63:09:0a:02:83:cc:c7:b1:
fa:40:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:32 2024 by rpki-client on console-ams.rpki-client.org