Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/c6b38cc2-9c2c-3a73-904c-d023552851ca.roa
File: c6b38cc2-9c2c-3a73-904c-d023552851ca.roa (raw, json)
Hash identifier: wY3Vw+eMwxqCh3Kl82bcOXp+5vdAo6+zPCEa/ZiCt0E=
Subject key identifier: 5E:E9:E3:F8:7F:EA:EE:F2:FC:22:3E:2C:B4:26:6D:12:CB:B8:38:45
Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial: 010D0C9F4328583C8FF2D0462FD6BC1AFB66A480
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/c6b38cc2-9c2c-3a73-904c-d023552851ca.roa
Signing time: Tue 14 Sep 2021 04:00:00 +0000
ROA not before: Tue 14 Sep 2021 04:00:00 +0000
ROA not after: Sat 02 Apr 2022 04:00:00 +0000
asID: 1239
IP address blocks: 199.187.188.0/22 maxlen: 22
205.196.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8f:f2:d0:46:2f:d6:bc:1a:fb:66:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Validity
Not Before: Sep 14 04:00:00 2021 GMT
Not After : Apr 2 04:00:00 2022 GMT
Subject: CN=8049e46d-b4b5-4ae3-b19c-8dc6b36a4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:dd:25:56:56:75:41:92:1c:df:b9:8e:9c:
54:2b:46:d5:bd:8c:14:13:5b:2a:08:3e:75:1b:b7:
13:44:2a:78:e9:e5:c9:5b:db:33:3e:35:1c:76:a6:
b3:4f:64:69:c8:24:fe:13:17:04:ea:92:c0:95:2d:
76:c0:e4:2d:42:d8:3a:89:6b:49:91:35:3d:a3:09:
e3:bf:ea:dc:54:11:c1:c5:2e:6f:ea:d3:b7:07:04:
8a:dc:d9:29:8a:77:76:60:aa:2d:11:8f:52:85:af:
89:55:80:13:10:e1:c4:6c:35:3b:35:15:00:9b:a4:
83:af:9c:58:44:71:69:5d:31:90:7d:4f:25:9f:bc:
b3:a2:59:57:ff:09:15:76:da:94:09:f8:fc:4c:a6:
7e:5a:9f:1c:38:9a:72:d9:25:f2:f1:49:f1:b3:44:
2b:52:ce:00:de:eb:b8:a1:34:30:cb:f3:44:d4:20:
7e:ea:f0:da:6b:dd:96:a4:de:27:98:0c:9a:8d:63:
64:5e:76:0c:8c:fc:65:1d:ae:85:55:4f:f9:c5:b7:
27:bc:9b:fa:40:29:93:64:07:79:e8:60:87:38:fc:
92:2e:50:e4:d6:2d:fb:8a:14:86:27:23:bf:6a:9d:
7f:18:04:48:39:aa:55:ab:83:ad:0c:c5:25:55:f0:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:E3:F8:7F:EA:EE:F2:FC:22:3E:2C:B4:26:6D:12:CB:B8:38:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/c6b38cc2-9c2c-3a73-904c-d023552851ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
X509v3 Authority Key Identifier:
keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.188.0/22
205.196.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:22:46:f9:24:73:8e:f8:fd:fd:cc:ae:b8:72:21:11:3e:60:
74:99:e2:a1:4e:4f:0c:60:a2:63:76:a2:28:5e:5c:54:fb:d1:
3a:59:c2:bc:ad:a0:cf:ad:63:3f:93:bb:47:cc:15:77:20:bf:
29:88:d9:bd:a4:6b:ab:c0:06:ea:57:ca:a2:94:19:9f:ab:3b:
c0:f0:48:a1:f6:a4:15:0d:40:0e:c7:00:58:ba:3c:8a:ed:b0:
17:d9:d4:78:85:76:73:84:7a:63:20:e3:3c:68:c1:15:ed:cc:
f1:16:73:b5:32:f1:08:d7:9b:8c:00:33:09:3d:d0:57:0c:6e:
16:e1:ba:44:78:00:e8:14:cb:44:de:9f:6f:f8:88:b5:8e:4b:
0b:95:06:23:8d:e0:9c:5c:1d:f5:b2:88:dd:76:03:77:5a:58:
d1:cc:0e:fd:4f:23:71:6e:b4:29:56:25:2e:78:9b:12:e1:59:
dc:34:7e:d5:7f:fa:45:93:0e:4e:1c:9d:a2:ff:06:6a:71:a8:
e0:09:83:e7:42:a1:9a:4d:6e:b2:1f:6c:73:ad:ad:87:ac:2d:
53:e9:0e:ba:0e:c5:36:6b:12:81:12:5a:9c:57:f1:03:a2:cd:
91:fa:1f:d1:6b:6e:31:c5:2b:04:cb:ae:9f:24:af:14:5c:f3:
f8:47:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:41 2023 by rpki-client on console-ams.rpki-client.org