Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/3c53312e-2e34-360b-b12a-1628cee393d5.roa
File: 3c53312e-2e34-360b-b12a-1628cee393d5.roa (raw, json)
Hash identifier: nyyT++21YFnGr2rH9Q3Fwrc9ZaaPlh7MlE5j+wEeiEc=
Subject key identifier: 2A:FF:C4:11:EC:A2:9B:FC:70:42:EB:90:62:70:9C:6D:3C:2B:78:AA
Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial: 010D0C9F432858435D173ACF5F2206AB5B452C80
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/3c53312e-2e34-360b-b12a-1628cee393d5.roa
Signing time: Wed 27 Sep 2023 16:29:11 +0000
ROA not before: Wed 27 Sep 2023 16:29:11 +0000
ROA not after: Tue 26 Dec 2023 17:29:11 +0000
asID: 16509
IP address blocks: 158.26.56.0/21 maxlen: 21
158.26.168.0/21 maxlen: 21
158.26.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5d:17:3a:cf:5f:22:06:ab:5b:45:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
Validity
Not Before: Sep 27 16:29:11 2023 GMT
Not After : Dec 26 17:29:11 2023 GMT
Subject: CN=a9c963f8-df4c-4369-9603-7accafa2e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:36:1a:7d:41:7d:4a:3e:9b:5d:55:56:28:
54:68:6a:1a:f9:4e:0a:62:71:0f:48:0b:73:9a:c6:
d6:82:ed:60:ae:0f:80:04:34:6f:02:f7:26:6e:36:
0a:9a:68:89:3a:a1:9f:04:2c:74:0e:fe:f8:56:00:
12:98:71:52:17:40:2a:c8:5d:72:0b:b1:b3:a1:e3:
01:72:d9:44:63:3f:81:c3:67:52:ef:ca:c0:2f:06:
9d:cf:f3:23:df:82:55:cb:1e:16:87:1d:8c:b4:26:
ae:ca:3a:b7:f9:19:5b:e0:7c:9b:25:58:ee:17:9e:
69:3d:5f:f7:93:34:eb:85:43:33:16:f1:93:cd:de:
96:8e:51:43:d1:fb:e1:bc:f6:e7:03:7b:c3:e8:e6:
c0:9b:c2:d3:dc:e9:c0:ac:e3:34:23:61:e1:0e:b6:
88:79:c6:84:52:3b:4a:3a:4e:ea:38:b5:13:14:7d:
42:4a:6e:40:ee:a6:54:87:59:62:ce:d2:32:62:84:
25:2f:69:f8:5f:b3:49:6b:52:37:30:a8:23:06:d9:
3e:f2:0f:fa:c7:97:72:4d:39:06:3b:0a:62:05:1d:
7e:ab:fc:7f:c3:96:e8:29:35:cf:fd:f3:e7:fb:7c:
87:a9:77:13:6c:1f:1b:b7:54:f6:07:60:ec:3c:e3:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:C4:11:EC:A2:9B:FC:70:42:EB:90:62:70:9C:6D:3C:2B:78:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/3c53312e-2e34-360b-b12a-1628cee393d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
X509v3 Authority Key Identifier:
keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.26.56.0/21
158.26.168.0/21
158.26.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:17:bb:48:78:4c:8e:c6:49:2c:5e:3b:f5:3e:24:f5:4a:ed:
92:4a:b5:51:8b:97:a8:a5:58:e7:16:a7:fb:6b:b1:0a:1e:fa:
9c:5d:7b:b5:de:45:f7:09:56:a6:94:a4:6f:69:ba:5f:fb:e5:
b2:f5:1d:c4:67:32:5d:68:a0:85:4a:db:19:be:86:22:79:f5:
b8:80:2d:a6:52:b3:fa:0a:94:c8:c9:10:86:8a:ea:c1:47:31:
e7:92:c6:14:98:4e:63:55:2e:1f:f4:12:3c:94:02:e5:bb:b9:
70:fa:89:66:4b:18:1b:9a:56:62:20:f8:7d:81:1d:c2:95:6a:
89:c2:55:74:28:49:09:20:88:45:54:7d:ae:92:d4:9b:84:fa:
d5:a7:45:00:56:55:af:6b:d7:f2:81:cd:83:58:49:f1:de:f2:
e8:90:90:9e:c8:fd:7b:fd:f4:dc:03:20:71:f0:64:b5:87:81:
b6:45:29:07:0b:66:8a:ee:f8:b1:34:51:0a:bc:76:e5:52:8e:
2f:5b:74:31:e3:03:3c:4f:63:24:19:d4:61:32:a0:95:ad:a5:
73:7e:72:44:9b:2d:e4:06:20:fe:67:16:40:8e:0e:5e:ce:8b:
51:41:5d:3a:2d:a6:6a:14:2c:11:5d:90:a5:88:0c:d5:42:72:
f4:2d:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org