Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/0045b8d4-6991-32e4-aa3d-62618a6a0ab8.roa
File: 0045b8d4-6991-32e4-aa3d-62618a6a0ab8.roa (raw, json)
Hash identifier: 0UyE0OpdXS339zUeg0zrv2n/T1XVIcRJZ8i5nWwfTLg=
Subject key identifier: 6B:ED:56:6D:DF:99:03:CD:87:43:7A:E4:B2:99:A6:03:93:FB:90:E7
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F43285843E0CDAB1906F791588AC85940
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/0045b8d4-6991-32e4-aa3d-62618a6a0ab8.roa
Signing time: Mon 13 Nov 2023 20:47:40 +0000
ROA not before: Mon 13 Nov 2023 20:47:40 +0000
ROA not after: Sun 11 Feb 2024 20:47:40 +0000
asID: 376
IP address blocks: 206.167.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e0:cd:ab:19:06:f7:91:58:8a:c8:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Nov 13 20:47:40 2023 GMT
Not After : Feb 11 20:47:40 2024 GMT
Subject: CN=1f31b5b2-5ee2-4dce-9e66-03a9eb87a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:4f:da:0a:4e:00:14:51:80:e1:2a:7f:62:
78:d8:47:a2:6d:ef:a1:42:b7:8b:82:5f:47:68:5d:
5f:3b:c2:de:d2:d4:0a:22:6a:de:d1:2c:98:55:3d:
4d:7e:23:64:00:2d:71:95:bd:67:40:00:d8:7c:c5:
7a:e3:39:27:6a:19:53:53:e7:59:4c:04:87:e7:f1:
55:1d:1b:91:69:64:b0:3f:79:c8:27:0b:0e:ba:83:
55:30:d6:49:f3:78:f1:d3:6d:3f:c8:bb:9d:25:a4:
6a:a3:4b:e2:8e:84:f8:69:2a:13:51:15:8f:d9:6e:
a8:a6:dc:d1:15:78:f2:5d:fe:ea:31:11:e0:a2:5f:
28:c4:f4:ac:96:ae:54:89:84:6e:0d:d5:f5:9a:f7:
be:eb:a3:ed:9f:56:4d:83:2f:25:31:9e:0c:9a:61:
ef:f8:e3:fe:9d:a7:e8:54:28:af:70:84:5a:4c:ef:
5e:68:56:5d:15:38:a0:45:25:b5:89:53:f6:cb:0a:
76:a0:5c:64:91:1d:9c:4d:eb:b0:ed:24:0f:64:2f:
ab:a0:54:f5:4b:6f:ff:dd:e9:5d:07:a2:07:3d:24:
39:27:c6:92:b8:79:a9:23:94:9b:0d:28:19:cc:48:
5b:7e:9e:dc:f0:c9:ce:80:73:34:5a:d8:70:9a:7b:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:56:6D:DF:99:03:CD:87:43:7A:E4:B2:99:A6:03:93:FB:90:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/0045b8d4-6991-32e4-aa3d-62618a6a0ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:5d:a1:fa:49:d8:31:4c:9f:ba:e4:53:7e:bb:db:46:4b:13:
1f:2a:9c:38:86:6b:e2:38:e7:dc:cb:96:ee:5b:ed:c5:36:a7:
00:fd:8e:e2:00:d2:17:41:73:d5:b9:3d:8c:8b:71:bf:5c:5e:
ad:3e:63:59:cd:fa:e0:0a:31:fc:fe:76:a4:c4:d3:79:fc:19:
e2:f2:16:45:23:b9:19:5e:37:21:a3:42:35:65:b7:84:6e:6d:
10:ec:f4:4f:7f:52:74:32:66:97:2c:47:69:0d:94:29:e9:94:
c9:6c:8b:0b:4e:c8:00:9b:f9:c7:70:df:39:20:8b:3b:6f:7d:
0d:99:9f:e0:0f:f6:dd:de:2b:e8:8d:bf:db:89:a0:dd:75:7a:
85:9f:e9:ed:1b:db:2d:da:cd:f9:88:c0:e3:b7:8d:04:bb:33:
3c:2d:f7:ca:cb:35:77:ee:52:4d:9b:e5:f6:43:d1:3f:a9:b3:
a3:06:38:b3:81:a8:95:b3:80:0a:e5:82:0d:3b:0b:12:59:fe:
6b:73:8d:4b:38:bc:8a:d6:0d:f6:4a:7a:b5:ac:2e:43:a4:5c:
c5:c6:4b:b2:d7:42:63:a1:80:df:49:53:fc:13:4a:38:79:e1:
58:83:79:e7:39:53:20:08:22:1c:74:21:9c:d7:d0:15:3b:a1:
e4:08:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org