Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/278ea102-b82a-35a3-8817-de3926a5a9ab.roa
File: 278ea102-b82a-35a3-8817-de3926a5a9ab.roa (raw, json)
Hash identifier: VAFma6YZl4vFIE63POWllnfy1I83jjETLMZCea4wHFs=
Subject key identifier: 00:50:48:7C:8B:BB:B3:F9:46:D4:2A:3D:DF:DB:36:33:15:A8:C4:79
Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial: 010D0C9F43285843F460F50157D34F905BFCBD00
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/278ea102-b82a-35a3-8817-de3926a5a9ab.roa
Signing time: Mon 20 Nov 2023 21:04:48 +0000
ROA not before: Mon 20 Nov 2023 21:04:48 +0000
ROA not after: Sun 18 Feb 2024 21:04:48 +0000
asID: 12076
IP address blocks: 204.209.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f4:60:f5:01:57:d3:4f:90:5b:fc:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Validity
Not Before: Nov 20 21:04:48 2023 GMT
Not After : Feb 18 21:04:48 2024 GMT
Subject: CN=2c557a69-7d93-4c4a-82bc-0c804d0b673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:bf:0d:ff:b0:dd:ba:15:a9:cc:44:d4:b0:
42:34:a2:8b:13:52:db:3a:0e:85:4a:ab:ed:e3:86:
93:da:01:b5:43:42:e9:43:ae:46:c5:e1:d4:13:e5:
70:e5:af:59:be:3d:ef:87:11:11:65:58:30:7b:d4:
c7:96:13:61:bb:6f:08:1a:e2:dd:07:10:cc:5a:b6:
0f:51:ce:d0:cb:31:83:ef:f7:77:82:0f:dc:ff:c3:
4e:2c:39:e3:f9:20:5f:b5:47:2a:46:bd:6a:4a:92:
14:65:43:de:ef:ab:25:ec:7a:fe:a7:ad:09:bd:7f:
57:ed:36:73:ae:6b:06:d6:f5:df:c4:bf:66:fb:97:
3d:1a:48:30:94:24:13:8e:1b:9e:fb:6a:c9:85:4c:
70:e8:30:fa:d4:c8:24:78:86:ff:20:c7:37:64:88:
f2:72:02:72:46:99:8c:d9:d6:72:0c:a9:e4:da:84:
4c:1d:d0:d8:e8:10:43:1a:0e:a0:d0:55:b4:45:2e:
56:96:2c:4e:a7:92:0f:60:85:eb:61:e5:e5:d9:3a:
1e:5b:b0:58:84:fc:e6:f3:db:a4:41:9e:b8:b1:21:
6e:5b:1c:5f:e1:c3:96:c0:14:2d:89:52:5e:04:38:
ad:35:ce:20:cb:e3:78:7a:48:8d:52:74:51:1e:f1:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:50:48:7C:8B:BB:B3:F9:46:D4:2A:3D:DF:DB:36:33:15:A8:C4:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/278ea102-b82a-35a3-8817-de3926a5a9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
X509v3 Authority Key Identifier:
keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:cf:09:bf:94:ce:e4:f2:27:5c:62:8a:bf:82:15:4d:ec:04:
8b:04:36:63:a6:77:5b:56:1b:51:33:2c:b1:7d:a5:b9:75:88:
2e:0d:6f:0d:be:75:3a:da:0a:20:41:d9:87:eb:d1:b0:69:d6:
df:4d:8b:1b:c9:ee:a4:41:26:40:7b:4b:75:53:02:0e:eb:c3:
9e:80:95:6f:c3:98:e2:ed:b5:69:44:df:15:9d:14:11:7c:0a:
bd:0b:78:64:c9:fa:d1:b4:4f:30:33:8a:2b:5d:61:e8:4f:cf:
69:41:e8:c9:72:30:fb:c9:d6:dc:6d:e4:31:4c:3a:2f:0a:57:
d3:eb:c3:9d:1b:5f:d4:30:34:8e:ea:e5:b0:47:e2:86:06:f6:
7e:78:df:d8:74:fa:91:da:0a:b6:37:7f:89:88:65:aa:95:bf:
54:bd:a8:65:c5:eb:74:12:e7:db:51:2b:41:92:8b:b4:5e:26:
d6:ed:51:7b:83:34:73:07:90:b7:74:06:7a:15:9c:a0:f7:72:
cc:c4:e2:7c:fa:f7:5f:fc:fd:77:14:22:8b:ae:9b:52:37:62:
33:49:4b:b5:50:5f:53:58:63:3f:a6:18:a4:79:81:c2:b2:13:
8a:3a:6e:51:6e:6a:2e:bf:1d:0f:4c:43:85:03:f0:1f:ee:5d:
b9:3d:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org