Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/6a1fbfb5-897a-34a2-8c93-9ca3469a1f5f.roa
File: 6a1fbfb5-897a-34a2-8c93-9ca3469a1f5f.roa (raw, json)
Hash identifier: XUQfAF+hU2yxi71gfirXtuee05VYcrw3uHfa/lleEFI=
Subject key identifier: F2:12:1C:AB:B4:5D:AF:D6:5A:03:F8:16:49:46:60:E1:07:DA:D0:DD
Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial: 010D0C9F432858436DD9A5AB133FCA976BA82A80
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/6a1fbfb5-897a-34a2-8c93-9ca3469a1f5f.roa
Signing time: Tue 03 Oct 2023 16:33:50 +0000
ROA not before: Tue 03 Oct 2023 16:33:50 +0000
ROA not after: Mon 01 Jan 2024 17:33:50 +0000
asID: 397356
IP address blocks: 159.28.1.0/24 maxlen: 24
159.28.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:6d:d9:a5:ab:13:3f:ca:97:6b:a8:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Validity
Not Before: Oct 3 16:33:50 2023 GMT
Not After : Jan 1 17:33:50 2024 GMT
Subject: CN=a1231280-eea1-4f21-ba58-7bca4b259498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:9d:cc:cc:f4:75:2e:46:fd:7c:1d:a4:3d:
ba:1d:7f:e4:cb:43:5a:46:7a:b1:a8:45:25:55:a7:
74:f6:29:af:48:e0:c1:41:97:50:84:35:36:37:a6:
7f:ae:50:c3:c3:8a:f8:2e:f0:54:ae:fc:a0:e2:51:
16:5c:df:18:b4:e7:95:e2:bf:c2:27:93:84:9a:c1:
ce:50:ff:11:56:db:b4:55:4c:f4:3c:4b:95:3b:30:
c4:11:60:d8:9e:44:87:fa:f3:77:7a:c0:0b:16:7b:
dc:3d:a6:be:9b:54:43:1d:36:f3:d3:8e:f5:93:c5:
3c:0b:88:de:c4:e4:d1:7a:d0:6f:a6:c2:f6:9a:81:
37:7a:6c:70:fb:de:c4:b8:34:9c:ea:6a:cd:c7:fd:
ce:c5:7b:53:76:63:f5:bd:3b:e2:b5:33:98:ad:55:
93:50:21:a3:6e:9d:73:d5:b7:eb:3f:87:82:c8:c9:
3a:8a:67:22:8c:67:de:ca:4b:99:a3:13:d6:3f:32:
de:aa:c6:f7:ef:7a:a9:45:bd:f6:5d:84:d7:2a:d0:
46:d0:66:e9:cb:77:5d:d7:62:1f:5a:10:da:9f:c8:
07:17:e3:a7:c3:14:62:ae:d8:8f:de:1d:c3:c6:9a:
8b:04:03:99:1d:85:7a:92:97:e7:36:5f:44:23:15:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:1C:AB:B4:5D:AF:D6:5A:03:F8:16:49:46:60:E1:07:DA:D0:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/6a1fbfb5-897a-34a2-8c93-9ca3469a1f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
X509v3 Authority Key Identifier:
keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.28.1.0/24
159.28.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:bb:6a:f2:80:b4:8f:22:8c:cc:d8:cd:33:d7:b1:03:c0:2c:
67:20:b1:54:a2:3e:02:31:65:7a:4e:11:1f:f5:3f:8a:0d:0a:
5c:43:07:90:d9:44:80:e4:1e:97:71:c2:af:3b:c0:6f:5b:45:
98:dd:7f:2a:56:9f:25:9c:3a:48:40:c4:d3:71:0c:29:f8:18:
af:e7:0d:46:79:d3:88:52:26:e6:37:f3:e3:92:5a:5d:68:35:
e3:14:bb:98:07:b1:6b:3e:05:0b:6f:9b:c8:42:97:36:3f:af:
64:90:1a:9f:0c:34:cd:01:e4:2e:b7:92:10:82:8b:61:42:7d:
c6:b1:3b:c0:33:7c:e2:20:b5:c3:16:e9:e0:f9:c0:17:d0:1b:
2e:e4:91:e4:ee:c4:55:d0:7a:01:7b:02:b3:01:05:c3:c6:46:
44:78:e3:a2:20:a2:4a:12:ac:5b:46:cf:c6:7d:23:ce:9a:7b:
43:51:62:76:e2:43:93:f3:bc:0d:e1:08:34:a7:f1:e7:19:53:
5b:64:6a:86:a6:70:87:f3:e8:cc:ea:21:45:9d:1f:43:a0:83:
bd:b8:ca:c8:82:c7:93:fe:a7:91:e8:f5:6a:7f:e2:6c:87:40:
b1:6d:7f:c9:ea:4a:0f:db:e2:6c:3d:16:12:48:88:ff:54:c6:
c7:b3:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org