Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/3abd10df-774e-3238-842c-c62d5f459c55.roa
File: 3abd10df-774e-3238-842c-c62d5f459c55.roa (raw, json)
Hash identifier: m/45UeHmOKeJE9rWDPZzUvfXLxD9XNjxUrtkX/NL3ZM=
Subject key identifier: 0E:CD:DB:F7:AA:DD:BC:51:98:81:DB:02:C0:40:B9:9A:8A:E4:44:3B
Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial: 010D0C9F43285845174AE406C196D7410C2F2C40
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/3abd10df-774e-3238-842c-c62d5f459c55.roa
Signing time: Mon 04 Mar 2024 02:00:26 +0000
ROA not before: Mon 04 Mar 2024 02:00:26 +0000
ROA not after: Sun 02 Jun 2024 01:00:26 +0000
asID: 40676
IP address blocks: 199.91.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:17:4a:e4:06:c1:96:d7:41:0c:2f:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Validity
Not Before: Mar 4 02:00:26 2024 GMT
Not After : Jun 2 01:00:26 2024 GMT
Subject: CN=c1fc689a-07e5-4b5f-a406-8410d45e9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:16:45:f6:37:86:1e:7c:7a:09:c6:6c:15:
50:77:31:ad:1b:d0:a4:9d:cf:92:fe:50:41:79:13:
d3:3e:74:4f:52:d6:35:de:47:8d:70:37:06:eb:fa:
82:da:26:53:8f:47:6a:97:7c:ec:bd:75:04:a0:ae:
96:ec:cf:c1:8d:4a:61:5e:79:63:aa:5c:db:ab:d2:
da:6e:1e:46:9a:35:8c:40:d7:6f:b0:3e:ca:2a:20:
43:0c:63:97:7e:89:97:c5:b6:75:43:c4:4a:6d:2b:
e7:0b:56:87:c1:6a:15:65:8d:f0:6a:1f:69:71:5d:
80:e2:64:f9:2f:41:25:4f:22:1e:a1:bb:68:64:6c:
d3:7a:15:d0:41:39:c2:d9:9c:77:3c:68:77:8f:5b:
fb:2c:e3:8c:5c:e1:33:3a:9b:19:0a:6f:d2:d5:9a:
10:7f:30:82:13:92:58:4e:e1:59:d5:92:bb:cd:ba:
fc:f1:f3:b7:da:77:93:4e:43:b8:a2:3f:67:bb:b7:
73:31:f6:86:01:f6:93:0f:67:9d:9e:23:4d:86:fb:
9f:bd:43:63:d8:68:f1:c0:53:18:f4:ea:1c:4c:a1:
e2:38:5b:10:c5:85:de:b4:dd:7b:50:02:e4:07:07:
0a:ba:24:45:a0:46:30:c9:82:f3:30:06:f6:92:c6:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:DB:F7:AA:DD:BC:51:98:81:DB:02:C0:40:B9:9A:8A:E4:44:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/3abd10df-774e-3238-842c-c62d5f459c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
X509v3 Authority Key Identifier:
keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:3e:67:12:17:f8:66:05:61:0f:50:d7:32:e1:bc:b5:02:67:
e7:ff:ba:a1:54:02:cb:8f:62:6d:fd:76:79:79:d0:51:08:d0:
57:93:69:38:9c:c4:93:44:8d:b9:ec:c1:98:ce:b2:52:16:3d:
ec:26:2d:10:08:51:a3:2c:54:fe:54:87:21:f8:16:4d:65:d7:
2c:a2:8b:c2:17:b9:63:b1:16:2e:20:26:ff:2b:70:fe:04:03:
a0:81:55:d3:37:c6:e7:15:40:b8:f8:6d:7c:c7:49:c5:2c:90:
55:2b:12:0f:7d:30:f1:e8:fd:63:7e:24:63:6f:b6:7e:28:3b:
ce:97:70:0e:61:84:f0:b2:8d:4b:2e:54:95:ae:21:65:14:f9:
2c:19:1a:14:d7:4e:2e:5d:9a:d2:7d:1d:5f:61:90:36:fb:56:
eb:10:bd:e8:81:38:59:e0:c7:01:8e:ed:af:96:96:92:06:5d:
c5:e1:bf:2f:32:a1:8d:41:17:45:50:82:2a:d8:d3:d3:ec:24:
b2:12:c9:87:1b:7c:bf:b8:59:2c:a6:b2:5c:f2:d4:8e:d6:eb:
19:ee:03:a9:30:17:60:46:31:76:86:ef:79:24:6a:97:7b:b8:
ff:c8:15:33:87:e6:7a:4d:23:2d:54:82:cd:2e:e7:86:f5:e1:
75:3a:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org