Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/00824f21-41a1-3d38-b94e-739f8100fad2.roa
File: 00824f21-41a1-3d38-b94e-739f8100fad2.roa (raw, json)
Hash identifier: In0QkSZm/rFoRH8DL/sJjjVoqSknylnAsPfcyDA4YXA=
Subject key identifier: 73:7E:12:24:2C:05:79:37:6B:1A:CB:12:C1:94:30:95:A5:45:22:8B
Certificate issuer: /CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Certificate serial: 010D0C9F432858450B02ABD4DDF0A5078B71FC00
Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/00824f21-41a1-3d38-b94e-739f8100fad2.roa
Signing time: Wed 28 Feb 2024 16:25:21 +0000
ROA not before: Wed 28 Feb 2024 16:25:21 +0000
ROA not after: Tue 28 May 2024 15:25:21 +0000
asID: 20073
IP address blocks: 206.168.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:0b:02:ab:d4:dd:f0:a5:07:8b:71:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Validity
Not Before: Feb 28 16:25:21 2024 GMT
Not After : May 28 15:25:21 2024 GMT
Subject: CN=a20420d3-aa77-4130-a046-4af9bd4c2d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:46:13:66:f0:0f:52:b6:88:ba:82:43:13:
b2:df:c6:ae:84:ee:d7:23:c9:75:d8:47:71:55:ea:
ca:ce:89:06:66:a7:94:e6:00:ce:f7:c8:ea:be:9a:
5e:44:6c:2c:a4:17:0e:72:ff:a2:62:10:a5:13:42:
ba:99:05:5d:fe:e6:90:37:b2:8d:25:21:c2:9d:bb:
69:3f:9c:56:04:18:37:f7:8b:28:fe:85:06:67:09:
7c:24:f7:41:a7:e7:f4:da:e6:d0:bd:ae:0a:e0:d9:
b3:cb:41:47:89:39:0d:cb:7f:b7:5a:2f:c3:d1:46:
23:5f:15:0d:e6:7a:60:a0:51:14:7a:b2:b1:0d:4e:
1c:b8:a4:a8:7c:f6:ec:69:9e:19:44:8f:33:9d:81:
4d:7e:bf:12:a8:b9:d0:14:98:23:95:2f:96:58:79:
92:35:fb:d7:45:53:6a:ec:03:4b:8a:88:2a:63:d2:
1a:2c:56:7d:98:6a:21:d6:ca:46:92:e8:95:dc:6e:
88:96:00:70:3a:e7:1a:25:e6:30:64:ca:65:90:9c:
f3:38:cc:9d:fe:f9:ec:3c:d8:c7:5b:bd:49:fd:fd:
a9:cf:1b:7f:ee:47:fa:7d:9f:2c:9d:dc:1f:75:86:
fb:2c:4b:c6:e5:d0:12:47:85:72:cd:fd:58:58:58:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:12:24:2C:05:79:37:6B:1A:CB:12:C1:94:30:95:A5:45:22:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/00824f21-41a1-3d38-b94e-739f8100fad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl
X509v3 Authority Key Identifier:
keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:25:ba:0b:e4:7d:81:44:51:06:85:fe:0e:81:9b:d5:8e:f2:
74:f0:42:76:b4:37:20:d7:66:21:6b:e9:16:5c:f7:da:a4:d0:
4e:11:30:42:40:00:9d:0b:3f:7f:a4:8b:13:59:96:c1:69:48:
48:91:39:49:d9:b3:e4:ed:84:ee:fe:84:85:f6:24:7a:07:3b:
d9:e7:2c:c4:fb:60:2b:bc:35:0e:5b:b6:42:8d:2f:c9:b0:87:
52:bf:0a:8f:43:6e:d4:95:00:7d:4e:68:9e:7f:9d:d1:d0:b6:
97:04:28:2e:70:11:8f:fe:75:62:72:96:b7:e3:c2:c4:b3:bc:
a8:98:18:e8:29:58:06:08:06:77:d0:37:0c:75:66:6c:52:aa:
3c:d9:5c:6c:57:2c:ec:c4:69:c7:95:ae:d5:4d:c6:ee:57:f4:
51:8d:fe:49:b5:c6:0b:33:28:07:3d:fa:48:34:a8:ff:ea:3b:
18:70:2c:de:05:af:39:15:22:d1:26:5a:02:82:4e:3f:16:bb:
f5:d3:a3:5f:96:50:50:b9:e0:34:d7:d2:5c:15:d9:45:22:b5:
fa:d7:ca:60:f2:ac:70:d6:81:8c:d7:bb:1f:65:37:37:aa:7b:
44:40:92:5f:b6:30:4f:56:71:08:96:82:41:df:81:5c:16:b3:
ec:40:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org