Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/f0136535-1908-3011-845a-1283ddfca502.roa
File: f0136535-1908-3011-845a-1283ddfca502.roa (raw, json)
Hash identifier: Dux3CFtqvF8cDgg4HbaZBn2y+QcsLm0oQzpUGMZS1MY=
Subject key identifier: 11:AF:96:AB:E6:8B:BB:F0:82:34:9F:6F:34:EE:60:1E:33:60:C8:20
Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388
Certificate serial: 010D0C9F432858439506BB72D85960F2E5477580
Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/f0136535-1908-3011-845a-1283ddfca502.roa
Signing time: Tue 17 Oct 2023 17:21:12 +0000
ROA not before: Tue 17 Oct 2023 17:21:12 +0000
ROA not after: Mon 15 Jan 2024 18:21:12 +0000
asID: 13692
IP address blocks: 199.195.16.0/20 maxlen: 20
192.133.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:95:06:bb:72:d8:59:60:f2:e5:47:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388
Validity
Not Before: Oct 17 17:21:12 2023 GMT
Not After : Jan 15 18:21:12 2024 GMT
Subject: CN=3d8c7b4d-c31c-4aea-8794-2713eefa04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:73:27:39:e8:ad:bc:25:f6:0a:2a:3a:2f:
e5:6b:af:fb:47:bc:73:6c:8c:5e:54:7d:39:bf:d3:
1f:eb:c1:03:17:12:24:5d:64:c4:67:ca:58:20:d7:
cd:53:7b:71:70:8d:4a:fa:0c:e6:65:e2:2b:99:47:
65:95:ec:07:15:9b:5c:75:33:fd:84:a1:46:2a:61:
4f:84:e3:e9:02:a9:1a:d9:1f:82:0f:1c:b7:6f:ed:
a5:50:9e:9d:e5:f9:94:93:d2:fe:60:6d:0e:b7:09:
a0:06:42:22:f4:24:36:d7:5d:7e:e3:b8:70:6f:86:
93:f5:a8:c6:52:85:b2:bb:e4:15:43:1f:32:60:03:
c0:89:1f:46:db:61:14:93:fe:9d:1d:d5:fb:fb:27:
1f:79:d6:a6:f7:3d:51:35:dc:49:fe:15:87:ae:de:
f5:86:7a:12:a3:7c:1c:ea:32:3a:ca:48:53:ea:69:
97:29:68:dc:7f:1e:f4:32:5a:e5:ce:08:50:b3:e2:
6a:13:bd:f2:fc:0f:19:2a:c9:9b:cd:76:26:46:c3:
ab:e7:ed:e1:a6:10:6d:53:4f:1d:57:f7:db:4b:87:
87:aa:ca:34:bd:72:a6:03:53:e1:cb:5f:c3:41:56:
10:da:4b:b9:56:6d:ab:92:86:e2:7f:d8:0c:e2:b5:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:96:AB:E6:8B:BB:F0:82:34:9F:6F:34:EE:60:1E:33:60:C8:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/f0136535-1908-3011-845a-1283ddfca502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl
X509v3 Authority Key Identifier:
keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.23.0/24
199.195.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:1a:02:c1:bc:b3:06:3e:ff:7b:2d:3c:e4:d7:d9:fc:4e:1a:
22:93:38:45:97:bc:07:b9:57:da:db:83:0a:2f:c5:e3:f1:40:
ce:e7:1e:b5:0f:88:19:d4:08:7a:54:9e:af:b9:62:f9:58:a8:
80:07:13:74:9f:41:c8:86:7a:36:50:ee:ea:f1:c1:c9:2e:4e:
90:ac:49:a4:ae:d9:1d:ea:e2:4e:69:78:2d:20:f4:d3:82:91:
dc:e3:fb:f5:06:c8:f0:d9:5b:20:99:ec:e8:9a:91:a9:6d:31:
f7:00:90:e6:0c:9f:cf:45:18:dc:c1:c9:aa:6f:b3:54:b0:be:
30:12:81:40:fd:5f:c7:c1:db:13:54:1e:ec:60:46:e5:8e:f1:
e3:1e:ba:ef:6c:94:72:a1:ff:07:c9:7e:e9:40:b4:96:2a:9a:
e2:59:9c:1d:3c:fc:50:f9:6e:b7:62:54:16:ea:54:d1:d9:1f:
34:07:4c:b7:32:2e:e2:d2:92:4a:55:ea:e8:13:24:ac:63:8e:
26:d3:2d:23:6c:61:3b:7f:ae:18:b7:65:28:d4:70:00:f0:af:
ec:94:78:05:00:a0:81:22:da:e9:af:f0:55:a5:4e:30:d5:8f:
fd:ae:99:55:16:59:04:e9:07:6a:74:75:b2:07:e7:38:44:c5:
53:3a:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org