Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5feacabe-4123-3f66-af54-f3aefd688f3f.roa
File: 5feacabe-4123-3f66-af54-f3aefd688f3f.roa (raw, json)
Hash identifier: 37NLnAhWNgTIIYHt+hAKo8flhXMMZpk2zaLYGmaPZnI=
Subject key identifier: 2C:9E:8B:2F:8C:BF:9F:4C:92:6C:E7:39:DE:26:73:69:BA:46:1D:74
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD363A24A75300008B30080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5feacabe-4123-3f66-af54-f3aefd688f3f.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397237
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:63:a2:4a:75:30:00:08:b3:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=297a4f86-fbdb-4948-bf3b-7cc904984e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:2f:9e:35:78:c6:b9:04:fa:46:ce:83:52:
95:f3:89:69:d2:6d:ce:18:23:ca:6f:60:1c:43:fd:
3c:33:bb:e8:d2:2b:80:50:c9:87:65:f2:54:8d:61:
fe:24:56:8d:64:8c:f4:ef:92:62:16:27:3b:6f:90:
a4:27:f9:cd:47:e8:0c:31:22:56:d7:66:bb:a5:2b:
60:f5:3b:13:06:4f:55:46:77:eb:9d:20:96:ba:4f:
92:6e:9a:4e:fb:a0:28:ac:c6:0c:9e:96:99:d9:f6:
87:6f:52:e7:b7:75:35:52:13:89:19:49:6e:87:7b:
ac:06:67:a8:39:b0:ef:5d:f3:e7:30:96:d0:16:df:
11:17:cc:fe:43:6d:65:e3:5f:15:06:e3:8c:11:cc:
65:f5:f3:0f:98:76:a7:0c:e6:b8:8f:3c:77:bb:28:
cc:bd:90:87:23:2e:bc:3f:8e:64:0e:3e:eb:0d:05:
58:64:54:18:b0:47:9b:53:89:b9:2b:f3:6a:f1:42:
d1:9f:a6:a7:34:1d:34:f5:40:c2:58:c1:a6:a0:e2:
11:bf:85:cc:c1:16:76:4a:73:0a:e4:94:f8:92:8e:
5d:b3:84:c9:7d:69:b5:86:a9:f8:13:66:52:d1:a1:
fb:0c:c9:78:cc:2f:e5:49:db:6d:e8:94:a9:c0:71:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:8B:2F:8C:BF:9F:4C:92:6C:E7:39:DE:26:73:69:BA:46:1D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5feacabe-4123-3f66-af54-f3aefd688f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:eb:ba:c6:6f:ea:97:3f:b0:cb:b6:05:81:4f:67:53:d4:5c:
15:e6:31:ab:18:88:9a:0e:ba:3a:91:6a:41:cb:af:ee:1a:11:
2c:2a:d4:04:e1:f1:94:0c:cc:cd:6d:82:d1:46:75:01:d3:9c:
b4:95:c2:72:92:cd:80:08:e7:75:8e:cf:e1:e1:be:8f:6c:6c:
01:ad:2b:92:31:f9:0e:ad:cb:10:11:f7:6c:62:62:e0:7d:50:
c1:c5:1f:d2:2c:29:b8:8e:14:05:9e:67:d4:a8:70:a2:6e:d0:
8c:67:81:cc:e7:a9:59:67:fc:7f:51:a9:f8:ef:aa:6c:88:77:
c8:f8:9a:92:84:76:d7:48:84:ab:3d:4f:c7:91:7e:e8:b0:91:
ef:33:e7:0f:d4:83:1b:5c:9b:d8:91:e1:16:d9:81:ad:0f:82:
61:9c:67:4a:3e:a9:85:a1:4b:b5:b8:0b:75:3b:28:18:64:bf:
75:28:bb:8b:ec:2b:ae:48:ee:72:d6:d4:d2:28:68:9e:7c:bc:
97:68:a3:7a:e2:e5:13:06:d6:fa:5e:13:b9:2a:cf:67:98:af:
0d:aa:8c:03:67:2f:14:2e:62:4e:0b:60:a0:0a:58:9b:ce:a9:
b6:a8:f7:73:47:a4:db:49:0e:2f:97:4d:4e:23:a7:29:70:e0:
78:60:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org