Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7af8a9c-d7c0-3eea-8b8c-019e0841290e.roa
File: d7af8a9c-d7c0-3eea-8b8c-019e0841290e.roa (raw, json)
Hash identifier: ABPHPW0FTGVc3EwEJFvTKC6R9GZ4vau8YrScFnqqg6A=
Subject key identifier: EF:AE:7C:99:9E:B3:2B:C4:16:AA:D0:9E:2B:B6:DA:14:83:6C:E6:90
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BE1C58D948FA8205FE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7af8a9c-d7c0-3eea-8b8c-019e0841290e.roa
Signing time: Tue 26 Sep 2023 19:22:51 +0000
ROA not before: Tue 26 Sep 2023 19:22:51 +0000
ROA not after: Mon 25 Dec 2023 20:22:51 +0000
asID: 397219
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:be:1c:58:d9:48:fa:82:05:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:51 2023 GMT
Not After : Dec 25 20:22:51 2023 GMT
Subject: CN=726d1e3e-40c1-46d0-8277-07ae959fa7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:97:18:4e:4c:fa:54:74:16:18:e2:51:15:
f6:af:cc:a6:1d:83:2e:10:e5:ce:ca:93:2a:f1:aa:
2b:ff:ec:e6:35:9b:d7:eb:14:6c:e9:5b:9c:e3:10:
e1:40:9c:fe:f8:91:2d:b0:b6:e5:57:64:4b:0a:d8:
a9:1a:72:ec:aa:e5:c2:6b:08:e5:b8:d1:68:28:e9:
b4:e1:e6:f5:ea:f7:88:ee:16:11:d7:1e:2b:ad:ba:
b4:9f:a7:91:13:e1:28:10:3d:00:83:84:10:9b:70:
c6:32:b6:7e:a3:5d:bb:e5:08:5d:ac:f1:47:01:35:
34:f9:77:6c:b7:e7:6b:cd:60:69:c2:34:17:58:22:
0b:1c:1b:fb:f5:b7:86:9e:a9:02:b5:37:65:be:06:
59:7e:e0:69:0f:e5:06:a8:34:17:7b:29:92:15:93:
4b:15:6c:57:d6:ba:b7:84:5c:bd:ed:1a:0c:e0:68:
67:bc:c3:8e:61:0d:fe:07:28:74:3f:ff:79:90:3d:
70:00:c2:f4:b5:ae:42:76:8b:96:dc:30:ce:51:c6:
cf:cd:ed:ad:ff:35:3f:3a:bd:de:55:68:44:08:a9:
92:0f:e5:74:32:20:3c:bf:05:d0:4b:64:5e:d3:86:
f5:c2:b4:2d:6d:81:9c:89:fe:8f:0c:4c:14:fd:d4:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:7C:99:9E:B3:2B:C4:16:AA:D0:9E:2B:B6:DA:14:83:6C:E6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7af8a9c-d7c0-3eea-8b8c-019e0841290e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:fe:84:83:44:f7:7b:bd:6d:f7:0d:72:95:95:5f:e0:3d:58:
3a:c0:54:54:bf:c8:34:b8:2b:17:bd:45:ee:95:38:7c:e5:a2:
45:81:ef:8d:89:74:10:7d:63:71:da:07:79:55:4e:c5:22:a1:
c8:ab:19:67:6d:39:6d:31:b4:d8:83:4f:3e:1d:93:97:4c:a5:
19:31:18:a3:2e:95:95:be:d0:ca:d3:d4:4e:87:1e:39:60:04:
9e:b7:ea:0b:04:9e:23:d4:20:b3:06:21:b6:2e:56:09:eb:8c:
c3:25:cc:53:00:6b:c1:ba:e8:d4:3e:2d:96:8a:02:f9:b4:3d:
da:ed:b1:49:0d:05:c9:54:94:99:e2:81:10:5c:df:5c:4d:ed:
15:f2:23:50:78:e9:2a:0a:07:a6:4b:98:81:ee:0f:ec:0d:ae:
9c:87:1e:f1:4c:22:04:4d:f2:53:e6:3f:8f:11:eb:91:bc:cb:
1e:a7:3c:67:c5:3c:4d:62:74:4c:74:f6:55:4a:b1:2c:32:82:
10:2e:1e:ba:d9:7b:dc:9a:f7:da:03:1f:29:30:fa:46:24:43:
4e:ea:33:d2:fc:53:75:5d:e9:33:c2:53:35:0f:ef:01:02:c7:
6d:93:d6:76:79:47:47:b6:66:54:5b:2a:6e:62:06:9a:ec:74:
f8:f4:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org