Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/024afd9f-d6cf-3c1d-9f9c-f9759189d7f0.roa
File: 024afd9f-d6cf-3c1d-9f9c-f9759189d7f0.roa (raw, json)
Hash identifier: UDMj+1xKGX8aU97zdCHiUDChumDXsr8J9oEUTkodjio=
Subject key identifier: B8:B4:1C:CE:E1:71:DD:27:18:AA:01:42:41:05:3A:FF:73:D8:CD:03
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285841E42B07B75ACA87EBBD600000
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/024afd9f-d6cf-3c1d-9f9c-f9759189d7f0.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Thu 01 Jun 2023 00:50:25 +0000
asID: 29889
IP address blocks: 209.9.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2b:07:b7:5a:ca:87:eb:bd:60:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Jun 1 00:50:25 2023 GMT
Subject: CN=74ed7871-217c-4585-8f61-06b737097475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:cb:f4:36:3c:5b:d0:4a:89:e0:41:10:05:
85:d4:70:48:e1:04:9e:8f:6e:c9:13:d3:18:3a:90:
30:ec:06:57:6d:7f:9f:75:77:2f:fa:78:aa:dd:33:
c0:29:f2:fe:38:2a:66:df:5f:9f:28:fe:ce:05:c4:
b6:19:21:6e:c1:12:e4:4c:bc:ef:a0:2b:5f:e7:8a:
dd:71:5a:f8:6a:23:ff:c4:d4:68:23:d1:fe:0f:b7:
53:53:ee:87:5c:ec:44:d2:82:48:08:33:ba:40:57:
7f:88:c5:8e:c5:1a:55:8b:7b:22:c7:5f:2f:af:22:
dc:5b:f3:83:6a:fd:50:3c:14:b1:2e:d0:e5:81:d3:
c3:c8:df:2b:35:55:91:dc:52:93:31:a6:aa:f6:3a:
d7:f4:d6:b7:0b:d6:da:9e:95:b3:77:50:f8:b0:7f:
8e:61:cb:df:2c:a5:be:9a:90:b9:51:aa:90:a4:96:
61:05:97:75:3c:fc:a5:3d:4b:05:10:32:54:1c:64:
3e:11:9d:b3:43:d3:42:65:93:5e:7f:4d:35:bd:a9:
b6:82:7d:02:cb:e7:47:0d:a1:80:2a:be:c5:eb:d1:
5a:4a:cb:0a:6f:c1:8b:8a:43:72:60:d4:c3:c8:3f:
9e:2e:be:8b:04:a4:43:98:c2:31:5c:e5:1b:c2:ae:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B4:1C:CE:E1:71:DD:27:18:AA:01:42:41:05:3A:FF:73:D8:CD:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/024afd9f-d6cf-3c1d-9f9c-f9759189d7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:d3:fd:08:20:d7:a8:aa:5d:41:8e:60:e1:9e:9f:84:71:
4d:80:41:bd:6d:9d:bc:3b:88:f2:f4:b3:9f:6e:02:dd:5a:30:
02:cf:4b:50:97:73:61:fa:3b:4e:ad:28:80:47:c1:9b:42:29:
75:81:5a:05:0f:4f:56:38:b5:36:e6:09:44:56:b6:67:62:a5:
a7:83:54:36:33:fa:c7:42:6c:a5:c9:73:66:fe:8e:9c:6c:86:
0f:bc:83:e7:d0:2a:12:1a:b8:52:17:37:c0:c1:4c:8e:be:3e:
ca:ca:47:2e:17:f1:4b:cc:22:4d:15:20:b9:12:5f:d0:a9:fc:
27:25:20:d6:b9:f2:a4:92:ec:93:fa:a1:72:b5:27:e6:12:0a:
bc:b4:75:3f:53:6f:4e:74:b4:1a:fc:58:8b:f7:d2:f5:54:ac:
a9:b4:74:d0:6e:50:ab:13:77:57:af:77:40:be:98:b1:9f:75:
37:36:57:03:2b:4e:8a:19:e7:de:24:9a:75:12:91:4f:26:33:
de:ff:29:bd:cc:4b:71:e1:bf:d4:01:fd:87:fb:3d:fb:bf:a1:
67:66:ed:76:a4:9e:d2:7d:41:5c:59:65:c7:73:85:b6:e3:56:
bd:da:a5:05:fb:92:cf:23:36:06:d8:44:56:43:de:24:12:55:
4b:af:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:52 2023 by rpki-client on console-fra.rpki-client.org