Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa
File: 41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa (raw, json)
Hash identifier: 1W1uhql1syjbVMZt6QkRmyXV5PyLmmVG/ZqSH/5fywE=
Subject key identifier: 3E:C6:D2:A3:30:68:40:BD:DE:83:E7:FA:B3:C7:7C:B1:9B:BA:43:A3
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F43285844F0354390407367F6488A8480
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa
Signing time: Mon 19 Feb 2024 02:00:25 +0000
ROA not before: Mon 19 Feb 2024 02:00:25 +0000
ROA not after: Sun 19 May 2024 01:00:25 +0000
asID: 46562
IP address blocks: 199.58.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f0:35:43:90:40:73:67:f6:48:8a:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Feb 19 02:00:25 2024 GMT
Not After : May 19 01:00:25 2024 GMT
Subject: CN=a38b63b5-e059-4b75-a7bf-d69163e8d3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:f7:32:8a:16:a6:91:7f:e9:b0:3a:bf:ff:
f8:51:65:f0:16:db:34:0a:b0:37:06:85:68:58:6d:
4b:8f:12:92:a6:0e:8a:11:60:16:7f:f7:0a:2a:19:
22:da:4c:52:4c:46:09:19:46:69:fe:83:e3:cf:3e:
61:d5:f7:42:04:79:9f:d6:18:b2:00:56:6e:22:96:
09:37:cc:f9:86:5e:10:5a:40:67:a5:96:da:29:66:
3f:dc:49:b8:07:e7:fc:11:24:b7:5f:7c:54:7d:60:
4e:77:b7:41:43:cd:b1:59:1a:ea:7a:27:16:87:18:
a3:f2:e5:b1:40:ef:33:73:8b:aa:7c:de:00:56:d8:
39:c3:85:33:65:18:10:df:67:8e:bf:45:0c:0e:98:
3f:4a:6f:82:68:4a:71:74:71:c8:55:67:97:6e:be:
96:70:77:9f:81:4f:9f:2d:e4:a0:b3:93:71:62:f7:
14:d9:ba:8d:9e:d5:19:2f:da:94:b1:fe:b7:93:03:
8a:15:ed:4a:d1:d2:6e:9b:05:73:8e:9a:28:5e:a0:
fd:19:0c:87:ff:99:e3:f6:af:29:f8:05:6d:d2:b9:
aa:6b:1a:9d:26:b0:73:59:43:6b:3f:66:a7:2d:dd:
b4:64:7e:12:6c:3d:03:51:0d:4e:0e:25:79:7c:b7:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:D2:A3:30:68:40:BD:DE:83:E7:FA:B3:C7:7C:B1:9B:BA:43:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:a4:69:b4:ca:3e:5a:4b:8b:37:19:62:59:31:7e:0b:4a:70:
41:7b:01:a1:a0:52:7b:40:89:8d:8c:aa:4e:ed:78:8d:61:e2:
ed:40:c9:c7:47:e8:20:56:07:66:62:6a:b4:eb:a0:ee:80:87:
84:86:cf:8c:3f:e6:f4:5c:9b:4b:eb:ae:d2:0a:93:03:49:92:
75:91:dd:fa:a1:fb:07:81:98:bd:73:30:2d:7b:c3:71:fc:5b:
8d:92:06:e4:1d:1a:d8:ef:8d:b9:75:c9:25:65:d9:ac:f0:4f:
21:ba:04:84:d4:92:bf:0f:ec:6a:68:74:c5:fa:cc:9b:f9:50:
a5:ad:8f:2f:54:17:fb:54:5b:f5:89:b0:94:63:ec:bc:ec:7a:
4d:82:3e:4a:69:31:b9:df:55:93:2d:89:18:18:6e:79:77:12:
65:6a:e5:d2:b2:c2:b7:65:72:54:cc:21:e0:ee:a1:a2:80:e0:
07:ff:6b:ce:6c:c0:80:70:f0:88:34:b4:6d:a6:6f:0e:1f:e1:
20:21:38:c8:55:e6:b9:ba:12:5d:9d:f1:a3:c5:71:9b:7c:4f:
9f:3a:27:5b:02:a4:c6:78:5a:1e:7e:04:b2:8e:5d:c3:4a:da:
c5:fd:ca:61:bd:d7:6b:81:fc:9b:d2:ae:0d:29:53:ab:6e:1e:
e8:d2:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org