Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa
File: 200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa (raw, json)
Hash identifier: 2LjTLC3m7sxbrrB9LWmsEzTM04vmTIYO0xoESiqirKw=
Subject key identifier: F3:B5:45:59:5D:CB:73:84:54:73:D2:11:1F:9E:9A:23:0B:F3:C5:E1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC17204BB055C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa
Signing time: Mon 11 May 2020 17:14:24 +0000
ROA not before: Thu 23 Apr 2020 04:00:00 +0000
ROA not after: Thu 30 Jun 2022 04:00:00 +0000
asID: 6167
IP address blocks: 204.152.18.0/24 maxlen: 24
2602:fd5e:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:04:bb:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 23 04:00:00 2020 GMT
Not After : Jun 30 04:00:00 2022 GMT
Subject: CN=57f4a8aa-0b32-49eb-b57f-8996f0651270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:72:fc:00:61:be:cd:d2:8d:e0:de:c4:b1:
c4:b6:a1:c9:95:cd:ae:b5:f8:9f:9c:3a:4c:a2:ce:
71:a3:02:f5:65:ec:64:4e:31:7d:d9:cb:dd:ad:94:
84:ac:df:f1:89:e7:fe:e3:c5:75:c0:ab:05:3e:6f:
98:fc:29:25:d2:04:24:35:e2:09:05:c3:15:1b:17:
54:fe:55:ae:f5:ca:d4:2b:de:a4:1e:07:c0:8c:f5:
eb:f7:fc:50:4b:1f:3f:b8:13:c0:0c:56:03:4a:93:
3d:b6:cb:06:70:b6:d0:0b:9e:10:e7:8d:a1:be:45:
94:1b:fe:34:fa:5b:9b:b5:ff:2e:cc:2a:aa:28:78:
83:e0:8b:9f:39:f1:11:f3:ea:d9:94:d4:b7:3b:2b:
3e:bc:5b:68:f9:77:db:78:27:99:e2:ce:e0:a4:37:
c6:e0:b5:46:f2:6a:c6:31:f5:ab:44:36:16:85:5a:
e1:2e:85:27:b8:ab:87:e7:d4:d5:26:17:d5:bc:01:
ab:68:c1:fa:38:77:6a:70:b3:6a:f7:8e:46:ef:2e:
3b:1c:1f:8b:a5:a9:6a:e2:28:ac:8b:88:d0:fd:52:
7b:81:82:4b:c9:79:24:17:f9:70:9a:9d:1b:2c:f6:
4c:d5:0a:7d:23:47:5c:04:7f:e8:2f:fd:ce:97:11:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:45:59:5D:CB:73:84:54:73:D2:11:1F:9E:9A:23:0B:F3:C5:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
204.152.18.0/24
IPv6:
2602:fd5e:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d0:98:c7:c8:a6:e3:7f:e8:0d:20:59:a5:27:a4:59:9e:8b:
76:e6:46:70:3b:4f:df:3b:c7:1b:fd:7e:1f:b7:a3:da:09:aa:
92:e3:99:a0:53:e0:3a:f7:dc:74:6c:c0:1d:9e:7f:58:20:ae:
54:6d:94:77:02:82:55:c8:5e:59:7d:6f:4a:f9:43:50:11:f2:
5b:eb:07:d0:95:13:ee:10:75:42:6c:93:b0:50:e5:6c:88:20:
d3:81:5a:73:06:46:db:6b:ee:d1:f4:2f:68:85:65:8b:77:31:
d7:9b:4a:61:ef:91:63:0f:50:30:e1:e8:82:fb:d9:e1:7e:c1:
a3:0a:4a:b5:d5:60:8c:90:2c:42:78:ee:68:5b:e6:af:2f:e6:
93:f3:06:da:8c:29:ba:41:f8:18:36:13:e6:53:95:91:0a:7a:
98:a9:73:17:e7:0a:80:0f:25:a6:b8:49:91:73:cb:cd:b8:b3:
5f:4f:9e:c7:56:43:fb:b6:46:d4:a9:df:cd:75:90:a2:d4:c0:
26:b3:e8:7b:22:94:48:ee:d4:22:f0:83:b2:26:86:47:ed:54:
52:c0:15:fa:9c:50:19:19:ee:c4:37:e8:86:85:db:eb:3a:3b:
07:f7:63:e1:50:b7:65:07:8a:d2:49:e8:18:08:16:8d:9e:38:
c3:7e:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org