Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3bac8d9-157d-3318-a90d-7fe95ce6cfa8.roa
File: d3bac8d9-157d-3318-a90d-7fe95ce6cfa8.roa (raw, json)
Hash identifier: Q/1wcxo6NqAZOTRK4S93l+SJ1MPDpY9OVSLAz1xQZNs=
Subject key identifier: 3D:8E:70:03:78:68:C0:06:7F:DF:FB:21:12:7B:49:D6:9D:32:59:61
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858441E343A37DD194CDE15E39840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3bac8d9-157d-3318-a90d-7fe95ce6cfa8.roa
Signing time: Tue 05 Dec 2023 20:38:37 +0000
ROA not before: Tue 05 Dec 2023 20:38:37 +0000
ROA not after: Mon 04 Mar 2024 20:38:37 +0000
asID: 16509
IP address blocks: 208.212.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1e:34:3a:37:dd:19:4c:de:15:e3:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 5 20:38:37 2023 GMT
Not After : Mar 4 20:38:37 2024 GMT
Subject: CN=721ad0e2-57c1-44c1-a5ae-de01ebbf283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:fb:b7:79:b6:0a:af:66:3e:bf:b5:74:cd:
c3:41:77:22:7a:b5:f6:71:07:26:5d:eb:cf:10:da:
e5:e3:9d:6f:f3:23:6c:bb:67:1d:0c:c2:04:33:89:
91:f9:12:a7:fd:96:19:95:c3:91:a9:c8:d1:6c:25:
10:0f:ee:f2:59:aa:78:e0:7d:79:91:c5:74:b6:5c:
48:94:cb:bb:c6:b8:e2:12:ff:99:3b:38:68:00:20:
d5:79:c5:ff:80:69:6a:58:1c:40:e9:84:d6:38:05:
df:27:42:7f:a2:67:d1:ab:46:4f:c1:47:42:c3:04:
37:e7:a1:59:46:9e:cd:46:98:d0:be:78:ff:3e:c1:
ca:a4:6a:86:18:a3:5e:f3:cc:2d:19:10:e5:7c:0b:
e9:66:58:c0:66:b2:40:82:0b:af:cf:55:60:54:3b:
99:7a:b0:1d:47:1d:0b:85:98:28:1f:9d:1f:2b:49:
1c:fb:fb:ee:16:e0:83:1e:8a:71:3e:83:0e:8f:94:
99:fc:4a:ab:c7:a5:ff:97:08:e8:21:c1:6e:f7:2c:
ff:71:a7:7c:d0:46:ed:a0:c0:c2:20:f3:c0:59:9f:
a5:43:48:d8:85:fc:32:8c:22:d2:ab:7d:f3:f9:57:
95:bf:45:d9:c6:88:f5:61:8d:c4:d0:8d:e1:8d:95:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:70:03:78:68:C0:06:7F:DF:FB:21:12:7B:49:D6:9D:32:59:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3bac8d9-157d-3318-a90d-7fe95ce6cfa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.212.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:41:d9:2e:bf:c5:7b:43:0b:08:21:3c:3d:2a:7c:51:41:c1:
0f:c7:ff:48:ff:a2:ce:1c:06:05:e5:f0:63:0d:ed:54:fb:a6:
b8:05:8f:67:e1:7b:b4:cb:5c:36:5d:1f:c7:ec:d3:03:54:25:
22:86:80:98:aa:99:49:44:21:20:21:d2:15:26:4f:e6:96:3e:
3f:77:53:ca:28:86:49:24:16:5b:41:da:c2:b6:d7:f3:d4:e2:
60:5f:79:6d:cd:27:69:a8:f8:cb:49:d6:12:b9:f2:b5:15:f8:
52:87:9f:14:27:17:70:6a:2b:c3:db:e9:cc:bc:f6:d7:58:bc:
c2:f7:d2:35:88:4d:8a:63:aa:49:28:3f:9a:60:13:5c:89:27:
41:c7:ef:92:bc:51:ca:80:8a:b1:c7:77:e5:5e:ee:e1:35:25:
4c:4e:2a:cc:28:b6:fb:b7:9d:c1:1f:de:89:e0:60:ff:20:c4:
6d:13:fd:45:d7:ba:72:49:99:27:87:cd:4c:78:9c:7f:21:e6:
fc:d6:30:df:f8:79:3e:f8:b3:ef:e5:14:ba:c7:33:6b:b5:7d:
3a:32:4d:27:fe:33:4a:c9:46:21:aa:95:fa:91:c5:1e:11:4a:
1e:e8:1d:5e:1a:a5:33:45:72:4c:e5:29:0c:40:07:e1:aa:83:
5d:e5:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:44 2024 by rpki-client on console-fra.rpki-client.org