Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/8f524e3c-c9f4-33b3-affc-1240b9dabe3b.roa
File: 8f524e3c-c9f4-33b3-affc-1240b9dabe3b.roa (raw, json)
Hash identifier: cTY7jqgxU2iF4zHnZCO/B4ITVZdKNcgj0zD3rPopXAs=
Subject key identifier: 06:CD:D5:2E:EC:B1:6B:0A:7F:0F:42:5A:D0:93:F7:17:3E:97:A3:C5
Certificate issuer: /CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
Certificate serial: 010D0C9F4328576D51CC73C042CFC171EAED69FB
Authority key identifier: 8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/8f524e3c-c9f4-33b3-affc-1240b9dabe3b.roa
Signing time: Wed 06 May 2020 16:59:19 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 396982
IP address blocks: 209.102.208.0/21 maxlen: 24
209.102.208.0/24 maxlen: 24
209.102.209.0/24 maxlen: 24
209.102.210.0/24 maxlen: 24
209.102.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:ea:ed:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=a6b8a450-29de-4ce2-81e1-89e60e8ff8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:61:52:24:cf:05:e2:23:02:54:a1:5e:8c:
a3:d6:a9:28:d3:cd:8d:71:2c:d9:47:15:03:f0:74:
a4:62:7c:59:19:ea:87:35:66:b2:9a:e4:f1:fe:53:
2b:e5:5a:9f:46:c7:8f:ff:16:76:58:3c:98:4a:59:
d1:f2:13:0e:38:4f:06:a3:7f:ad:45:49:66:a2:8e:
98:f6:01:e7:c7:f9:db:a8:ba:ed:97:a6:0b:ca:90:
9f:b1:4d:4b:2a:01:bb:b2:bd:cb:43:3b:cd:ad:f2:
8b:7b:01:7b:fe:b4:a5:c2:4f:f4:e2:f2:98:4e:d3:
ad:8e:46:8a:ad:60:43:4c:8b:48:dc:67:0a:ef:0d:
5c:cc:62:00:98:ce:24:0c:da:34:71:cc:28:4e:c2:
57:a7:e9:4d:2e:cc:8e:72:aa:20:90:82:7e:54:05:
d7:ab:b5:b8:3a:c8:1a:f7:ed:35:22:bb:72:e1:9f:
ba:f9:68:43:bb:1c:54:cd:0a:da:84:8f:e5:29:32:
4e:26:d5:81:e3:bd:2c:b5:ee:25:a8:5b:e6:6d:03:
71:1b:9d:8b:66:ff:88:f5:4a:e1:d4:26:2f:ad:56:
de:3b:87:a8:f1:84:73:58:f7:fc:bc:43:97:a8:a3:
96:ef:fa:64:ba:c9:15:5f:7a:16:3e:17:f1:6c:60:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:D5:2E:EC:B1:6B:0A:7F:0F:42:5A:D0:93:F7:17:3E:97:A3:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/8f524e3c-c9f4-33b3-affc-1240b9dabe3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/89aee2c8-b766-4bba-b142-4f98c4c382e9.crl
X509v3 Authority Key Identifier:
keyid:8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:66:ce:49:b6:0a:81:5f:f5:c4:35:4e:23:9c:11:01:97:8b:
b6:18:c2:3d:d7:d2:f4:e4:71:94:54:52:7a:47:ba:1b:ba:ac:
9b:73:3d:31:61:92:51:df:61:a8:28:aa:d4:9c:a6:c2:7f:3b:
2a:0b:e6:84:18:2d:71:59:85:e7:dd:1f:23:be:1b:f4:2e:99:
56:f2:18:82:3a:1f:05:be:80:ca:af:de:77:4f:48:dd:66:6d:
04:d4:05:6a:af:19:22:7f:a5:18:20:3e:dc:1f:ec:ee:9b:f3:
9d:a6:7c:0c:6b:8c:ed:36:4c:90:2d:a2:92:66:79:4c:de:bf:
55:e3:55:44:ea:23:37:85:94:3b:f8:76:cb:2b:c6:dd:f8:88:
a4:ae:14:81:c4:41:e2:f0:df:be:bc:6d:65:3c:02:14:87:93:
66:31:da:ab:a6:d2:20:51:31:d8:0c:b7:e1:a8:72:70:5c:64:
c0:a9:15:22:73:9e:a5:01:45:e1:1d:b1:54:4d:9f:f4:cc:98:
e2:9f:72:53:4b:47:44:72:ed:e1:43:7c:da:83:eb:36:37:ab:
42:23:1a:38:4b:88:04:ef:00:f2:85:a7:18:06:b5:ae:ca:d1:
d1:bc:ec:0d:aa:71:c8:ce:a5:fc:97:cb:8d:6a:d1:52:b6:78:
b3:ae:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org