Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/9746ee19-9ad6-30b9-becc-850cc78a7093.roa
File: 9746ee19-9ad6-30b9-becc-850cc78a7093.roa (raw, json)
Hash identifier: Rqd4g6KBn4AbhuAYNUWApoZYH9ec+HjZCNYadTONshw=
Subject key identifier: 28:41:86:C4:B7:A7:92:7C:67:80:E0:DC:92:7F:6B:07:A4:38:91:80
Certificate issuer: /CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
Certificate serial: 010D0C9F4328576D51CC73C042CFC171EAC804DE
Authority key identifier: 8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/9746ee19-9ad6-30b9-becc-850cc78a7093.roa
Signing time: Wed 06 May 2020 16:18:29 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 396982
IP address blocks: 209.102.212.0/22 maxlen: 24
209.102.212.0/24 maxlen: 24
209.102.213.0/24 maxlen: 24
209.102.214.0/24 maxlen: 24
209.102.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:ea:c8:04:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=8e8c9c54-7b68-4e11-8681-9d795d441e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:cb:e2:ff:95:6f:ae:6f:9c:08:c7:7a:6a:
2d:ad:09:0a:36:a1:86:4e:ea:1e:e1:e5:ee:64:90:
ac:bf:bf:a6:be:89:20:a2:ab:d7:dc:21:3e:22:08:
67:4f:2e:b1:59:39:a9:45:60:3c:d8:ba:05:db:f4:
93:f8:17:ae:76:a7:32:32:2f:25:cb:f9:d9:92:55:
49:78:b6:35:8a:d1:ea:e9:a5:35:e5:7d:25:96:a6:
42:88:4b:78:32:53:ac:9a:e4:c4:a7:f6:16:32:39:
09:d8:59:8b:29:7d:06:bd:75:b1:59:75:bc:c0:72:
49:ca:8c:13:0f:e6:4f:d7:38:b3:04:4f:dd:77:f1:
c4:03:cf:4b:5f:43:fc:46:30:f7:9c:24:42:cd:ba:
5a:4e:2f:d5:d5:3e:2e:f5:21:45:37:60:41:35:03:
a9:06:d4:ba:32:2f:28:73:ca:ac:40:43:06:3b:6a:
28:70:4c:e1:1a:d2:47:61:60:f5:72:ae:06:8b:32:
b0:f6:53:28:bf:8f:b3:e8:29:e4:66:8c:57:0b:c2:
11:b8:72:c1:44:23:66:d7:a9:6e:15:eb:fd:a3:e1:
78:fa:df:a2:8f:40:bb:5d:33:52:bb:e6:82:45:3f:
18:a8:61:0b:48:34:8e:7e:aa:d0:a1:19:f9:e4:d3:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:86:C4:B7:A7:92:7C:67:80:E0:DC:92:7F:6B:07:A4:38:91:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/9746ee19-9ad6-30b9-becc-850cc78a7093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/89aee2c8-b766-4bba-b142-4f98c4c382e9.crl
X509v3 Authority Key Identifier:
keyid:8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:32:a3:50:80:08:e2:7b:5b:33:cd:ec:5c:a1:ed:a9:b1:9f:
0b:1e:a2:e4:9d:22:0a:68:78:e1:1e:9c:f5:87:ba:7a:11:5b:
7f:3e:05:2d:c9:d6:25:8b:85:23:7e:e5:e2:ac:e4:b3:f7:46:
88:08:cd:ef:d7:2e:46:9b:94:01:8c:03:c5:1d:aa:8c:4c:04:
e1:a6:a0:7d:c9:1b:5c:7a:62:1a:da:4d:a5:0a:b2:a6:13:44:
08:e0:26:d7:6c:5e:95:02:0e:5b:a4:44:bd:7f:82:dc:21:dd:
24:46:28:9e:69:25:17:48:39:eb:a7:87:50:43:44:a9:f4:76:
c2:6f:5f:da:7a:52:93:24:ed:97:cd:be:d5:64:23:8d:30:1a:
e7:a6:43:0b:bc:c7:1d:ba:dd:89:fd:dc:7e:99:c5:c0:e2:e0:
0b:a2:51:1b:68:67:92:67:66:2d:94:a2:74:e8:32:ed:a5:24:
99:ad:76:ab:e4:04:33:c7:16:68:d5:18:c7:89:47:a0:69:90:
92:45:f1:d3:32:35:8d:69:7f:8e:00:92:51:07:e3:98:cc:56:
bc:a4:92:37:16:bb:4a:2e:7c:25:22:12:cd:0c:51:79:a2:e1:
f6:97:c5:b6:1e:b1:32:6b:af:3b:a6:33:0e:0e:02:fa:73:df:
84:c5:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org