Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/ff1adaa8-0364-35f3-bfdf-1f03d548eaa3.roa
File: ff1adaa8-0364-35f3-bfdf-1f03d548eaa3.roa (raw, json)
Hash identifier: hW+pdpQo6XIt+reNQ2+32tO3JK/JqxjIkrmdDICBk1I=
Subject key identifier: 59:9F:98:FA:49:B2:68:27:63:83:3B:8E:9A:D0:5E:70:52:DB:27:8F
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F4328583781B7D6BC351FB650E2A96720
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/ff1adaa8-0364-35f3-bfdf-1f03d548eaa3.roa
Signing time: Thu 12 Mar 2020 04:00:00 +0000
ROA not before: Thu 12 Mar 2020 04:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 398858
IP address blocks: 162.250.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:81:b7:d6:bc:35:1f:b6:50:e2:a9:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Mar 12 04:00:00 2020 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=e4659902-cdae-42c5-b11a-c0f44fdd5087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:55:eb:93:ab:ca:c0:3c:5c:20:74:12:d0:
73:15:0b:d1:66:4a:4a:23:61:95:df:35:2c:66:c0:
48:0c:19:9c:cc:7e:5d:05:f9:5a:0c:01:2c:53:c2:
e5:b7:b9:78:00:b7:80:a3:d5:8f:62:46:ec:25:f9:
b9:dc:0a:d9:c4:5e:e1:14:4d:66:0b:a2:12:75:4c:
8d:3c:7a:18:50:ec:37:32:2d:2e:12:4a:f2:32:c4:
b2:d2:73:e8:03:df:c3:89:aa:1f:de:6b:4a:b8:1b:
2b:5e:91:07:5c:b8:17:d0:b2:bc:f5:db:46:12:c2:
c4:96:dc:61:a1:88:30:76:04:e9:93:7b:ad:dc:f9:
6b:13:df:cf:fa:fb:cb:6f:9c:75:db:bc:f3:ec:a4:
cd:b6:0c:a2:96:73:29:2c:7a:39:79:24:85:4d:24:
36:9a:3b:09:b7:1e:e2:9c:8c:48:f3:68:7f:dd:ea:
ad:cd:d6:7c:3c:8b:3e:d6:25:16:e4:8d:d1:0c:e5:
29:53:3a:d9:6a:b4:41:11:c8:64:1a:53:4a:52:67:
c9:06:97:7b:c3:59:e6:25:39:0b:ad:c5:d1:de:c4:
a2:fc:c6:05:90:5f:41:55:3f:8b:45:4c:19:62:ae:
82:b8:86:a0:59:82:a9:8d:8a:60:5d:10:21:4c:63:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:98:FA:49:B2:68:27:63:83:3B:8E:9A:D0:5E:70:52:DB:27:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/ff1adaa8-0364-35f3-bfdf-1f03d548eaa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6d:ba:2e:99:3c:57:06:ec:1c:2b:6b:5e:59:f8:88:7c:6d:
c6:b9:79:67:0a:e8:f4:b7:40:b6:40:70:fb:8e:10:21:30:dd:
1a:18:5f:d8:07:6b:00:ad:a6:fd:f1:6a:5a:05:aa:7c:16:a5:
0a:89:8b:38:e6:9c:06:49:db:0b:1a:92:c4:ae:fc:94:74:b4:
ed:a2:18:ba:d1:e2:8a:44:8d:3a:c2:dc:55:cb:bd:8d:fc:0b:
72:5c:9a:df:c0:f7:b8:40:2b:60:2d:78:ec:2b:c4:ef:dd:57:
07:ed:17:fd:38:fa:71:a8:39:d6:a3:32:92:54:02:b1:34:0f:
2e:f7:ac:9a:45:7e:3d:dd:9e:fe:ee:0e:52:38:06:5c:84:71:
82:ea:85:27:f8:1d:11:fc:61:95:a3:00:b3:fb:8a:59:80:a1:
82:e7:80:19:7d:70:46:60:74:33:38:dc:0c:32:c9:c7:ee:4e:
d8:5a:8f:e1:f3:2e:d7:76:8d:e0:ee:bb:1b:ac:e2:98:0b:46:
5e:0e:17:f3:74:ae:ec:5a:28:36:b0:31:dc:ee:0b:03:3a:ac:
6a:51:1e:0f:22:bc:59:1b:be:ac:8d:7b:a3:ab:46:8b:0b:6b:
f2:e6:b8:58:66:44:cb:9c:a3:08:44:f8:01:9c:d1:d3:6f:f7:
9f:f1:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-ams.rpki-client.org