Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/df587b12-f14b-3725-910f-886473745831.roa
File: df587b12-f14b-3725-910f-886473745831.roa (raw, json)
Hash identifier: xVba3y32bjf+lCusnFCHdR/tITQ0o3thUnVOSaPU9Wk=
Subject key identifier: EF:E9:6E:E8:6D:78:32:98:25:5C:4A:E6:D3:C9:37:F9:D3:13:90:AA
Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial: 010D0C9F4328583C19BB201638BA06FBA12B5A00
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/df587b12-f14b-3725-910f-886473745831.roa
Signing time: Sat 01 Jan 2022 05:00:00 +0000
ROA not before: Sat 01 Jan 2022 05:00:00 +0000
ROA not after: Thu 30 Jun 2022 04:00:00 +0000
asID: 7018
IP address blocks: 166.48.232.0/21 maxlen: 21
166.48.240.0/21 maxlen: 21
160.20.232.0/22 maxlen: 22
166.48.228.0/22 maxlen: 22
104.159.16.0/22 maxlen: 22
104.159.4.0/22 maxlen: 22
104.159.8.0/21 maxlen: 21
166.48.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:19:bb:20:16:38:ba:06:fb:a1:2b:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Validity
Not Before: Jan 1 05:00:00 2022 GMT
Not After : Jun 30 04:00:00 2022 GMT
Subject: CN=7c6cf86c-10a7-416a-a0d4-27a23574ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:fb:aa:ea:8a:5f:1c:3f:63:3c:8a:ce:e4:
9e:31:f0:3c:c1:b9:6b:5b:07:5d:ac:a9:87:78:61:
62:bb:3f:f5:e5:23:83:9e:9a:cf:2a:f6:d7:6a:0a:
bf:63:aa:08:f6:29:41:e3:36:13:d0:bc:38:e0:0d:
8a:22:bc:15:a8:8f:1c:a4:f4:99:aa:fc:33:95:92:
0f:d8:ff:42:7b:5e:be:75:b4:f7:db:ef:e4:d8:97:
dd:52:f7:2c:26:a1:d7:a8:d5:0e:d3:96:3d:60:36:
e8:3b:8d:07:d1:27:85:84:95:af:1e:18:fc:e3:a2:
ef:42:c5:d5:fe:3b:af:ce:03:a2:b7:77:52:da:5b:
4d:e3:74:41:37:37:de:dc:31:a7:ee:33:01:1a:a7:
4e:19:36:35:77:96:cd:b3:ab:4a:94:50:30:97:d8:
47:1b:39:de:ef:b7:6c:77:ea:dc:32:5d:4b:04:6a:
bd:a3:10:ef:c3:67:2c:1a:1c:6b:45:15:d0:d3:d3:
64:87:fd:75:7a:16:47:10:77:02:01:cb:7c:7c:41:
6f:ee:5f:3a:a3:97:d4:80:9a:c6:06:28:28:74:02:
50:fd:17:75:66:f8:e7:28:f1:a8:c3:60:a6:d9:c8:
50:f4:e5:a7:b5:07:f4:01:c2:bc:9c:21:72:b2:e5:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:6E:E8:6D:78:32:98:25:5C:4A:E6:D3:C9:37:F9:D3:13:90:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/df587b12-f14b-3725-910f-886473745831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
X509v3 Authority Key Identifier:
keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
sbgp-ipAddrBlock: critical
IPv4:
104.159.4.0-104.159.19.255
160.20.232.0/22
166.48.228.0-166.48.251.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:91:91:c2:5b:63:3f:9b:1c:62:46:59:ef:a5:a7:22:6f:b3:
09:36:3a:59:c5:b4:79:f2:bd:5d:08:58:66:fc:05:a2:00:0c:
44:3e:22:a8:a1:29:c3:7f:5f:59:cf:c5:3a:ec:09:25:6e:12:
b1:d5:b6:96:2f:d3:b5:7d:9d:4e:46:8b:2f:50:30:56:09:78:
56:f2:a7:b5:1f:6b:2c:d0:88:03:40:d7:d7:f3:c2:fd:57:f8:
d9:d6:32:e9:b5:09:65:d2:99:d3:d1:72:3e:80:5c:f0:f7:de:
f3:75:6f:76:b5:12:2e:d4:78:80:c1:c8:23:9f:11:86:35:a4:
fe:16:f7:c5:f3:a2:d1:fe:c8:cd:11:41:15:97:9f:cb:c3:8d:
9e:fd:5d:38:9f:50:a8:fc:f2:2d:63:51:4a:59:1d:49:6e:af:
2d:ad:c3:6c:58:2e:f1:b2:cb:53:b9:b7:a7:37:67:13:69:a4:
a2:24:ea:61:56:b8:df:82:ae:b9:93:4a:55:72:6c:a5:9a:ea:
12:b4:8a:f5:d8:58:d6:2f:ab:4a:c1:79:fe:97:e1:3d:d0:39:
cf:db:85:e2:2e:64:4a:45:8f:e0:e8:8d:f3:83:6a:f9:54:55:
21:34:58:56:83:fa:b7:e0:f3:84:c1:86:1c:ce:d1:e2:52:4a:
1d:34:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-ams.rpki-client.org