Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/4422be6e-7311-319c-8131-e75bde034acb.roa
File: 4422be6e-7311-319c-8131-e75bde034acb.roa (raw, json)
Hash identifier: 25UKakIMFxQ1v6Y013stU9Y6VlfhGaHRG3+LUGqMxxc=
Subject key identifier: 6B:E1:9D:AD:30:54:99:0C:AF:60:17:B4:0D:FF:BE:C9:70:EA:F2:C8
Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial: 010D0C9F4328583835FD792B389F65C4DBC7C180
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/4422be6e-7311-319c-8131-e75bde034acb.roa
Signing time: Thu 23 Apr 2020 04:00:00 +0000
ROA not before: Thu 23 Apr 2020 04:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 208.71.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:35:fd:79:2b:38:9f:65:c4:db:c7:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Validity
Not Before: Apr 23 04:00:00 2020 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=5e41d860-9251-4a10-838b-341df1235050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:1c:a2:95:08:d3:2a:3a:74:f5:25:87:64:
c3:82:6c:db:b8:1a:26:76:d1:b0:bb:ed:70:9b:e3:
f0:14:d9:bc:ab:2e:a2:b2:c4:30:92:68:ce:c6:3b:
52:e6:a9:b0:1c:00:24:09:e5:e6:c2:93:26:cf:20:
18:9e:a9:53:24:4a:a4:c5:da:61:3b:40:06:b7:3c:
7a:d7:0f:47:fa:e8:82:2c:dc:7c:93:a2:f4:38:69:
45:f9:a5:60:4c:e5:92:c3:0a:f4:63:26:6d:ad:e4:
5d:c8:d2:3e:06:fe:e8:18:99:8a:ee:70:2c:bb:85:
f9:d8:bf:29:5c:06:e9:cc:18:76:de:e6:3a:c2:d9:
43:36:c2:51:42:52:c7:3d:ac:29:c3:aa:c2:5f:d4:
47:18:f6:15:8e:bc:22:85:59:95:e4:7c:59:2e:dc:
7e:c0:0a:36:a8:4d:95:8d:ed:ea:1d:49:8b:1c:61:
cb:84:71:8b:f9:91:a0:dc:71:d8:1d:ad:1a:bc:25:
77:71:0d:aa:43:30:87:89:a0:05:c7:1e:78:72:30:
3c:44:16:bf:8f:cd:94:06:63:07:8b:30:7f:74:4c:
b1:b2:61:ce:4a:83:d8:36:0c:59:f9:06:de:ea:d5:
eb:6d:0a:23:3b:cb:6d:7e:c3:d9:74:6c:84:c5:fb:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:9D:AD:30:54:99:0C:AF:60:17:B4:0D:FF:BE:C9:70:EA:F2:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/4422be6e-7311-319c-8131-e75bde034acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
X509v3 Authority Key Identifier:
keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:53:7b:29:90:d4:75:a4:f3:6d:2d:4d:2b:8e:a4:98:7d:76:
2e:56:09:f4:6e:56:64:66:93:2f:05:dd:6a:e3:14:30:fa:62:
4a:13:d6:d7:29:01:cc:2b:c5:a2:c9:b1:08:f5:be:ae:25:89:
8b:9d:f4:e8:44:cf:d5:2a:54:9f:10:73:7b:00:0e:26:e1:23:
fb:2f:7a:2f:30:89:3f:26:21:f2:a4:42:00:44:a3:fb:2c:f9:
74:a1:98:52:6b:a1:15:85:5a:e7:fe:06:da:3b:4a:a2:91:a4:
c7:cc:48:f5:f7:ff:aa:2d:26:4a:b5:8f:02:87:0d:55:1c:e6:
1e:b3:b0:95:ae:de:69:4a:f4:32:31:f5:6c:54:f9:a5:2d:c0:
fa:de:2f:77:9c:8f:3f:98:94:1b:04:8c:69:cf:7d:06:f9:ca:
84:40:9d:29:1a:99:5a:47:0a:38:e1:95:a1:1a:79:a9:4c:a4:
69:2c:6b:52:57:a4:ce:fc:47:8b:a2:cb:71:60:87:90:e7:41:
20:9b:dc:09:ca:08:66:c8:f4:9b:ae:c1:69:26:a7:8e:24:05:
85:17:c5:37:a4:22:7c:aa:13:4b:f6:24:df:12:cf:28:64:96:
2c:5d:16:2a:7b:2c:c5:e1:10:c2:2b:8c:35:72:e3:4d:47:98:
fd:6c:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:47 2024 by rpki-client on console-fra.rpki-client.org