Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7ba8cdb-9054-3c2a-b6fe-58b6332aaa5f.roa
File: b7ba8cdb-9054-3c2a-b6fe-58b6332aaa5f.roa (raw, json)
Hash identifier: H58Ku6qqR9ZYdnmIKDLjqzf7vJJFHvR6c4OnU4dzWxc=
Subject key identifier: 97:AC:1B:CD:67:C8:84:78:12:9D:01:08:0C:D6:74:3A:2E:C4:A4:91
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328576D51CC73C042CFC17364308498
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7ba8cdb-9054-3c2a-b6fe-58b6332aaa5f.roa
Signing time: Sat 18 Jul 2020 23:09:28 +0000
ROA not before: Mon 13 Jan 2020 05:00:00 +0000
ROA not after: Fri 21 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 208.70.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:64:30:84:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jan 13 05:00:00 2020 GMT
Not After : Oct 21 04:00:00 2022 GMT
Subject: CN=db08ae1e-b02a-45b8-8ddf-4438d6b830ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:af:8a:8d:31:96:e8:b4:be:99:15:4e:75:
d4:46:99:6c:f1:59:51:fa:9b:7a:6d:59:d3:a1:b8:
3e:1e:7f:17:af:1f:79:e9:a1:e7:04:f8:f8:a9:36:
cd:ef:3a:d1:27:ff:00:21:61:5d:b7:62:c2:6f:7c:
27:d0:d5:da:4e:8a:ee:95:ff:83:ca:54:bd:92:05:
41:7b:0b:90:0a:9b:6e:00:9f:db:c0:a4:e8:a5:2f:
d2:c2:5c:d6:18:7c:4f:15:a6:54:6b:98:80:4d:db:
09:a2:cc:76:97:34:de:15:05:0c:e7:a8:8d:58:10:
30:68:ce:2a:78:60:45:46:d8:73:47:63:d9:4a:ef:
cb:77:cf:41:f8:88:36:87:27:aa:c2:e5:71:36:ee:
ca:67:8d:5e:c3:3b:9c:25:fa:d8:43:6a:44:66:9d:
5f:e3:c8:11:25:f6:eb:0d:81:2d:fe:6c:5c:bf:b5:
35:0c:69:fc:9f:8f:e1:cb:cb:85:76:74:d0:47:cc:
0c:2b:04:a4:43:c0:22:d7:15:fb:09:74:53:30:68:
24:be:55:c9:15:e1:53:bd:ee:76:25:ac:a0:81:05:
50:47:c7:1e:84:47:d7:ad:68:84:cc:d4:ea:05:93:
0e:0b:4c:9b:e6:a8:b5:c1:86:63:cc:12:28:1c:b4:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:1B:CD:67:C8:84:78:12:9D:01:08:0C:D6:74:3A:2E:C4:A4:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7ba8cdb-9054-3c2a-b6fe-58b6332aaa5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:52:2f:3b:df:83:0c:94:a5:2a:c9:6d:63:07:f6:3d:5d:4f:
5c:2c:0e:7b:05:9e:83:31:df:e9:e3:04:7f:a9:75:8d:da:34:
33:3c:4a:6f:7a:06:cf:68:df:02:c9:00:c3:1a:d2:f7:0f:2a:
43:3e:2d:1c:73:51:bf:e2:6e:e3:6c:87:bb:e1:cc:95:5d:cf:
0f:9c:30:e3:8f:54:db:4d:61:d7:37:2c:b9:bf:e7:f0:c7:00:
af:22:71:e1:38:07:2b:ef:1a:4d:6f:59:57:45:32:75:9e:c1:
27:08:b3:88:1d:57:e9:f5:46:09:14:3b:57:78:96:dc:a1:b3:
b5:11:33:9d:63:8c:00:75:1c:ac:4b:ee:33:19:95:be:b2:5c:
7c:1f:32:c8:1f:90:56:ca:61:2a:4e:6b:31:79:b4:70:9b:7e:
a3:ed:79:3b:5b:ac:3f:36:15:c6:bd:ae:28:82:07:6d:da:98:
11:0b:f0:e3:93:8b:d6:8b:27:33:34:46:11:50:b8:24:47:99:
7d:96:f7:5a:db:b9:1c:cc:be:07:61:ae:27:da:fb:bc:00:81:
9e:ed:f3:2b:3a:06:30:46:ec:e1:41:bd:16:14:b2:2d:1a:6b:
9a:90:c3:2c:58:87:b7:97:fe:6d:9f:2f:59:cf:43:f1:24:dd:
95:e8:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org