Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
File: ca53acd4-8f16-3115-acc7-5837da260b64.roa (raw, json)
Hash identifier: CP1dgY/eC+2TOWip6RRcUjo2zAkVU/O5q8n/LGhhG7I=
Subject key identifier: C0:37:1B:3A:C6:8E:B9:45:DF:11:38:F5:8E:AA:AD:1F:7D:AB:28:E0
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285843C304F95A9D665E0FFFB90140
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
Signing time: Fri 03 Nov 2023 04:44:51 +0000
ROA not before: Fri 03 Nov 2023 04:44:51 +0000
ROA not after: Thu 01 Feb 2024 05:44:51 +0000
asID: 216061
IP address blocks: 170.205.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c3:04:f9:5a:9d:66:5e:0f:ff:b9:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Nov 3 04:44:51 2023 GMT
Not After : Feb 1 05:44:51 2024 GMT
Subject: CN=34e3e152-4b17-477c-8e1d-c32b5442b2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:58:64:c1:57:cd:ee:ee:2f:4c:eb:45:93:
96:e0:0e:2a:6f:93:fd:41:a8:84:6a:4b:92:6a:8b:
e9:2f:70:d8:dd:96:e1:ec:4c:99:64:89:f0:08:c6:
7f:e9:1d:ab:c2:f5:c7:3e:33:49:a5:e7:bb:04:31:
bc:e5:58:69:d6:df:a6:3c:c9:62:3f:fc:f4:52:2b:
6b:62:5f:53:93:eb:db:03:07:0a:4e:91:ac:2e:6e:
45:2e:2f:74:41:17:4f:d4:d1:ec:f1:ca:45:2a:5d:
a3:b1:02:a4:00:0f:e9:60:83:2b:04:50:49:cd:35:
c7:01:84:58:0c:64:ae:5f:4f:84:d0:4d:c1:72:7d:
d4:da:59:f5:fa:1f:16:3e:40:be:4e:3a:4c:79:4f:
fa:eb:10:ec:21:3c:30:92:a6:bf:b6:41:a2:54:c9:
f9:56:9c:90:59:56:a7:14:fc:ac:02:b9:32:6b:f3:
de:a0:70:6f:de:2f:64:0a:98:2b:cc:0b:10:82:19:
76:34:b1:08:bb:f5:5d:c1:2a:55:98:67:68:11:cf:
20:28:63:0f:17:1a:33:c0:91:b2:5a:c5:7e:96:70:
48:19:14:79:25:cf:4f:a0:d4:2b:fe:af:dd:3a:7c:
3b:aa:2e:37:6c:62:0e:44:6e:d7:ea:d7:62:15:ce:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:37:1B:3A:C6:8E:B9:45:DF:11:38:F5:8E:AA:AD:1F:7D:AB:28:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:bf:40:a2:e8:20:ca:67:8e:e2:fc:f2:b7:ec:d9:97:8b:a7:
50:f2:01:3b:32:de:65:3c:ec:b4:b4:c1:7f:00:8c:e8:e4:0d:
ff:19:ac:3e:93:a5:ad:d7:ec:6d:e4:25:2f:62:ea:17:ef:ab:
ec:38:8e:c5:3f:f6:27:f5:11:77:04:21:d8:74:81:59:55:8b:
c6:07:9f:3e:0b:82:58:ae:8b:98:55:2a:a0:25:e6:0b:cb:00:
dd:3f:be:84:dc:74:7a:da:e4:62:9c:41:1c:2b:a5:b6:cc:80:
f5:9e:05:0b:b6:8a:04:9d:4f:d0:b7:93:b3:6c:48:e2:ea:37:
7b:70:39:1f:4b:c7:b5:69:39:08:d6:c2:9f:09:06:e2:46:6b:
97:76:80:2d:24:65:c3:29:c6:1f:44:67:d5:a4:46:fa:21:f3:
43:bc:d9:e4:ac:0b:01:d0:b9:13:3c:2d:e8:56:59:d1:ca:db:
ee:58:99:23:c0:34:de:da:42:f6:55:06:44:01:ae:74:ec:1a:
16:09:90:7c:aa:14:7e:02:f4:a9:3c:ec:31:00:63:22:a6:b6:
7c:56:d7:ed:76:91:32:2b:fe:30:d8:ea:bb:2d:1f:d3:d6:e2:
3e:3b:0b:78:35:66:ae:a9:3c:8d:66:d8:bb:19:a7:eb:8b:11:
93:e8:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:06 2024 by rpki-client on console.sobornost.net