Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
File: 4979523b-171b-3331-8f65-2145fa58ed26.roa (raw, json)
Hash identifier: kZWFrewwpSb0KR0zwaLbSFt0Q/eOfgwx8SJ4LVyYArI=
Subject key identifier: AE:52:C6:2D:78:56:7B:5A:2B:93:FC:9E:0E:EB:01:B9:9A:B0:31:F8
Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial: 010D0C9F43285843E59EC56599945A597B1AB930
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
Signing time: Wed 15 Nov 2023 14:12:13 +0000
ROA not before: Wed 15 Nov 2023 14:12:13 +0000
ROA not after: Tue 13 Feb 2024 14:12:13 +0000
asID: 9009
IP address blocks: 170.205.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e5:9e:c5:65:99:94:5a:59:7b:1a:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Validity
Not Before: Nov 15 14:12:13 2023 GMT
Not After : Feb 13 14:12:13 2024 GMT
Subject: CN=65395fe8-2636-4554-839c-d369e97c05b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:64:71:1a:13:0b:4a:f8:13:40:b3:fb:ee:
8a:94:89:35:ed:61:fb:6c:73:6d:b5:39:11:d1:1d:
62:d0:5a:f7:c5:5d:05:3f:cf:42:13:db:fc:4f:b6:
42:f6:d3:2b:0a:62:5c:f5:0d:05:b7:95:0e:25:42:
50:43:77:84:70:c7:b7:1f:a0:94:ea:4c:eb:2e:7d:
cd:36:26:fe:85:66:e1:6f:bd:fe:bb:96:51:44:2e:
a4:e8:6d:35:55:f4:21:07:be:6f:b7:52:06:1f:d2:
c5:74:35:2d:2b:be:be:f2:59:5b:d1:e2:cd:65:db:
79:50:33:07:4f:0c:b6:a6:5e:74:85:d5:5b:f3:67:
8f:87:c3:0b:f6:cb:f1:58:f9:49:90:73:28:e0:ad:
61:94:0b:9e:24:a2:25:f9:11:93:38:84:de:23:c6:
01:ac:00:cf:6a:d2:aa:fb:c3:ef:4c:22:35:03:ce:
0e:0a:ec:62:8e:08:39:83:6c:30:d7:f2:45:87:6b:
c1:7a:e6:ef:69:8a:5d:2f:83:2b:a9:5c:e5:0f:54:
f7:f1:ab:8b:f4:9b:47:c3:5c:f7:00:d9:d3:dd:9e:
af:37:d8:9d:0f:6e:c3:a9:80:70:ba:03:18:d8:80:
b5:ee:68:c3:aa:b3:c0:b4:3d:a2:df:02:f4:76:7c:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:C6:2D:78:56:7B:5A:2B:93:FC:9E:0E:EB:01:B9:9A:B0:31:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
X509v3 Authority Key Identifier:
keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:27:0b:79:af:09:32:ef:39:d0:33:1b:31:d2:07:ed:5d:b3:
4b:9a:8b:23:f0:d2:fc:5a:17:50:13:69:9e:98:bc:c6:c3:fd:
b5:7d:12:37:9d:dc:01:1b:2e:28:48:ea:f6:9a:ad:30:ec:f9:
46:b9:24:e3:c9:79:a6:ef:d5:7f:56:c7:64:fb:ce:2f:16:0a:
d9:ba:38:f2:1b:03:93:4c:f6:05:75:f3:c9:f2:ad:e3:a6:62:
ca:02:d1:16:b9:ca:78:f5:03:db:4f:0a:0f:b7:c1:f4:10:75:
c7:de:d1:7b:41:7a:29:92:af:66:7f:1a:37:eb:f1:f8:9b:1f:
9c:7c:03:74:10:6a:97:09:c7:9d:18:08:f1:95:a9:d8:1f:c3:
e7:fb:b7:63:79:e3:ba:b6:51:f4:69:b9:d9:4e:0e:f4:ec:ca:
6e:10:aa:44:9e:0b:dc:0e:da:1b:69:77:ac:7b:b6:e3:e9:b8:
f2:9d:42:b5:e7:8f:24:7c:e8:19:ae:56:f1:dc:c0:f9:42:25:
84:42:8e:2a:cc:a6:b8:16:6b:5c:3c:7a:1a:2a:fc:e0:d3:5c:
a6:14:c1:7b:c2:2d:22:d8:51:ba:7e:14:58:77:30:fb:58:de:
dd:c8:b0:3a:73:30:1d:43:36:31:48:76:98:ad:86:24:29:86:
3a:ac:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:08 2024 by rpki-client on console.sobornost.net