Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8dcc8e6f-6066-34ba-9267-18f40c3f3ff0.roa
File: 8dcc8e6f-6066-34ba-9267-18f40c3f3ff0.roa (raw, json)
Hash identifier: AkRAIJxj1PtgkIJvtofJ3wCRy432XucjNZ+cJZy1X90=
Subject key identifier: 8E:08:40:22:48:98:D5:61:4A:6F:2B:9F:95:AA:EF:17:0E:BA:E0:79
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285841E46D97FB63ACC750C124DC00
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8dcc8e6f-6066-34ba-9267-18f40c3f3ff0.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Tue 04 Jul 2023 10:08:43 +0000
asID: 1448
IP address blocks: 156.146.128.0/17 maxlen: 17
158.41.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:97:fb:63:ac:c7:50:c1:24:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 4 10:08:43 2023 GMT
Subject: CN=56343c8e-30d8-49cc-ba92-9dc984697601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:87:e8:39:13:62:fe:71:d6:fd:42:90:16:
c1:a5:22:64:bd:6d:2d:eb:53:70:5c:be:32:3a:19:
2b:ea:70:16:ab:b1:c0:de:e1:01:a7:a9:0e:32:ae:
af:6b:e2:cd:1c:51:6b:03:5b:9b:2e:61:e9:78:af:
2c:d6:88:b6:2a:15:04:a7:c8:ee:26:53:ff:56:c7:
3f:57:0c:1a:3e:c9:d6:e7:26:42:d7:37:a2:61:5c:
b7:38:32:dd:c6:68:5f:7f:c6:95:53:c0:4f:19:fb:
67:01:4c:da:95:18:96:29:07:02:d8:ee:8b:c8:64:
4a:e3:15:87:61:f3:b3:6d:71:0d:ad:be:0d:ec:f5:
1d:bc:21:f2:00:7a:a4:d4:9a:0d:7d:c6:49:c9:e7:
b7:dd:a4:1d:3d:35:06:66:a8:a1:65:f8:5d:68:67:
72:a1:5d:be:e8:5a:fa:27:28:78:d0:ba:71:90:4a:
af:b4:98:10:12:42:75:94:d0:ee:8e:fe:d6:b5:82:
9f:fc:31:5a:ed:ee:12:31:ca:19:76:bc:72:79:02:
73:74:2a:a4:d0:24:73:1a:49:3f:3c:40:cc:5d:6d:
7e:cc:e3:3e:4b:40:90:bb:63:01:82:cb:ff:0f:41:
a2:9c:a1:2c:68:96:3c:e0:05:73:c1:55:0c:a3:03:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:40:22:48:98:D5:61:4A:6F:2B:9F:95:AA:EF:17:0E:BA:E0:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/8dcc8e6f-6066-34ba-9267-18f40c3f3ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cb:84:cc:71:10:ab:b7:a3:0b:3b:f7:bc:01:5c:fb:01:e2:
ef:54:1a:4b:a3:bc:68:e8:55:66:43:4a:e5:1e:b5:d4:ef:db:
16:62:15:82:86:2d:e6:48:9b:4f:95:95:0d:5d:eb:d2:f3:d7:
f1:f0:5b:1c:b0:9d:0a:98:a0:ee:a4:7a:c2:73:2a:13:8d:74:
37:1d:32:9e:8f:56:2d:96:b5:f9:78:cc:91:f9:0a:a0:5e:34:
22:6e:b5:65:f8:33:f2:08:97:0a:a5:5b:e0:d3:69:8a:f0:e7:
11:61:18:ea:c4:a7:68:e4:a6:d2:a4:a9:0f:6f:d8:85:49:b8:
77:e4:b5:45:4d:cb:6d:0f:d3:1c:de:4e:48:02:1d:9c:25:e4:
70:2a:79:34:18:d5:86:c7:51:12:ea:4a:bd:15:b7:26:62:b1:
15:c9:af:90:fd:8f:a2:4c:bb:de:14:a8:51:15:47:79:bd:59:
e6:f7:36:76:28:bc:06:1c:ff:19:af:30:c8:68:c9:36:7a:c4:
9d:5c:f7:8e:38:5a:90:2a:db:0e:60:9a:4a:3f:14:6c:47:58:
e3:8d:29:ab:3e:37:a7:41:c1:b8:57:b9:f2:f8:0b:c1:3b:3f:
df:ee:93:19:b9:06:0b:80:d2:9d:04:11:a5:e1:0e:63:7f:58:
64:64:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org