Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/c52ae72a-9100-3b9b-a8a2-9d150cae6106.roa
File: c52ae72a-9100-3b9b-a8a2-9d150cae6106.roa (raw, json)
Hash identifier: 828nJMleUgvKFjP4fZZqaifpYSQmtBoEzhCArLjBIiQ=
Subject key identifier: 2D:C9:1E:12:2C:51:74:2E:0B:70:B9:01:84:D6:3F:B1:4E:74:8A:B5
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328583FC78E92F6A39250E8EF3BB118
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/c52ae72a-9100-3b9b-a8a2-9d150cae6106.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Sat 31 Dec 2022 05:00:00 +0000
asID: 49999
IP address blocks: 147.124.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c7:8e:92:f6:a3:92:50:e8:ef:3b:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 31 05:00:00 2022 GMT
Subject: CN=05616b7f-03ec-4881-befc-3866804da7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:1d:d1:e8:38:3e:af:ec:6b:8e:3f:ef:41:
73:ae:57:17:7a:07:b3:d4:20:c6:89:6e:35:7f:99:
dd:d6:86:eb:df:a7:d5:66:4f:14:98:38:07:59:64:
b7:60:37:8b:51:29:63:35:2e:5b:18:da:3e:3d:5f:
93:16:06:52:41:5e:3f:c3:6a:91:9d:82:a6:06:ff:
af:e8:34:c4:38:2c:31:b4:1f:6f:b6:db:a0:36:f7:
6c:8a:00:af:09:50:01:72:bb:69:39:ab:f9:f9:4e:
d0:c6:48:8a:13:f4:85:e4:3d:01:37:83:ee:7e:10:
7d:41:d6:e8:70:de:54:af:da:04:eb:a0:3c:3a:71:
c7:62:1f:64:c2:f8:cc:4b:73:32:33:4c:a6:f9:65:
60:fb:39:ba:6c:c3:a6:9b:10:b2:84:80:83:fb:dd:
4f:8f:29:9e:f9:c1:0e:9a:2f:fd:9c:3c:31:91:be:
03:67:1a:d4:47:61:0c:83:77:ee:12:a9:cc:9e:94:
63:36:2f:5c:d7:c7:1f:83:2a:aa:f4:8c:82:6f:5e:
23:0a:62:c7:ef:74:eb:65:08:3b:46:64:44:d2:e5:
b7:37:2c:14:35:35:ca:69:04:07:a5:7a:16:9d:61:
49:51:1a:3f:79:b2:ad:97:79:91:37:8f:93:89:57:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:1E:12:2C:51:74:2E:0B:70:B9:01:84:D6:3F:B1:4E:74:8A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/c52ae72a-9100-3b9b-a8a2-9d150cae6106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9f:ec:40:3f:c0:41:b7:d3:5e:4a:d2:2a:56:5b:e7:23:8f:
4d:2a:29:8e:db:05:95:e1:13:67:9d:9f:e7:93:f1:45:cf:27:
75:fc:69:c0:7e:3d:b7:85:c9:14:30:bf:cb:3a:e8:1b:34:f5:
f2:9d:02:5a:5a:5a:d2:d4:97:78:29:03:eb:f2:7b:4a:98:d7:
ab:b2:fb:8d:d8:a1:90:9d:36:68:00:3a:b3:ef:ab:79:57:90:
7f:02:8a:58:7e:4d:2b:b1:18:f2:53:19:bb:f1:b7:14:90:9d:
dd:39:01:b7:ea:4f:be:36:1c:8d:90:c4:7e:18:2d:27:ab:ea:
9b:6b:72:62:15:82:d0:d1:cb:b2:9f:d2:f4:cf:57:24:f9:1e:
f0:a5:f5:16:1d:65:a4:f8:37:f0:f7:6b:30:8a:61:c2:b2:c4:
35:80:ed:1d:a1:92:7b:2d:87:26:4f:01:d6:d7:a4:ad:8c:b7:
88:53:67:45:79:90:9d:5f:e2:54:8a:ac:f2:98:44:10:59:82:
54:bd:05:b2:c3:01:db:b3:6f:b2:20:86:03:4d:da:6a:6b:e0:
03:cb:08:7a:19:78:9f:0e:46:d0:30:90:84:67:d2:dc:1e:ca:
df:43:0c:ec:98:cd:98:83:97:34:cf:a0:96:51:c3:40:50:da:
d3:3c:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:31 2023 by rpki-client on console-ams.rpki-client.org