Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ba9983e1-be3e-3db1-8e27-58b64a0bd655.roa
File: ba9983e1-be3e-3db1-8e27-58b64a0bd655.roa (raw, json)
Hash identifier: h5zw5d4WVS0f6bQDc51vy/sEQQpntunKdABe8akTixs=
Subject key identifier: BB:69:CB:F3:D8:C8:E3:5A:AF:DD:47:96:A1:58:C2:05:BF:3B:C4:85
Certificate issuer: /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial: 010D0C9F4328576D51CC73C042CFC1735D45C476
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ba9983e1-be3e-3db1-8e27-58b64a0bd655.roa
Signing time: Fri 17 Jul 2020 14:55:20 +0000
ROA not before: Wed 15 Jul 2020 04:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 27364
IP address blocks: 24.144.128.0/19 maxlen: 19
24.144.160.0/19 maxlen: 19
24.144.192.0/19 maxlen: 19
24.144.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:45:c4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Validity
Not Before: Jul 15 04:00:00 2020 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=a0fa955e-ee19-448a-8bba-254296f7964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:e1:7e:a1:21:19:d5:95:19:90:19:c0:ae:
22:54:eb:af:35:5b:73:cc:a6:8a:6b:04:92:56:d5:
70:5a:02:2b:36:0a:34:b9:18:26:a7:ea:ac:ba:0b:
1d:55:a8:6d:c1:fc:6d:d1:1e:a4:88:de:c2:b2:cd:
5b:0b:43:e3:07:87:a0:68:1e:5c:b0:e9:a3:cf:61:
d9:ff:e4:bd:ea:ca:3c:ef:4a:76:a9:76:6d:e0:b8:
1d:7f:e3:93:91:19:a6:00:05:6d:87:55:a2:bc:02:
af:0a:3c:bc:e8:99:27:2e:3c:3d:c5:52:06:24:c2:
47:f7:98:79:4c:53:f5:53:4c:82:94:25:fd:58:df:
22:f1:30:c0:f3:e9:31:de:60:69:23:f9:c1:3e:89:
d9:b1:bb:54:68:5f:c9:16:7f:01:d5:b9:3f:e6:97:
bb:9a:fb:d6:c1:a1:13:fc:a3:76:bd:11:1c:e8:1b:
71:7a:86:6b:e9:97:f7:b1:66:1f:93:8f:9c:2c:4e:
76:49:88:eb:f1:ae:c6:ba:3a:f6:39:14:2d:1b:3f:
9e:58:b0:97:9f:3a:7a:5c:1b:95:cf:ea:db:e0:5f:
27:7b:14:c5:b1:f1:b5:79:ba:af:e8:70:c0:80:a4:
f4:ba:ca:9e:65:89:8f:56:c6:26:67:da:70:c9:65:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:CB:F3:D8:C8:E3:5A:AF:DD:47:96:A1:58:C2:05:BF:3B:C4:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ba9983e1-be3e-3db1-8e27-58b64a0bd655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
X509v3 Authority Key Identifier:
keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:23:b9:0c:74:32:20:3f:84:57:1c:c4:ee:3f:17:53:6a:9d:
62:09:9a:79:ad:62:b2:24:a4:39:0c:a9:be:d2:05:cf:6e:9a:
bc:26:43:75:34:a7:80:34:71:a4:d8:9e:aa:d7:05:e7:f8:d2:
13:f7:b9:4b:b9:a1:54:9c:58:cd:83:8c:34:41:26:6f:c6:97:
42:19:a9:05:da:a9:84:02:a0:37:bc:e5:b8:8b:22:b6:11:27:
ca:e1:34:0d:6f:9c:e3:95:71:25:76:d8:ec:ec:07:c4:c4:ca:
de:e8:98:df:0a:c9:23:00:4a:c1:34:b9:51:99:45:f1:7c:49:
4c:a2:de:f2:df:60:e5:7c:8a:0d:5c:d1:bf:6f:71:99:e8:9c:
de:48:1d:90:ca:6c:d8:7d:76:7c:9a:3b:5d:58:94:bc:d9:5b:
18:17:1b:00:73:46:34:68:08:a2:71:d5:91:3e:5b:12:08:8f:
02:6f:ad:3d:83:1f:ed:a3:6b:70:20:ef:38:aa:5a:c6:64:63:
11:aa:30:6b:45:41:98:50:68:ae:68:8d:6f:c0:ec:34:3d:31:
7f:1e:cf:63:dd:66:48:38:3d:7f:f4:2c:75:08:6a:40:59:1d:
b0:1c:25:ed:73:67:63:f2:e9:f6:a2:0b:aa:e7:89:97:a2:d4:
fe:36:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-ams.rpki-client.org