Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35f6cbdd-7822-3d39-902e-73447c5a74aa.roa
File: 35f6cbdd-7822-3d39-902e-73447c5a74aa.roa (raw, json)
Hash identifier: z+UW1QObSIjdEiB6SxGus1Uti0EmtkpQ5CKi0927B6A=
Subject key identifier: 11:D5:51:31:44:9E:63:B7:0B:73:94:0B:FF:A6:6F:65:BB:11:50:C7
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837C09A502A40B23C2A9A130A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35f6cbdd-7822-3d39-902e-73447c5a74aa.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 19905
IP address blocks: 208.181.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:c0:9a:50:2a:40:b2:3c:2a:9a:13:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=74703bd5-4652-43c8-86ac-3192e016f0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:04:03:d8:5d:48:6a:26:41:2f:61:af:d9:
6a:39:9b:92:20:02:ca:d9:92:ee:bc:4b:1a:f7:c7:
25:70:17:59:13:93:ce:ba:fe:1a:5b:bc:e1:d4:e3:
a0:28:5d:90:ff:42:4e:a9:e2:71:24:77:96:4f:2d:
13:80:83:57:fc:77:e1:0c:eb:63:26:34:fe:79:36:
77:7d:90:30:27:53:c9:1e:d4:f3:e9:bc:81:d9:a8:
2d:45:40:50:82:bb:1e:c9:ad:41:4e:31:f9:a4:70:
57:73:d5:ac:48:aa:f5:cf:0d:ad:8c:1d:3d:a1:7e:
db:00:a8:01:6e:bb:b7:3b:55:70:66:e4:10:f6:81:
cd:ee:1f:f8:79:34:f1:52:49:72:e0:18:4e:2e:b2:
e7:c6:58:93:db:ef:63:fb:91:fa:44:1f:f2:6c:e6:
f9:80:0c:b5:dc:0b:4c:18:03:ca:1e:cb:aa:8e:e5:
c6:ce:76:a9:0d:f8:dd:ef:29:4a:03:0d:60:17:35:
cd:d3:a1:8d:a0:89:2d:31:dc:64:b8:cc:44:7e:b8:
99:94:01:a2:0f:79:4b:1f:b8:f6:60:58:ba:a9:f7:
c6:3c:d2:2c:ba:54:87:8c:fb:dd:ca:8b:6b:c5:1e:
56:9d:72:76:8e:c2:3d:69:44:f7:1b:40:eb:31:8d:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:51:31:44:9E:63:B7:0B:73:94:0B:FF:A6:6F:65:BB:11:50:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35f6cbdd-7822-3d39-902e-73447c5a74aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f1:7f:81:5a:f7:5f:c9:c9:00:11:ae:17:52:78:d6:57:9d:15:
0b:64:e7:a2:6e:a0:ed:20:52:1c:95:49:c6:99:10:68:52:29:
f7:71:cd:03:98:5d:c4:b6:71:0c:b1:92:8d:1e:48:f3:d2:19:
16:35:65:3c:99:dc:99:f2:a2:c1:07:19:e2:74:04:00:66:c0:
45:61:65:d7:58:8e:4c:b1:a5:b4:15:22:87:06:cf:c5:5a:1f:
bb:61:f9:81:51:44:d4:5a:b9:dc:83:91:57:c8:3d:0d:6d:d7:
dd:c7:a1:fd:77:29:34:b5:a8:84:5f:38:6f:63:17:55:a2:ae:
2d:01:d1:76:69:aa:90:aa:d2:4c:26:b8:91:fe:a3:d2:a5:b7:
08:9b:b7:10:17:92:dc:fe:fa:61:6a:1f:05:38:ed:8c:de:5b:
d6:40:0e:e8:bb:b9:47:5d:b2:28:0d:56:7a:86:2a:bc:44:88:
bd:49:c4:63:37:d0:af:de:04:d8:41:49:12:6c:e0:e3:4a:43:
82:ae:3e:09:90:d4:aa:5f:fe:1e:c8:cf:2d:ec:01:e9:6b:8a:
5e:f5:98:64:0d:c2:60:86:7d:17:fd:3f:b0:2e:7d:02:8a:d1:
2f:95:05:4d:21:c0:67:be:6a:22:2b:e3:e9:32:5c:d6:5d:dd:
33:43:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:01 2023 by rpki-client on console-fra.rpki-client.org