Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/a8a6ddbc-f6e5-3a9b-b2f0-4fdb3fd38f06.roa
File: a8a6ddbc-f6e5-3a9b-b2f0-4fdb3fd38f06.roa (raw, json)
Hash identifier: GqMNdhS9B0CVUWI3zTpjK3i7IKBUhgR1TKkWmKR9yq8=
Subject key identifier: BC:E0:BC:1D:11:88:48:3A:61:8A:84:53:25:C4:DD:F7:E8:A6:76:9D
Certificate issuer: /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial: 010D0C9F432858372C911F7A0868D3836C97BAC0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/a8a6ddbc-f6e5-3a9b-b2f0-4fdb3fd38f06.roa
Signing time: Wed 08 Jul 2020 04:00:00 +0000
ROA not before: Wed 08 Jul 2020 04:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 168.238.4.0/24 maxlen: 24
168.238.5.0/24 maxlen: 24
168.238.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:2c:91:1f:7a:08:68:d3:83:6c:97:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Validity
Not Before: Jul 8 04:00:00 2020 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=bec1e5d2-2a70-4294-83ef-4dfe4c0b0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:38:cb:0b:45:c3:f8:d5:58:9d:68:d4:9a:
72:3d:60:6a:b9:5f:6d:93:c3:56:c4:d6:73:46:8b:
08:06:96:d8:de:e7:0d:16:df:fe:b6:a6:28:ff:e7:
da:60:18:36:54:fa:20:d3:2d:1f:48:a5:2f:0d:a8:
8d:f4:d2:f3:90:b1:f5:1f:cf:50:bd:b3:59:1c:e4:
22:03:61:df:ad:50:d7:61:66:05:cd:6f:be:9f:02:
d1:ba:70:37:72:34:74:59:0b:e1:d5:39:d7:80:b7:
8c:af:a5:d0:00:a9:d4:73:4f:97:6c:97:b5:9c:b4:
16:78:ef:29:c9:4f:e9:8e:a8:4f:f2:a7:47:a5:37:
17:72:8f:fd:1a:bb:74:bc:e2:1f:9e:ac:80:4b:6f:
2d:5f:58:3b:16:ef:c7:6f:1d:7a:a1:b6:b4:3a:33:
2b:de:0f:4b:61:7b:5d:c2:c3:7f:95:52:0d:b7:9f:
0d:e8:65:46:23:f5:c7:72:88:5d:e8:2e:00:7f:97:
c7:f4:21:ed:0f:ba:43:08:a1:d8:ed:5c:91:0d:9b:
d9:71:72:43:87:c0:3c:93:2f:e7:a9:90:6c:39:4b:
03:7b:d5:ee:dc:aa:cb:06:59:54:af:48:58:af:c1:
d4:b1:fc:70:b5:fe:bb:5a:d2:b4:76:c5:ce:96:25:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:BC:1D:11:88:48:3A:61:8A:84:53:25:C4:DD:F7:E8:A6:76:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/a8a6ddbc-f6e5-3a9b-b2f0-4fdb3fd38f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
X509v3 Authority Key Identifier:
keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.238.4.0-168.238.6.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:7c:80:07:21:bd:68:35:e6:f7:8d:9a:88:ce:e8:54:aa:ee:
c2:f6:c4:d1:8d:c6:62:8c:aa:8f:28:3b:13:92:db:43:05:89:
35:c5:ab:3b:8d:d2:bf:3e:0f:af:31:10:e1:ce:76:bf:48:09:
f2:25:90:3b:bb:a3:1e:83:45:5d:bc:76:b0:2c:cc:8b:e1:70:
b0:d1:5a:66:5f:b2:4c:17:b1:2a:43:13:f4:79:a3:c7:4f:c4:
9b:0a:46:96:e7:b6:6a:cc:94:42:05:70:e2:3c:0f:7a:38:64:
22:89:ba:fb:e4:f9:22:6b:d0:d9:47:db:63:32:d6:77:38:f7:
a4:2f:4d:04:f7:56:31:dc:d3:32:6e:87:e0:29:9c:13:b5:31:
12:d1:85:9c:a4:77:26:b6:e6:cc:fb:1f:6a:d5:d5:46:0f:fa:
7a:a5:01:d7:57:28:c0:c6:6f:28:87:ff:ff:93:44:50:d7:32:
dc:ae:63:89:15:d3:f8:59:70:58:fc:e5:66:c9:fe:76:a1:78:
3c:4f:15:c2:d9:ec:2a:5f:2e:61:dd:5d:4b:83:47:47:9b:4b:
d3:90:be:30:df:5f:d5:ac:cd:5a:d9:f9:bc:cb:bb:80:53:c3:
2a:ea:8e:37:d4:f5:07:ff:b7:5e:02:56:6e:5a:76:f5:d6:c7:
11:fa:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:23 2023 by rpki-client on console-ams.rpki-client.org