Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2aa47375-c3a4-31d1-b5ec-2c4833591ec2.roa
File: 2aa47375-c3a4-31d1-b5ec-2c4833591ec2.roa (raw, json)
Hash identifier: Fd/p9txL+yGn5CV1oJlqmKM6wrBfopBRLMgQYwL3FsQ=
Subject key identifier: 93:05:8B:FA:1D:23:22:2C:3F:CC:C5:87:7E:C8:24:8B:98:F1:A5:A0
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F4328583C9FC2CC1BF6E44ABB3FA9F800
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2aa47375-c3a4-31d1-b5ec-2c4833591ec2.roa
Signing time: Mon 17 Jan 2022 05:00:00 +0000
ROA not before: Mon 17 Jan 2022 05:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 1239
IP address blocks: 174.136.200.0/24 maxlen: 24
174.136.201.0/24 maxlen: 24
174.136.202.0/24 maxlen: 24
174.136.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:9f:c2:cc:1b:f6:e4:4a:bb:3f:a9:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Jan 17 05:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=f56a6061-46ce-47bd-be38-e782ac95572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d6:a1:af:54:0f:41:47:28:c3:8a:e0:2e:
e5:15:37:73:4e:17:71:5c:69:93:20:a8:fa:94:fd:
b4:fa:70:43:3e:84:ff:e6:c0:6a:1d:6e:da:9a:f9:
f1:20:fb:07:f1:9f:8a:c9:cb:3d:0e:03:97:d8:2b:
0c:d2:81:f9:ee:6d:d6:d4:cc:87:d8:56:8d:49:1e:
11:ed:dd:bd:e5:e8:15:5a:68:78:6e:6f:c1:67:73:
55:2b:52:71:93:fd:99:33:72:99:a2:34:d4:b9:65:
b3:e5:55:5e:57:b1:75:22:c3:e7:e1:10:52:47:a8:
e1:92:ac:a2:9d:9e:7e:16:29:9a:81:07:c7:a7:69:
49:56:60:35:eb:e9:3a:33:1a:10:51:73:68:7e:41:
d9:85:05:77:23:53:93:c5:51:69:38:f1:69:82:9c:
e5:bd:32:65:29:ef:b1:d3:dc:ab:60:d7:b2:7e:88:
b6:9d:d8:04:0e:7e:37:1b:cd:44:e0:5b:cd:b7:5f:
3c:68:5e:e7:bd:9e:81:bd:0b:cb:65:30:9f:4e:2d:
d1:a4:d4:e0:eb:ea:8f:c5:c7:3c:f0:25:14:78:de:
96:f5:5a:0c:3d:b1:49:7a:90:db:6a:15:e7:be:42:
36:9e:de:00:ba:00:99:48:c4:b6:45:7b:a3:e5:bd:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:8B:FA:1D:23:22:2C:3F:CC:C5:87:7E:C8:24:8B:98:F1:A5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2aa47375-c3a4-31d1-b5ec-2c4833591ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:aa:9b:ec:a4:8b:2f:66:25:40:f8:e6:5d:cb:a3:22:5d:cf:
d3:a0:6a:55:b1:ef:2b:66:72:34:8f:12:f1:bb:bf:8f:f8:0f:
d2:c7:52:4f:22:9c:d8:6b:96:38:df:50:48:85:31:a4:f0:8b:
c2:37:30:06:60:ba:22:d7:c0:b6:1d:ae:86:e8:56:5b:49:b3:
62:03:69:b5:d3:b5:ea:43:39:8c:7c:8b:6a:e6:ef:7c:c9:de:
f1:00:83:11:cd:f8:b5:64:ee:33:4a:53:3f:e3:d4:f1:25:31:
a6:4c:c2:e1:8f:c6:26:de:bc:87:6f:91:c3:20:e1:1a:13:60:
cc:cb:10:db:af:b6:72:ac:5a:9c:bc:53:14:b1:c4:7d:2d:38:
43:12:55:f3:0c:fe:da:b6:f9:4b:04:f6:fc:9a:aa:d2:17:77:
b9:02:7b:68:9e:95:a7:ff:d4:44:b4:8a:aa:58:a8:63:bb:68:
b5:c2:3c:02:ea:59:67:5c:04:34:f9:ea:35:b4:dc:6d:e9:6a:
e1:e8:39:0a:48:6c:e4:03:9b:49:bd:12:e2:44:58:1b:68:ae:
c0:ea:d0:ba:7b:40:3b:12:4b:59:fe:89:62:5e:29:ca:73:ec:
e7:1a:c8:79:d9:3e:bb:11:cd:fb:b1:e5:b7:b6:6f:c5:f4:54:
d8:b7:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:28 2023 by rpki-client on console-ams.rpki-client.org