Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f580adfc-9043-37cd-9a98-defe342ccba9.roa
File: f580adfc-9043-37cd-9a98-defe342ccba9.roa (raw, json)
Hash identifier: 1m0RYHixNm+vPy+quCq0sbDErUFPlg/CkVi/KN1kemk=
Subject key identifier: 1E:9E:68:5B:1F:E4:D4:D7:C6:7A:74:D0:34:A4:85:BA:96:78:66:C2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584441B975B9959786005235D280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f580adfc-9043-37cd-9a98-defe342ccba9.roa
Signing time: Mon 18 Dec 2023 14:00:20 +0000
ROA not before: Mon 18 Dec 2023 14:00:20 +0000
ROA not after: Sun 17 Mar 2024 13:00:20 +0000
asID: 0
IP address blocks: 23.218.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:41:b9:75:b9:95:97:86:00:52:35:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:20 2023 GMT
Not After : Mar 17 13:00:20 2024 GMT
Subject: CN=dc946cc9-22e2-42cc-95f8-7bb0d8db1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:f9:dd:f6:7f:ca:ac:6c:0f:87:a1:f1:14:
33:2c:16:7a:76:27:a4:47:70:ce:2a:a6:ce:83:8e:
31:e0:6b:43:ac:09:e8:47:48:ef:ea:db:b2:5a:71:
13:00:e7:fa:e9:5b:2d:0e:a9:de:12:15:57:7c:70:
e1:d6:10:2f:2e:35:e9:93:7d:c1:f9:32:41:72:f9:
f1:a0:6f:32:0f:ba:e5:a0:9f:18:a6:b1:de:a9:27:
78:db:26:4f:a3:e1:f4:7b:32:e7:84:36:1a:45:6d:
9f:c2:04:30:43:45:cf:3b:7c:a3:42:94:66:8f:1b:
69:9a:62:3d:70:36:b3:8f:eb:49:42:39:5a:7a:dd:
1b:17:29:3f:ab:6a:47:0e:70:55:d8:53:07:56:46:
0c:a8:37:63:a2:59:4c:71:28:9c:56:4a:a5:f4:30:
39:a1:fc:48:c3:ce:0b:c2:f9:4d:50:ed:14:54:02:
67:e6:a7:2e:6f:68:17:b4:79:9d:92:12:56:52:f6:
5e:ad:a2:42:27:22:8f:74:9a:d2:d7:47:5b:df:91:
4c:29:55:7a:f7:b7:51:3a:be:c6:b5:d7:ed:3b:6d:
3b:91:fc:6e:6d:b2:5f:9f:ac:1a:be:53:13:c1:3c:
35:be:c6:f6:31:63:9e:a6:f2:48:ea:35:9a:72:01:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9E:68:5B:1F:E4:D4:D7:C6:7A:74:D0:34:A4:85:BA:96:78:66:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f580adfc-9043-37cd-9a98-defe342ccba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:3c:75:25:01:d8:9d:17:2d:e0:7d:65:78:52:44:ba:7e:bd:
35:63:51:71:9e:ea:0d:13:b1:eb:3c:f3:e3:c9:75:68:ef:32:
6b:a6:c7:b8:c7:a9:ec:3f:27:82:de:e2:b1:df:fb:73:28:8e:
15:b5:48:fb:b2:4b:20:5f:b4:08:26:58:78:17:82:39:3a:25:
e6:d9:b0:9d:b6:c0:6a:8e:87:57:7b:29:51:8d:39:ec:f5:b7:
7d:fa:bc:9f:de:19:07:aa:c0:ba:d8:36:b8:16:bc:1c:b8:53:
22:7a:24:1c:1e:50:36:7a:ed:c7:46:0f:33:ed:83:fa:33:9e:
29:cb:84:60:2f:bb:09:0c:4f:30:f0:cf:34:26:a3:99:50:10:
fe:37:22:90:f6:7a:66:f6:27:36:bc:f4:93:3f:fc:e4:aa:e8:
c6:57:81:86:d7:dc:57:23:1f:eb:7c:91:9f:55:11:f2:0b:60:
81:d3:49:83:d6:53:f7:ed:c0:c2:52:64:04:9a:26:4a:e9:5d:
d4:a7:9c:50:68:a5:d4:ed:bc:75:ac:36:99:b2:1a:76:c5:ac:
22:1e:b2:dc:a4:12:f2:4a:e4:f8:76:78:df:a6:b8:8b:fb:96:
a3:30:75:59:5e:ab:04:ce:71:5a:29:cf:b2:0e:80:97:a7:f7:
ac:b3:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:04 2024 by rpki-client on console-ams.rpki-client.org