Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/4c647ab5-e526-3135-8230-06db8a9cb2ca.roa
File: 4c647ab5-e526-3135-8230-06db8a9cb2ca.roa (raw, json)
Hash identifier: K2ox9D7zfJ/b7Eu5cryyz5i4AySZTUm1z2NoPMNY+LQ=
Subject key identifier: 0E:9F:DB:AD:76:70:B3:5E:44:A3:1B:4A:FD:6B:51:DB:6E:4D:67:A9
Certificate issuer: /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial: 010D0C9F4328576D51CC73C042CFC171C6613ADB
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/4c647ab5-e526-3135-8230-06db8a9cb2ca.roa
Signing time: Wed 29 Apr 2020 14:39:53 +0000
ROA not before: Tue 21 Apr 2020 04:00:00 +0000
ROA not after: Tue 02 Aug 2022 04:00:00 +0000
asID: 16717
IP address blocks: 199.116.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c6:61:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Validity
Not Before: Apr 21 04:00:00 2020 GMT
Not After : Aug 2 04:00:00 2022 GMT
Subject: CN=8814b9c1-3976-439d-ac68-868722110267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:c3:3a:b2:69:02:2a:44:b8:51:0e:f3:d4:
e4:ea:c4:10:e7:b2:20:2e:e2:df:f3:e6:1b:4e:3d:
49:a6:e3:41:95:ff:60:89:cd:f1:5a:92:b1:2d:71:
57:af:54:9e:0e:f3:52:1b:e3:ee:3f:4d:da:92:85:
45:7e:fa:cc:0f:bd:e5:3d:17:6f:f1:d0:41:c3:3d:
52:6f:b1:03:4a:35:d4:e8:3b:c1:87:41:51:cd:32:
09:41:49:3a:f1:be:e7:bc:c1:d8:7d:45:c3:ba:68:
c5:4d:5a:16:12:da:5e:5e:97:10:15:79:66:fc:cb:
ff:db:43:ce:40:3e:1d:4d:16:ba:c6:5b:b3:3e:98:
48:d8:cd:e4:8a:f3:0e:9a:1f:83:02:18:66:ab:9a:
c6:34:53:4a:1c:87:13:f9:9d:bc:c4:ff:77:2e:02:
3e:14:b9:26:55:3e:25:19:57:be:4d:c6:e2:1e:33:
ca:c8:7b:24:c2:c7:f9:90:8d:68:cf:15:9e:eb:21:
17:6c:2d:5c:dd:60:11:3b:18:a8:13:b1:80:ee:a2:
1f:7a:e0:94:a7:d3:0d:d3:2d:28:57:47:5f:29:f0:
10:7e:a7:22:83:d0:5a:6b:44:af:78:82:43:47:f3:
e9:19:b4:c2:d5:2f:03:1a:dc:a8:58:dd:3b:0d:15:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:DB:AD:76:70:B3:5E:44:A3:1B:4A:FD:6B:51:DB:6E:4D:67:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/4c647ab5-e526-3135-8230-06db8a9cb2ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
X509v3 Authority Key Identifier:
keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.116.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c8:e4:75:a8:7b:ad:63:f1:fe:b3:00:67:e7:01:b4:b9:f0:
6e:41:d2:a0:8f:d6:68:ff:4e:23:19:55:d0:55:6e:40:dc:9d:
f7:2a:67:02:88:5d:a0:39:fa:c8:44:9a:db:91:e8:50:37:ce:
96:9b:fd:65:f9:dd:4b:37:b4:82:1d:18:25:25:b3:8f:12:97:
63:59:8d:ba:86:21:fc:33:5c:a5:40:73:51:00:2b:2c:f6:50:
bc:34:63:23:2e:ef:88:13:2b:ba:16:a2:9a:eb:01:95:ea:bf:
01:00:97:61:67:7b:b3:ce:0a:10:35:7e:f6:fa:cd:3c:75:42:
e0:cf:c1:d3:3c:e1:82:8b:96:4e:64:d0:63:46:62:ee:8f:d9:
63:35:12:9f:1a:52:87:2d:cc:9b:98:0c:58:70:a3:79:41:09:
57:d6:7c:8b:1d:0a:43:62:2a:0b:e3:65:4c:43:bd:b9:20:1b:
1d:a6:cb:da:8a:3b:73:78:3c:da:70:e1:50:e9:fe:c1:73:07:
be:45:eb:a3:79:7f:4e:74:3d:dc:ce:7a:2d:83:1d:5d:56:fc:
2c:31:08:20:e7:f8:06:1f:d7:ec:fd:22:49:32:1d:32:18:74:
1d:c0:ee:68:fd:33:42:dd:03:cd:4f:67:82:34:1d:94:37:7a:
1e:86:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org