Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/aba9f027-4c28-3370-877a-ab8e3f590a43.roa
File: aba9f027-4c28-3370-877a-ab8e3f590a43.roa (raw, json)
Hash identifier: cY/iAidi9FxUsX4KEJUceVDFCUhYJUeHBTTHsF0fBlA=
Subject key identifier: A3:3B:B1:20:E2:3D:DC:FD:48:18:A7:CB:58:CC:5E:6A:C1:CE:05:80
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F4328584468CF0B8FD2DA6557CFE241C0
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/aba9f027-4c28-3370-877a-ab8e3f590a43.roa
Signing time: Mon 01 Jan 2024 14:00:21 +0000
ROA not before: Mon 01 Jan 2024 14:00:21 +0000
ROA not after: Sun 31 Mar 2024 13:00:21 +0000
asID: 49286
IP address blocks: 128.254.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:68:cf:0b:8f:d2:da:65:57:cf:e2:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Jan 1 14:00:21 2024 GMT
Not After : Mar 31 13:00:21 2024 GMT
Subject: CN=0db03b73-dc0a-4e8d-99d5-b1f7a08cb123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:c3:ea:c6:a1:58:38:d0:1a:79:57:b1:86:
12:d7:09:ba:02:eb:07:3a:10:95:ff:6c:18:10:62:
dd:45:24:72:0f:c5:3c:25:7b:60:c1:c8:74:1b:18:
c7:23:3b:b1:a8:08:10:4b:d8:5f:9b:fa:f5:82:85:
b3:7f:09:3f:14:9c:0d:b7:15:53:f5:2c:06:b8:cf:
5f:64:d0:14:49:78:ae:ff:50:59:78:2d:de:f5:d8:
f4:87:92:55:8d:b2:a3:45:66:8b:2e:c8:4c:ba:c2:
ae:dc:60:98:11:3f:08:da:fe:56:d7:5f:ec:49:11:
73:ea:93:87:f7:50:87:bd:69:27:f8:5d:c1:62:5e:
4a:0b:7b:74:3c:3c:03:29:b2:d8:9e:08:da:73:74:
66:0e:0f:23:a0:22:65:e3:ab:76:73:63:80:b0:53:
83:d0:d5:0b:33:0b:69:55:4f:cb:ed:0e:57:bf:96:
f9:6b:5d:7c:78:8f:0f:7d:33:13:98:ea:c8:58:ca:
30:8f:93:41:ce:8f:8d:d7:10:1d:f0:09:a1:f2:02:
2b:a8:e3:b7:7c:3f:a1:fa:9e:8f:4f:52:27:ee:32:
fb:3a:03:60:84:e1:05:db:9e:bd:b9:4c:d0:1e:e3:
0d:62:4f:9b:fa:39:10:66:a7:6f:c1:c3:ee:17:08:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:B1:20:E2:3D:DC:FD:48:18:A7:CB:58:CC:5E:6A:C1:CE:05:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/aba9f027-4c28-3370-877a-ab8e3f590a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:2c:d6:76:67:6a:56:94:23:87:78:85:d2:93:51:8f:b0:e5:
01:a3:a9:a4:ca:17:5d:f0:3f:c0:7b:f7:7e:fe:6a:84:df:64:
62:66:7d:16:b1:71:63:24:13:49:d8:09:8d:ad:a3:26:c8:a8:
d5:fc:ea:44:7a:b5:89:f4:87:59:2f:79:01:9d:6d:7b:c8:b0:
90:ad:cf:fe:2b:27:92:e4:39:0c:c5:54:7c:ff:34:76:ef:54:
c4:cb:ab:86:f0:b0:44:30:ac:83:eb:ed:cb:57:cd:cc:1e:c2:
9b:75:aa:da:ba:0d:30:11:f1:1c:1f:78:bc:88:00:6c:62:05:
ff:09:94:d8:b7:79:0d:52:93:35:6b:bc:5c:b8:7d:ef:9c:7c:
92:4f:03:91:29:bd:99:8c:4a:e0:03:14:4c:62:86:0d:f3:fe:
75:f8:14:47:ed:65:2e:5a:c6:d7:2f:ba:58:96:f4:d9:77:19:
ef:cd:53:2a:7b:39:cb:4b:da:96:6b:d6:24:35:0d:ce:37:64:
fd:c9:a7:fb:a8:87:19:6f:39:93:8f:ea:bf:36:4b:f5:e5:9a:
90:5a:e6:dc:ee:00:f0:74:5d:91:a9:dc:cd:52:77:39:99:5c:
62:1c:ca:eb:45:b3:d4:1b:1c:34:b0:bc:36:1b:d8:a8:1d:d6:
af:43:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org