Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/4da9c1d4-a07d-30c3-b0d0-f3350c5b05d5.roa
File: 4da9c1d4-a07d-30c3-b0d0-f3350c5b05d5.roa (raw, json)
Hash identifier: t8SLmbrdUCj5+hXOZzEMjo1YNEq0LIgjXyuzfkk1ovo=
Subject key identifier: B5:84:98:5A:55:8F:6C:7A:F5:A5:05:D8:D9:2E:9E:DF:0B:BA:32:A3
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285841E46D984B9E1FFB86DCC50380
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/4da9c1d4-a07d-30c3-b0d0-f3350c5b05d5.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Tue 04 Jul 2023 10:29:53 +0000
asID: 1448
IP address blocks: 156.146.128.0/17 maxlen: 17
158.41.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:98:4b:9e:1f:fb:86:dc:c5:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 4 10:29:53 2023 GMT
Subject: CN=e15a86c3-834d-42de-8532-2e98a16ade8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:8b:2d:e2:39:b7:42:42:16:2e:cc:16:19:
78:4a:19:56:9c:a2:f4:72:02:75:d0:3c:62:50:8a:
8b:fa:38:59:60:db:25:3a:bb:46:97:c6:3a:77:49:
1a:c6:61:20:1d:c5:c5:c2:32:14:74:45:d3:c2:99:
03:b2:4e:fe:f0:c8:43:29:e1:d6:40:00:dc:a2:61:
4f:f9:aa:b9:d8:7f:9a:77:d3:59:e3:b6:96:93:64:
a9:1d:eb:5d:c0:f3:8a:07:14:cd:a8:7e:8a:15:54:
31:1f:d6:0f:a1:1c:bf:90:6f:7f:d6:3a:02:ae:0d:
1e:d5:73:62:40:82:d3:9d:aa:41:c2:b6:40:70:d8:
0c:44:db:95:f7:16:ea:ad:d8:33:ea:4e:c5:71:ef:
16:93:b4:d8:79:60:7b:da:3b:c6:60:56:63:cf:24:
bf:ed:a3:43:96:ff:94:30:fc:d0:e1:f7:8d:5b:89:
9f:19:5a:2a:fb:e5:fc:60:be:c5:75:1b:0e:08:0f:
c6:f3:ef:b7:23:cb:b0:47:d0:ee:03:1d:af:a9:32:
dc:e0:4d:49:55:5f:ee:7f:dc:e4:8f:33:0b:95:58:
2c:ea:fa:a6:4e:79:c7:15:10:a5:73:92:da:e4:77:
52:08:40:90:52:27:7e:fb:0b:ec:58:53:c6:7b:49:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:98:5A:55:8F:6C:7A:F5:A5:05:D8:D9:2E:9E:DF:0B:BA:32:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/4da9c1d4-a07d-30c3-b0d0-f3350c5b05d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:99:ca:40:83:e0:51:b3:0f:a8:4c:1b:8b:fc:fc:62:1e:4d:
b7:ad:25:c7:7c:b8:28:40:31:97:79:6a:83:32:ab:ff:fb:3a:
74:8b:61:81:04:66:d8:1f:4f:97:a8:80:b9:7a:bd:de:89:37:
e4:3d:ad:0b:34:26:43:77:ef:b6:a8:ab:1d:19:55:f7:c2:4e:
fd:ac:da:94:60:9b:c7:84:ab:8e:6a:4f:fe:7f:e4:1c:08:cd:
5f:c9:42:ba:0c:98:6f:58:08:b0:ec:1b:0f:95:7e:48:49:cb:
a7:e6:48:39:f8:55:c4:46:9e:31:7d:46:f6:c5:e9:bd:4a:4a:
9d:6d:2a:fc:35:02:d5:59:cb:84:d3:5e:c3:da:d7:40:3f:f1:
35:20:ea:54:b5:f3:6a:20:31:27:79:13:c6:65:ad:e3:fa:3e:
d9:9f:9c:d0:c4:34:f6:63:0e:07:cf:a1:c8:7c:3c:24:04:57:
0f:22:1b:22:1f:91:02:a7:e5:c7:02:4a:84:fb:bd:32:f1:97:
87:0e:76:7d:78:7f:b7:c9:e0:84:97:6d:fb:58:79:00:16:c3:
a3:27:d2:ac:f2:6b:3c:f1:3a:18:f0:ea:46:ed:72:0c:eb:e4:
e0:29:59:2e:75:7b:10:79:75:4d:a6:21:10:f7:bd:78:c5:f8:
b6:3f:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org