Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/d233c7aa-1695-3159-b195-1b7395ae7ae3.roa
File: d233c7aa-1695-3159-b195-1b7395ae7ae3.roa (raw, json)
Hash identifier: ypELEA+weDUgJUjySSL77riRZEnBfNfv0AaoIaZXmrQ=
Subject key identifier: CF:5E:C3:7B:4F:7F:68:AE:75:AD:3A:67:BE:09:66:3B:44:31:00:41
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285841E46D981D83427F565717ACC0
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/d233c7aa-1695-3159-b195-1b7395ae7ae3.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Tue 04 Jul 2023 08:22:51 +0000
asID: 3356
IP address blocks: 158.41.128.0/17 maxlen: 17
156.146.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:98:1d:83:42:7f:56:57:17:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 4 08:22:51 2023 GMT
Subject: CN=a8524685-f4a2-4ca5-add4-fa547f1d61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:f4:4c:68:a8:50:29:eb:7f:07:c0:4b:7d:
ab:c1:11:9d:5e:27:93:d7:b2:46:6e:a1:ab:0c:54:
36:c3:29:12:cb:e8:f2:47:a4:e7:f0:7a:0c:24:39:
67:cc:88:d9:b6:6a:b4:20:ac:6b:03:fb:20:e1:83:
c6:b6:18:52:62:e5:dd:fa:99:d6:4f:a4:a0:f4:18:
69:9d:16:91:72:7b:07:16:e6:d7:a1:ec:54:24:c7:
ba:9f:6a:1f:f8:27:e5:82:97:8c:07:73:3f:e2:60:
bc:1f:58:b3:7a:50:2d:ed:33:01:23:92:f1:ee:be:
a5:5f:86:76:3d:07:95:b1:69:89:2c:69:75:b3:16:
ef:f0:de:c1:15:a6:de:7a:6c:52:c3:2b:54:3f:9a:
65:5f:ff:96:97:ee:76:63:7e:da:a6:38:ad:29:c9:
32:97:42:92:ef:9c:4d:df:aa:18:59:f5:ed:55:17:
03:6d:2b:1c:4c:5f:0c:27:80:4d:a8:7d:85:44:96:
e8:9a:0f:49:43:48:f9:cb:18:a6:42:83:d7:3b:e2:
6e:93:fc:ab:06:5e:ec:4c:71:f5:aa:43:fd:a9:11:
d4:4a:77:b0:65:27:b3:34:7c:4e:17:51:f2:1c:a1:
e5:8c:12:5b:2c:0d:cb:7c:d2:1d:03:19:58:90:82:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:C3:7B:4F:7F:68:AE:75:AD:3A:67:BE:09:66:3B:44:31:00:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/d233c7aa-1695-3159-b195-1b7395ae7ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ca:ed:cf:1d:5e:5c:76:0a:66:51:1b:f3:15:67:e5:1c:0e:
37:95:04:36:8c:e1:99:47:38:5a:b3:82:a4:fe:63:d0:75:5d:
e4:65:7c:3a:48:a2:22:33:a5:26:17:04:30:f3:c4:2a:c8:e9:
be:2a:d3:c6:1d:5b:03:00:3e:b6:22:ff:8a:73:85:37:f4:63:
c3:6e:49:9a:63:fe:34:e7:d6:5f:27:a3:28:01:d4:9c:8b:9a:
c3:ce:b6:61:66:22:31:f2:38:35:d9:8d:7f:b5:27:4e:b6:42:
18:bb:4f:f7:e7:7f:49:92:b3:ae:a4:35:71:28:dd:b6:36:00:
3d:78:98:a9:44:cd:f1:86:07:3c:c3:f2:6f:5f:3d:65:1f:6b:
ab:66:40:3a:34:13:1f:21:10:9f:75:3a:bb:d8:ab:a1:97:ad:
05:cd:fb:9f:b8:9a:b9:c0:10:d8:56:24:d2:eb:8b:78:11:7c:
0b:b7:4e:db:48:31:d9:81:fc:4b:12:42:1e:95:bf:e0:8f:3a:
b2:96:c1:3c:de:ee:ec:b0:19:d7:08:0d:9d:5c:02:15:67:c7:
9c:5c:c9:11:c5:86:47:c0:15:11:f6:a7:24:7d:b3:79:ae:25:
c6:79:b5:d2:8f:a1:6a:2a:13:20:fd:d7:2a:e4:16:33:f0:58:
19:83:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org