Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/24b60083-3192-3fcc-ae3e-72ea779bb524.roa
File: 24b60083-3192-3fcc-ae3e-72ea779bb524.roa (raw, json)
Hash identifier: 0b3trZpSrhWNeVulk8E2RdZkaeMoJ7M7JOuCCadIZs0=
Subject key identifier: 01:19:1F:A4:63:D7:A2:B4:DE:C1:21:47:16:46:29:00:D2:75:1E:EB
Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial: 010D0C9F432858429C0E6688860DDC795332C800
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/24b60083-3192-3fcc-ae3e-72ea779bb524.roa
Signing time: Thu 20 Jul 2023 13:00:18 +0000
ROA not before: Thu 20 Jul 2023 13:00:18 +0000
ROA not after: Wed 18 Oct 2023 13:00:18 +0000
asID: 13347
IP address blocks: 134.172.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9c:0e:66:88:86:0d:dc:79:53:32:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Validity
Not Before: Jul 20 13:00:18 2023 GMT
Not After : Oct 18 13:00:18 2023 GMT
Subject: CN=73a831f5-0fdc-4bdb-9490-8d020fb01fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:53:a4:19:88:a8:d9:e1:82:56:90:a3:ef:
a3:95:41:82:24:8e:e3:c7:93:21:76:6c:a4:ad:95:
38:16:72:07:c5:2e:a8:fb:7f:6d:65:f6:09:f8:06:
7a:cc:d9:53:6e:27:ba:26:c0:94:18:a8:30:26:1f:
14:a3:b1:3e:16:a4:9c:6c:82:37:98:92:27:66:f3:
f5:10:7b:5c:6b:c9:c1:53:fd:17:b5:76:ec:c0:f9:
88:cb:c0:2b:02:4c:c8:91:36:d8:fe:95:c2:0e:80:
51:e9:aa:15:67:e5:6f:50:cd:34:bf:e6:fd:e4:c6:
98:aa:d2:34:b5:cd:eb:36:b0:bb:56:5c:e1:0f:bb:
cc:1f:ad:da:1a:a5:be:85:9e:4d:c0:d2:43:b2:0d:
ee:bd:16:35:2d:2c:65:08:fa:7c:35:b6:22:dd:86:
7f:54:e9:ea:8e:6f:1b:15:0e:48:dc:1c:08:22:67:
db:83:56:69:f9:36:3f:65:98:42:e5:cb:2e:30:bf:
06:3e:5c:66:f7:7e:aa:52:2d:c3:96:8f:d2:0f:f4:
21:98:0b:93:1f:b3:85:66:14:3a:f3:2d:26:b4:8c:
3a:de:6b:44:4b:b1:d8:c8:1b:02:75:61:e2:da:ad:
4d:66:ba:d4:fd:09:bc:78:15:50:d5:e4:6e:b0:f4:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:1F:A4:63:D7:A2:B4:DE:C1:21:47:16:46:29:00:D2:75:1E:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/24b60083-3192-3fcc-ae3e-72ea779bb524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
X509v3 Authority Key Identifier:
keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
sbgp-ipAddrBlock: critical
IPv4:
134.172.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:cc:b6:a9:09:28:b5:a4:a0:3f:a8:c1:fd:50:9a:43:72:53:
eb:55:86:9b:24:c0:e5:da:f9:56:54:dc:68:05:a1:d5:45:ed:
5f:bd:7b:ca:ee:bd:44:b8:92:dd:c9:6e:e4:f6:2b:5a:40:40:
f7:30:32:17:f8:9b:dd:b7:b1:59:b8:b5:7d:ce:a1:a9:85:ca:
22:f7:b0:37:46:69:4c:42:ef:a6:bd:81:0e:43:e1:bb:ee:f6:
aa:4e:73:50:1a:38:14:75:b9:a8:33:3a:02:41:fd:27:72:6c:
5e:13:d6:39:5f:89:eb:a9:6a:88:4d:cd:6c:c0:7e:a3:a6:f4:
12:cf:25:68:81:29:2a:20:99:c6:40:c0:da:33:11:6d:c6:16:
4b:7c:9f:30:85:36:ca:db:be:82:59:3f:fa:d3:b8:6b:27:2f:
be:d1:4f:7f:1a:8f:9e:8f:13:25:41:47:58:6c:5a:af:d5:8a:
bb:a5:05:b3:fd:68:ed:56:ee:e3:f5:01:07:05:5c:fc:ec:47:
52:54:f7:23:1c:1c:5d:24:44:d9:71:42:88:bb:0b:0a:4d:8a:
51:35:0e:09:15:1f:89:dd:6a:0b:8f:af:54:a7:df:77:c5:25:
bf:3b:58:4f:6e:8e:93:9d:85:5d:be:bf:5a:3d:d1:58:1e:66:
a1:c9:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:46 2024 by rpki-client on console-ams.rpki-client.org