Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/78bf18e8-efd7-3f73-9c33-42a44dc39edc.roa
File: 78bf18e8-efd7-3f73-9c33-42a44dc39edc.roa (raw, json)
Hash identifier: V+Fpo58NSsWX3esPADkNksu1HzeYumnY+AktlmqQcuQ=
Subject key identifier: D8:AC:54:28:D8:E3:09:1A:6A:D9:5C:06:CD:8D:80:A6:67:9E:1B:51
Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial: 010D0C9F432858429C0E65FA81D11BDE18FA6800
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/78bf18e8-efd7-3f73-9c33-42a44dc39edc.roa
Signing time: Thu 20 Jul 2023 13:00:18 +0000
ROA not before: Thu 20 Jul 2023 13:00:18 +0000
ROA not after: Wed 18 Oct 2023 13:00:18 +0000
asID: 13347
IP address blocks: 134.172.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9c:0e:65:fa:81:d1:1b:de:18:fa:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Validity
Not Before: Jul 20 13:00:18 2023 GMT
Not After : Oct 18 13:00:18 2023 GMT
Subject: CN=bb9a6795-3ddf-46aa-910c-ab1b682f56b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:59:29:6c:74:3a:78:d3:aa:da:db:f3:a6:
14:4b:e4:4a:8e:8b:0a:08:64:92:67:5d:aa:f7:8c:
f4:bd:89:fe:ae:ff:f2:c3:d6:a7:39:36:56:5b:7a:
9f:b1:c2:b1:d7:f2:5c:af:9b:44:a1:b0:26:9d:da:
58:6f:90:0e:9f:b9:14:e0:6a:a4:27:8a:26:2d:30:
ae:d3:5b:44:06:61:1c:94:60:b5:c3:f6:b5:11:5e:
b8:4f:8e:50:94:ae:80:ce:0f:7a:9c:d3:08:88:0b:
bd:f9:41:3d:80:44:e1:03:fa:c0:05:53:4c:15:c5:
12:b6:c1:8b:2a:aa:02:9e:45:ec:30:75:a3:f5:b0:
d2:33:b4:a9:bc:d3:55:00:5a:e2:f2:f1:4f:85:6f:
83:b8:35:6b:4d:09:99:5a:02:03:90:d3:0a:79:00:
5f:fe:b1:aa:69:2f:c7:20:9c:e0:3b:7a:69:83:4e:
c9:f4:b9:02:b9:69:fe:e2:6e:59:35:34:28:cb:ea:
70:01:ed:da:5b:e1:6d:ce:e1:69:f2:cf:26:76:de:
0f:a7:f9:8a:49:4a:e0:ef:cf:02:f3:08:03:4f:3c:
7f:7a:d0:50:dc:9c:04:6a:61:6d:5a:9d:4f:81:50:
a5:38:5b:26:77:80:cb:6f:a1:80:e7:bc:82:e6:b6:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:54:28:D8:E3:09:1A:6A:D9:5C:06:CD:8D:80:A6:67:9E:1B:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/78bf18e8-efd7-3f73-9c33-42a44dc39edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
X509v3 Authority Key Identifier:
keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
sbgp-ipAddrBlock: critical
IPv4:
134.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0c:d8:6a:73:01:e3:0f:30:f1:1a:11:22:89:54:6a:99:0f:
68:e1:99:62:57:26:8e:d6:40:9b:49:48:0b:5e:be:ae:95:9e:
c1:78:73:49:17:13:bd:e6:bc:bf:77:c1:14:be:e8:e4:c8:87:
36:d3:b4:77:a4:f1:81:08:c9:0c:32:0c:6f:a3:b3:82:df:98:
38:7d:c2:62:24:1b:04:0e:77:fe:79:07:95:f7:47:65:ef:7e:
cc:65:a7:de:75:2c:1f:a9:7e:4a:86:3b:7a:42:1d:95:31:98:
40:73:da:6f:c3:29:05:54:27:64:54:25:18:81:98:60:97:b8:
b9:d8:21:67:44:81:50:2e:d3:6e:34:a8:8d:ab:5b:e9:70:5b:
8f:7d:10:8f:22:7f:fd:7c:a5:26:b5:62:9f:02:22:64:75:0a:
a4:b3:5d:a4:27:38:54:b4:c4:fb:b7:81:3f:17:f7:12:7a:f6:
fc:77:7d:46:99:39:d6:1d:db:5e:84:db:bf:95:f0:44:02:7f:
d7:48:d9:67:3b:f2:8d:4f:17:c6:40:44:6c:7f:62:72:93:8d:
48:c4:e1:ed:a3:b4:62:77:65:ef:50:92:38:29:2a:e4:ca:b4:
ee:76:17:f5:63:6c:9c:9f:00:83:4f:3e:53:99:79:eb:e8:55:
ff:7c:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org