Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/86059522-5b22-32c6-85e0-89b9eb2ec8cf.roa
File: 86059522-5b22-32c6-85e0-89b9eb2ec8cf.roa (raw, json)
Hash identifier: hpePxfDGsj2cHU9xcZlputtGdn/DlGNXOYOBF20la2I=
Subject key identifier: E2:0E:AB:F2:08:4B:D9:2B:4F:6A:83:4C:50:A6:F3:D9:49:47:F9:21
Certificate issuer: /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial: 010D0C9F432858427EBE3486D65FEC63BFA64240
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/86059522-5b22-32c6-85e0-89b9eb2ec8cf.roa
Signing time: Mon 10 Jul 2023 01:00:17 +0000
ROA not before: Mon 10 Jul 2023 01:00:17 +0000
ROA not after: Sun 08 Oct 2023 01:00:17 +0000
asID: 393577
IP address blocks: 23.142.248.0/24 maxlen: 24
2602:291::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:7e:be:34:86:d6:5f:ec:63:bf:a6:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Validity
Not Before: Jul 10 01:00:17 2023 GMT
Not After : Oct 8 01:00:17 2023 GMT
Subject: CN=2eb57c17-c1ac-4a5e-a702-9ca3a2db4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:e1:be:a5:34:56:67:3c:4a:14:5a:a0:9d:
83:72:93:c4:bb:80:d6:45:ad:fb:40:a0:df:4e:99:
f6:a7:bf:11:d5:58:64:ee:ee:ba:1b:74:b3:e6:90:
5a:75:14:73:ef:8e:1f:97:7f:79:95:ae:8c:b8:f3:
5c:d7:ad:f8:e3:7f:a5:96:ed:12:67:c6:09:ce:e1:
5f:5c:ca:71:b6:a1:1d:4d:2b:41:8e:fd:f0:5d:36:
30:64:35:a3:87:17:70:a4:91:1f:2a:d8:e2:4c:35:
b3:11:73:12:b1:be:63:3a:32:9b:ce:43:67:58:9c:
55:18:38:4e:3e:88:31:9d:53:b1:b7:20:ec:30:6c:
e2:9a:5b:d1:a6:d6:53:44:4e:e8:f5:be:82:a5:a5:
9c:7b:49:5c:3c:50:e5:51:7f:41:34:7b:24:db:3e:
51:ed:8b:42:7e:a6:f8:9d:3f:69:d9:4d:6c:03:3f:
c0:8d:84:9b:f1:13:ec:ad:03:aa:ca:77:52:4b:76:
9b:f1:a9:7c:74:04:0c:01:e0:29:5d:c6:38:0c:22:
7e:90:88:a8:af:96:c0:96:2d:59:52:39:c2:71:63:
15:22:10:e7:f6:f0:00:47:73:75:15:a5:98:58:88:
29:71:cb:26:50:47:c1:83:ce:d4:bb:99:23:c2:26:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0E:AB:F2:08:4B:D9:2B:4F:6A:83:4C:50:A6:F3:D9:49:47:F9:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/86059522-5b22-32c6-85e0-89b9eb2ec8cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl
X509v3 Authority Key Identifier:
keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.248.0/24
IPv6:
2602:291::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:17:0c:04:b5:cf:40:51:37:8c:e3:1b:7a:11:9f:29:ef:fb:
b3:b3:2b:af:8d:71:be:ef:84:18:ec:37:62:da:95:e7:0f:1d:
57:fe:b2:e1:d7:75:76:da:88:7a:9f:fc:f7:17:fa:db:a7:fb:
bd:5d:e8:dd:0b:7c:cb:34:7f:d4:21:04:e1:56:96:11:8f:9d:
01:54:44:90:4f:31:58:57:a0:f0:99:24:f9:cf:b9:4e:36:30:
84:26:a9:98:ef:03:fa:92:66:bf:db:35:13:8e:33:c5:b3:28:
ef:39:33:cb:bf:91:68:98:96:da:2e:16:20:50:7a:13:24:f9:
22:cc:a9:ae:8d:aa:a3:76:a0:39:ad:66:15:80:9d:de:84:43:
30:bb:70:ad:7d:f2:ad:45:c0:78:4d:61:f1:8f:33:3b:f8:92:
36:0a:13:d6:24:33:86:b0:c0:c2:c2:47:6e:de:d6:f7:0c:e5:
68:39:72:24:e4:2b:cb:ed:67:ff:42:5f:c8:da:57:c7:a4:60:
e5:c4:43:7b:a9:ed:09:13:76:d6:39:5b:85:28:c8:51:50:42:
eb:88:91:27:4a:6f:bc:bd:1b:8c:6e:8a:87:cb:1f:b3:4a:e6:
70:af:1a:85:18:ba:b6:cc:7e:72:ae:28:ef:02:97:fc:30:b9:
de:6f:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:19 2024 by rpki-client on console-ams.rpki-client.org