Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/02112e32-f0e9-32aa-8f09-1e8e165d131c.roa
File: 02112e32-f0e9-32aa-8f09-1e8e165d131c.roa (raw, json)
Hash identifier: Oy9B6abJcbzp4BpU49YsDRvcKDXnY2dUQJT6m0ng2aQ=
Subject key identifier: 11:D0:28:80:C8:47:A9:4C:3B:8A:AA:FA:33:4B:34:82:08:42:BB:C4
Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Certificate serial: 010D0C9F4328584444CE8107349ED12BABFC5540
Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/02112e32-f0e9-32aa-8f09-1e8e165d131c.roa
Signing time: Tue 19 Dec 2023 16:30:11 +0000
ROA not before: Tue 19 Dec 2023 16:30:11 +0000
ROA not after: Mon 18 Mar 2024 15:30:11 +0000
asID: 46307
IP address blocks: 199.26.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:44:ce:81:07:34:9e:d1:2b:ab:fc:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Validity
Not Before: Dec 19 16:30:11 2023 GMT
Not After : Mar 18 15:30:11 2024 GMT
Subject: CN=bea5fc0e-cb72-4b17-9c4c-523bfc388aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:22:07:1c:74:a2:ae:6b:04:1b:ad:8a:cc:
bc:97:ac:04:55:83:15:85:b9:04:88:3b:ea:9b:87:
b1:e8:cf:46:60:db:c0:03:d3:2b:1d:c5:93:de:66:
43:f1:a3:03:9e:42:00:7d:ba:64:1d:4b:c3:39:23:
18:cd:53:d5:14:60:88:17:ae:17:9e:dd:c9:94:de:
4b:fb:06:5b:9c:91:c5:db:ab:b6:44:4f:b6:6f:87:
16:5d:2f:b7:28:bc:4a:e4:34:cf:3c:50:36:85:41:
e0:91:8b:dd:ce:c6:a2:cc:4f:df:04:7b:ce:bd:36:
2b:da:11:9e:a2:9b:2a:de:e5:d4:cc:d8:a2:73:4e:
1b:71:0c:40:f2:57:66:e1:de:0d:eb:5d:57:00:89:
db:78:49:d6:a6:5e:3e:df:6b:dc:69:08:f0:3a:14:
1c:47:0a:96:c0:73:51:5f:f5:20:74:a0:7f:d2:52:
39:1b:10:88:b7:28:6c:6f:0f:c2:2d:a6:e7:1b:b5:
5a:23:56:2c:c9:97:53:8b:34:76:e6:79:05:28:a0:
fd:43:b7:45:e5:2a:90:4c:d3:86:0f:12:d2:88:94:
cc:6a:b4:f1:b6:93:95:bc:7e:f3:1c:37:3c:0f:42:
78:2b:f3:8b:2c:50:ef:7a:6f:22:53:22:85:18:af:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:28:80:C8:47:A9:4C:3B:8A:AA:FA:33:4B:34:82:08:42:BB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/02112e32-f0e9-32aa-8f09-1e8e165d131c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl
X509v3 Authority Key Identifier:
keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
sbgp-ipAddrBlock: critical
IPv4:
199.26.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:79:7a:6c:bd:70:eb:ea:29:45:6d:45:e9:83:70:bc:46:25:
c8:6e:66:bc:29:41:38:c8:e9:45:4b:55:26:7a:9b:ae:0f:1a:
be:42:8b:69:9c:02:94:d7:41:1f:4f:8d:b4:bb:de:59:64:83:
45:9f:6b:96:d8:62:14:0e:fa:b6:33:6e:31:1e:b1:22:67:5b:
cf:ab:87:bb:78:90:3c:fc:c5:f5:f6:dd:47:b4:f8:6c:fb:8c:
64:b9:71:7c:27:38:f9:b3:c6:58:3c:0e:04:d8:a8:e2:9c:18:
34:f3:9d:3b:7e:47:ef:0e:55:87:ee:cb:65:6c:74:86:98:54:
c8:5e:95:51:79:ea:24:78:04:23:d8:64:f3:2d:1d:1c:db:eb:
7f:ac:b8:3d:fa:17:ba:df:08:d7:88:54:b7:76:c4:cc:0f:27:
d0:c7:08:b3:b5:79:d4:ba:bd:61:79:43:95:04:e2:9e:ca:64:
43:1b:5f:93:11:4c:26:89:94:7f:dc:b3:b8:a7:19:a1:a5:9b:
f4:ff:7a:d3:86:a3:8d:83:20:8a:71:31:8a:08:86:cf:a5:d6:
9e:33:34:83:d8:e2:b7:69:07:35:cc:49:3b:a0:a9:6c:33:90:
c2:77:2c:0b:e9:63:a2:71:68:20:b5:e5:b9:dc:f1:c2:20:d9:
86:5d:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:04 2024 by rpki-client on console-fra.rpki-client.org