Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/72f6028d-d507-307f-ab98-048d45c4c330.roa
File: 72f6028d-d507-307f-ab98-048d45c4c330.roa (raw, json)
Hash identifier: 0b05vF8qcpRe5VJUgVWGKcwUxoYPZ/raAXEhNUJlIeI=
Subject key identifier: 4C:23:50:2D:3B:E1:1F:AE:78:EA:41:E2:F2:AD:45:A3:A4:5E:75:F9
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584448B42543E7CD661565147B60
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/72f6028d-d507-307f-ab98-048d45c4c330.roa
Signing time: Thu 21 Dec 2023 02:00:13 +0000
ROA not before: Thu 21 Dec 2023 02:00:13 +0000
ROA not after: Wed 20 Mar 2024 01:00:13 +0000
asID: 7018
IP address blocks: 72.14.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:48:b4:25:43:e7:cd:66:15:65:14:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 21 02:00:13 2023 GMT
Not After : Mar 20 01:00:13 2024 GMT
Subject: CN=d8f1ae3b-f461-4061-bead-5dd345d97b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:d8:5a:6f:1d:fe:00:90:8e:d4:50:ec:b5:
cc:3f:87:17:cd:08:b9:1e:4e:86:2a:31:28:c2:17:
46:93:23:87:d9:a8:d9:cd:37:c5:80:fd:db:fd:bd:
57:07:0c:e3:35:0d:04:7f:23:7b:d2:d0:71:2a:16:
c8:f3:fe:3d:36:2f:21:ba:f4:38:8b:97:5d:38:06:
b4:4e:57:82:68:4b:ed:3e:45:44:f7:b9:6c:09:03:
b9:16:8d:9e:cf:58:5f:8c:36:3b:a2:c9:44:27:57:
c3:9a:23:eb:aa:1c:71:55:69:d8:58:12:64:da:84:
be:7e:b5:ca:84:85:d4:05:2e:fd:9b:d8:0c:ea:cb:
ed:82:32:eb:1e:54:b7:74:cc:65:19:49:33:cd:8b:
4f:91:f4:c5:15:ef:02:0c:ed:6c:da:11:06:f0:6f:
b9:6c:a2:4c:c3:3f:80:b2:b3:32:b4:ba:b3:e6:65:
32:36:75:a6:50:6e:91:d1:5c:99:26:e0:3d:b3:5f:
1d:20:d0:c9:42:e0:43:58:1e:1d:8c:d1:ae:8d:ab:
f5:63:4b:0c:15:bd:46:b9:d2:bf:3a:f4:96:ad:b3:
d7:74:5c:06:71:1c:da:fa:17:9c:1a:43:63:cb:38:
1b:31:1b:ba:a8:04:b3:aa:c0:a9:97:3e:94:06:5b:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:50:2D:3B:E1:1F:AE:78:EA:41:E2:F2:AD:45:A3:A4:5E:75:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/72f6028d-d507-307f-ab98-048d45c4c330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:6b:8c:f2:56:18:80:3a:50:a8:2c:6e:4a:6f:23:c4:62:71:
70:fc:06:b7:3c:13:3d:3e:43:33:92:92:13:80:bb:04:4d:2e:
68:1c:f7:78:fa:c6:76:bc:aa:5f:ee:30:66:ae:65:3f:42:3d:
25:50:66:44:4a:07:c8:3a:74:9f:17:71:be:20:d2:b9:6d:e2:
e0:e2:10:67:4d:8b:6d:63:8e:db:af:53:ca:ed:b4:1a:bf:48:
fa:6a:1f:3b:35:ff:87:a8:c7:fd:c6:05:89:ab:1d:c4:39:a4:
22:b7:8d:4b:e0:bb:5b:21:cb:82:44:67:f7:56:5d:6e:d9:39:
68:dd:53:a6:70:5c:7c:ed:07:ee:48:f1:29:46:86:0f:de:e9:
c0:0b:33:3d:89:b3:34:bc:84:6b:7c:5d:b3:a1:64:0d:85:d3:
70:06:55:f6:85:5f:1e:5f:e2:c7:5a:2b:16:19:0e:59:d7:53:
7f:64:a0:71:e4:ba:92:57:b1:a5:8c:36:fe:b4:74:47:ea:60:
aa:fc:20:f8:28:56:d2:c2:35:2a:63:eb:68:ab:9e:58:33:55:
69:d9:f6:6d:c4:1a:68:11:e5:1d:c4:db:3e:82:4c:3f:5a:ad:
b4:00:6f:6a:f5:73:26:f8:ee:4f:7c:1b:d7:29:80:02:06:9b:
ff:da:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org