Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b46ea627-8451-36e5-a7c7-865557f059b0.roa
File: b46ea627-8451-36e5-a7c7-865557f059b0.roa (raw, json)
Hash identifier: Dop2RpYSBlursT++1WeNjlfzgVhxOYK4g54rC0i1z4A=
Subject key identifier: 5B:BD:8C:8E:53:B2:03:48:E2:4E:1F:FD:27:6C:0F:76:16:C5:C9:61
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858424677F0F921018067C3308CC0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b46ea627-8451-36e5-a7c7-865557f059b0.roa
Signing time: Mon 19 Jun 2023 21:13:31 +0000
ROA not before: Mon 19 Jun 2023 21:13:31 +0000
ROA not after: Sun 17 Sep 2023 21:13:31 +0000
asID: 397563
IP address blocks: 72.14.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:46:77:f0:f9:21:01:80:67:c3:30:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jun 19 21:13:31 2023 GMT
Not After : Sep 17 21:13:31 2023 GMT
Subject: CN=e0fb7635-5239-49a9-bb99-b646a12dbf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:9d:c3:f1:ed:cf:41:4b:bc:65:5a:d8:08:
bb:b9:39:da:50:79:ec:94:8b:b6:8d:79:68:26:d9:
1d:b2:49:7f:78:07:9d:0a:dd:af:ad:b6:a8:57:01:
4b:b6:b9:b3:a2:d0:2a:e2:87:a6:38:f2:64:62:7d:
66:d6:79:57:b7:0e:15:19:f7:ff:54:1e:10:cb:57:
1b:ff:f9:81:ca:3b:b6:74:4e:85:3d:c7:2c:f5:97:
7d:59:6c:77:af:3f:29:05:6c:d2:3f:01:02:78:21:
da:51:60:e6:f8:f8:32:52:9a:98:a3:e2:5d:46:47:
52:8b:c3:f8:17:8d:ab:74:74:1c:39:f9:84:bc:14:
74:c9:32:d7:cb:1d:52:00:b9:cc:e0:1a:22:16:58:
3d:4c:60:93:68:e0:72:00:78:fc:d9:33:50:56:00:
4b:86:5e:03:b1:74:39:ff:db:c9:35:6c:b5:f4:d3:
32:f3:8e:e0:29:dd:5e:c6:16:e0:45:12:cf:f6:d7:
07:ab:be:ac:a1:da:4f:e1:7c:b1:28:35:7a:e0:ab:
d5:a3:90:6d:78:66:5c:96:2b:b6:a5:1c:b6:78:5c:
d0:27:c4:2b:13:2a:22:b1:d8:90:39:2f:c4:8e:50:
87:a9:89:b1:3a:4c:86:3a:c9:03:f8:a5:a0:6c:90:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:8C:8E:53:B2:03:48:E2:4E:1F:FD:27:6C:0F:76:16:C5:C9:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b46ea627-8451-36e5-a7c7-865557f059b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:0c:03:ed:07:1d:f0:2d:9a:06:85:7a:d9:38:51:42:1e:6b:
de:f4:65:d1:f7:33:aa:3a:4f:0b:41:8c:2f:6c:13:2d:d7:74:
bf:44:2f:99:ab:e7:a3:95:b2:60:a2:53:4f:a1:c2:d3:1e:67:
d4:e8:fd:e5:c8:1d:ef:1a:ed:d8:d1:4a:8a:ca:63:a0:bc:51:
c5:49:fd:b1:a2:9d:44:91:81:73:50:d3:68:01:fe:f9:f7:76:
8f:38:ab:df:e4:f1:4c:af:8f:56:61:10:22:78:ea:75:d3:ad:
ed:36:08:1c:29:18:04:e1:bb:3e:57:db:d4:95:c7:e6:0f:bb:
13:07:2a:a7:e1:cf:fc:89:da:3b:9c:7d:ab:86:cd:a0:bb:e3:
67:be:45:e0:e9:3f:b6:30:97:be:b7:3c:86:0a:03:e5:13:79:
a7:3a:31:4f:b9:55:a0:6d:84:73:2d:ef:de:38:7d:e1:51:89:
06:24:3f:b2:41:ab:e7:f7:a7:60:fb:6d:27:25:f4:87:b2:3d:
91:df:cd:92:ec:43:46:e0:bb:af:fb:cb:1f:40:93:f8:2d:87:
b6:d6:da:82:91:a9:04:b9:a9:cd:15:7a:9f:0f:2f:19:70:4a:
79:87:66:32:8e:81:c6:ed:e7:89:24:8b:a9:00:6d:8e:0e:32:
52:85:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org