Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/be13bc71-137d-3ec3-978f-b4c74a27ee8e.roa
File: be13bc71-137d-3ec3-978f-b4c74a27ee8e.roa (raw, json)
Hash identifier: qK9iMuERTGTYlF2C97UKEM6pUi7nkl2/UhJXAUUgsaY=
Subject key identifier: 1E:3C:8F:A4:54:15:16:90:6F:26:04:C7:D8:35:EA:E5:F8:F3:81:42
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858432EBDD5A1BE4F02BA39049900
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/be13bc71-137d-3ec3-978f-b4c74a27ee8e.roa
Signing time: Mon 11 Sep 2023 02:01:53 +0000
ROA not before: Mon 11 Sep 2023 02:01:53 +0000
ROA not after: Sun 10 Dec 2023 03:01:53 +0000
asID: 834
IP address blocks: 72.14.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2e:bd:d5:a1:be:4f:02:ba:39:04:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Sep 11 02:01:53 2023 GMT
Not After : Dec 10 03:01:53 2023 GMT
Subject: CN=afb289a2-acb2-40aa-a19c-50a75ab28fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f0:f9:9e:b6:da:5e:7e:2b:50:8a:55:cf:47:
d7:3c:41:8d:3f:3b:a5:37:66:b9:65:ed:cb:17:b4:
14:e3:94:1e:ab:0e:69:2d:78:64:f5:02:53:d3:cb:
07:b5:b0:28:0e:e8:bd:5e:1a:af:b9:ce:85:5e:76:
43:84:bd:1c:50:e0:80:36:c5:8f:b0:99:b9:d7:77:
88:7f:35:21:e3:98:99:13:bf:79:d3:b7:6d:9b:47:
f3:b8:9f:43:b1:71:09:b6:63:09:51:6b:41:b6:b2:
2d:03:e2:cb:f9:20:0c:6a:f1:8c:6f:0f:4d:e6:a1:
4e:6a:1c:57:dd:f8:d9:a0:a7:27:29:0b:9f:ca:0c:
27:a4:cf:79:5f:ea:ce:b2:74:76:61:6d:31:34:8b:
44:be:f6:95:26:7c:7c:c7:9c:c8:18:35:a2:c1:f8:
b2:91:89:e7:68:49:2e:b0:08:18:44:b2:cb:83:7a:
1a:ae:d6:f1:20:70:fe:b0:ee:31:89:c3:61:c8:9c:
69:09:0b:68:03:ab:72:68:d2:f1:40:f1:1b:c2:13:
84:0a:51:98:a2:06:b5:6b:43:b7:7d:0d:0a:f0:bd:
97:e7:cb:5f:e0:96:e0:a0:5e:22:c0:58:81:05:f5:
44:9c:73:98:bc:82:43:fe:48:2e:03:51:e6:94:ca:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:8F:A4:54:15:16:90:6F:26:04:C7:D8:35:EA:E5:F8:F3:81:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/be13bc71-137d-3ec3-978f-b4c74a27ee8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d3:1b:4a:dc:6d:0f:f4:62:37:06:50:aa:8f:d3:f8:b0:61:
84:f4:55:fa:d5:c5:98:b3:ec:2e:e7:1c:6b:62:d5:37:04:87:
2b:84:48:38:a6:1d:66:52:9a:d1:b6:c1:2f:6e:75:75:68:8e:
99:b2:5b:a9:c2:75:6f:02:6f:82:68:9b:18:d4:3c:99:a5:30:
17:b8:e7:46:7b:87:bb:b1:db:f7:56:b4:3c:74:67:9e:08:99:
9f:2a:4a:25:dc:24:57:17:0e:34:74:b4:cd:1a:50:d8:98:da:
1b:b9:0e:42:ed:46:ad:4d:f8:db:53:4d:34:07:9a:bd:d9:2f:
26:e2:3a:78:b2:28:55:14:88:59:d6:a2:cc:97:c1:b3:f8:96:
f9:2a:46:49:0c:03:71:ad:2e:eb:05:ef:07:6f:1b:63:c2:ec:
a0:b8:1b:1a:55:3a:a3:c5:78:41:b0:07:29:b1:30:7e:c4:c2:
3e:71:d5:0c:72:68:c7:73:2c:c5:53:f4:b2:85:62:a7:83:dc:
96:34:60:54:a1:73:65:b5:72:65:77:f7:6f:60:58:86:ec:ee:
5d:07:2e:a8:5e:5e:f2:be:ea:79:08:8c:cb:f4:9c:d6:2d:88:
07:d0:1a:90:2d:fc:2f:5b:ff:09:38:b3:0f:cc:e7:e7:63:15:
63:6f:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org