Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f6ad2a70-5b8c-3a57-bd8f-bef2d9b080ba.roa
File: f6ad2a70-5b8c-3a57-bd8f-bef2d9b080ba.roa (raw, json)
Hash identifier: YkgDPku4L+BGf+Su7qIdO4o/nuatGHaPrEEeAfkwq0g=
Subject key identifier: 4B:8D:1E:48:EC:5B:4F:79:9B:1B:19:70:D3:D2:C2:62:CD:9F:9F:DD
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858434D54E4580FF7833620DC8720
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f6ad2a70-5b8c-3a57-bd8f-bef2d9b080ba.roa
Signing time: Fri 22 Sep 2023 01:00:23 +0000
ROA not before: Fri 22 Sep 2023 01:00:23 +0000
ROA not after: Thu 21 Dec 2023 02:00:23 +0000
asID: 63023
IP address blocks: 72.14.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4d:54:e4:58:0f:f7:83:36:20:dc:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Sep 22 01:00:23 2023 GMT
Not After : Dec 21 02:00:23 2023 GMT
Subject: CN=50549224-640e-4307-a71d-bba112c52282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:60:27:e0:c3:79:53:78:4d:e4:63:b9:d5:
2f:ff:85:1d:7a:ad:53:57:25:9e:5b:fc:ee:ba:45:
bc:96:9c:2e:0e:e5:8e:f9:2b:c6:e5:54:7e:06:b2:
31:ec:45:e4:4e:bf:45:ac:81:6a:5b:8a:6e:42:65:
63:93:f6:07:3d:1c:11:44:6f:e2:f2:28:42:10:23:
3f:de:b2:4e:c6:bb:6c:14:9c:6c:f6:7c:f0:70:d7:
dc:37:2b:56:1b:76:7b:68:a6:e6:a3:d5:52:ef:59:
a3:38:b5:ba:90:cb:2d:5e:04:98:55:01:fe:20:84:
50:7c:cb:e9:1f:d9:01:19:c8:76:f6:30:50:2f:1e:
34:ff:e1:a2:93:9f:89:fa:03:a8:8d:e4:e5:75:ba:
9c:2a:fd:9f:d7:89:0e:6f:ca:2b:a6:d1:22:e6:72:
43:d3:45:d8:e9:53:26:56:3e:14:54:a2:2a:dd:9c:
c9:99:86:58:8f:71:68:8e:f3:66:af:1b:71:c3:cc:
22:e3:5e:a8:55:05:aa:57:f9:f6:d8:68:e0:ca:0d:
48:3c:39:ad:7e:9e:9d:60:6f:80:3d:ff:e7:d0:71:
33:54:80:b8:14:91:0f:e0:39:f9:10:20:ac:67:bb:
58:b6:1c:50:f8:cf:4d:f8:98:cb:c0:3d:93:b1:b2:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:1E:48:EC:5B:4F:79:9B:1B:19:70:D3:D2:C2:62:CD:9F:9F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f6ad2a70-5b8c-3a57-bd8f-bef2d9b080ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7c:b7:8f:6f:16:2e:93:b4:66:3e:4c:96:cf:06:27:b9:14:
b0:92:22:20:10:48:59:f7:51:da:b4:53:b1:db:b1:41:66:87:
44:2d:14:72:cc:04:cd:27:90:47:49:ea:cd:68:f3:6f:bb:ec:
f1:11:a7:9d:ee:3f:65:67:44:19:90:0f:a0:41:77:51:0e:f7:
29:8c:83:e8:09:d3:bc:0f:2d:45:56:16:6f:bd:fb:f1:a0:1d:
90:ad:38:ff:d6:57:8f:e1:a0:ec:03:d1:38:5b:be:ad:73:eb:
c7:58:18:6b:27:db:f7:e2:81:c5:e0:3b:71:a3:c3:00:10:17:
b5:b8:df:8b:b2:8e:35:ba:0c:27:ab:11:6e:be:bd:b4:6e:8b:
59:e8:d6:4a:a8:61:c9:2a:58:af:82:db:85:96:58:f4:0f:a0:
8e:68:61:eb:ce:33:8a:fd:53:23:50:b5:4e:f6:f8:5f:61:ac:
dd:1a:89:5f:85:3e:95:26:88:fd:55:5c:84:96:67:7f:1f:94:
4f:b4:3a:f7:d6:9e:76:76:cb:f8:5a:97:75:24:cb:9b:8e:58:
5f:b6:df:44:e8:51:65:88:86:29:38:d7:db:28:e8:aa:3c:d1:
f1:8d:30:a3:26:0c:65:9b:33:4d:de:92:23:7d:9a:ce:c1:0e:
ed:6f:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org