Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2c51e5a-bd4b-3006-aa96-a32949bf5292.roa
File: a2c51e5a-bd4b-3006-aa96-a32949bf5292.roa (raw, json)
Hash identifier: kANM4NYGIDA2OpBdZxHlOEbrsANpuI75lEtT8r5Zy/c=
Subject key identifier: BE:60:54:11:CE:7F:F1:53:52:2C:40:2C:B9:AB:CD:BA:F0:A0:3C:71
Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial: 010D0C9F4328583E592553A6297C70BFA676DA80
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2c51e5a-bd4b-3006-aa96-a32949bf5292.roa
Signing time: Fri 24 Jun 2022 17:40:59 +0000
ROA not before: Fri 24 Jun 2022 17:40:59 +0000
ROA not after: Sat 24 Feb 2024 05:00:00 +0000
asID: 1239
IP address blocks: 199.15.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:59:25:53:a6:29:7c:70:bf:a6:76:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
Validity
Not Before: Jun 24 17:40:59 2022 GMT
Not After : Feb 24 05:00:00 2024 GMT
Subject: CN=2832e942-3b10-4fd0-99a9-cc96ecf84267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:a9:fe:3f:bd:61:ee:0d:f5:de:92:70:2a:
32:42:21:1a:be:ca:e6:b7:ed:7e:c6:1f:81:b9:14:
ab:1a:01:92:c9:b8:96:cc:2b:5e:2e:59:5b:5a:ff:
df:5b:9d:e2:c6:5b:2f:d1:87:23:74:50:42:91:b7:
b3:0b:31:5f:61:b9:0b:53:3e:e9:ec:4e:2c:34:66:
87:ca:b0:37:b5:78:f4:3e:32:bc:50:d6:13:ea:70:
03:56:34:6f:82:73:96:b9:40:5b:96:9a:4f:a7:0c:
d3:ac:11:eb:7e:5b:55:09:9e:e1:10:e2:fd:fd:80:
fc:2a:d0:31:13:34:91:1d:1c:cb:4b:1e:1f:24:a4:
7e:83:10:84:8a:17:ed:3a:25:a7:78:5a:5c:7f:8a:
74:2f:d1:ba:77:68:43:b7:f9:3a:b9:0a:da:f7:f8:
54:c4:14:3d:2a:f9:42:e7:f8:18:d0:66:a6:da:d9:
8b:0b:76:6d:bd:50:2e:41:d8:f5:64:d1:0a:85:f0:
c1:77:e4:8b:87:7c:e2:3e:40:52:46:20:40:57:23:
84:70:92:49:8c:59:d9:cc:41:5f:08:e9:c8:cc:2e:
62:a8:21:ff:f2:9d:ce:8d:c5:83:47:b3:24:29:b2:
e4:70:76:94:45:35:78:64:80:b4:8a:4c:b5:b2:8c:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:54:11:CE:7F:F1:53:52:2C:40:2C:B9:AB:CD:BA:F0:A0:3C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2c51e5a-bd4b-3006-aa96-a32949bf5292.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl
X509v3 Authority Key Identifier:
keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
sbgp-ipAddrBlock: critical
IPv4:
199.15.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:58:b5:53:9d:ad:70:4a:2c:03:55:40:3b:69:f4:ca:23:44:
b9:c8:39:43:51:7d:0d:66:a0:c4:b9:d2:dc:6e:4f:d0:f9:af:
6c:1c:45:ed:2a:98:5d:0d:04:66:c6:8c:4f:b1:88:a1:bc:9a:
50:39:7a:a3:79:44:28:cb:05:54:07:a1:09:bf:f7:f7:57:c4:
71:bd:aa:50:ef:47:70:05:f0:12:ab:d1:2b:cb:2f:47:2a:11:
45:d7:5d:91:8f:0a:83:2d:7e:ee:02:62:82:71:2f:8e:27:d2:
b2:fe:b4:19:e9:5b:3a:9e:f7:05:e9:de:e4:76:81:22:44:ec:
d3:d8:f1:c6:4f:59:3d:92:07:d5:a4:a5:03:6e:67:af:0b:c2:
b2:f1:5c:2d:59:ad:f3:50:f6:aa:d5:6a:f3:62:a4:ce:ff:6c:
6c:e6:97:99:aa:bf:b0:a3:00:30:d0:36:27:45:2f:73:02:c8:
6b:db:dd:5e:53:1c:fd:4c:96:5b:60:52:50:ea:5c:58:09:59:
cd:15:1a:2c:46:20:86:6a:6e:a8:2d:bc:5f:62:06:01:c7:81:
fd:86:3f:c0:90:48:d4:cf:74:5d:d9:4c:08:c3:96:93:43:0c:
16:b2:27:b9:f1:a9:f4:51:b9:d2:4d:6c:49:c9:d3:43:c3:1f:
b6:6d:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org