Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
File: ca53acd4-8f16-3115-acc7-5837da260b64.roa (raw, json)
Hash identifier: GVzSCNVd16yCfNZ0bcB0NTbk5ibxW2Dg4VIRWt32SZQ=
Subject key identifier: 59:7F:DD:06:FA:B1:75:64:ED:02:36:FF:54:C8:80:51:CD:06:DE:94
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285844A36F7BD828332E58CCEB0D00
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
Signing time: Mon 22 Jan 2024 14:00:31 +0000
ROA not before: Mon 22 Jan 2024 14:00:31 +0000
ROA not after: Sun 21 Apr 2024 13:00:31 +0000
asID: 216061
IP address blocks: 170.205.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a3:6f:7b:d8:28:33:2e:58:cc:eb:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Jan 22 14:00:31 2024 GMT
Not After : Apr 21 13:00:31 2024 GMT
Subject: CN=604c504a-c177-4fc8-ac13-1f130ba94c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:dd:98:8a:d2:4c:d0:be:db:75:ac:9b:44:
20:90:dd:e0:f3:b7:6c:b3:68:b2:c7:1f:ae:3c:1d:
46:84:3b:61:5d:5a:fe:65:fb:e4:e9:00:a3:0c:32:
35:ed:45:a8:31:14:0a:a7:22:77:4a:5a:90:22:18:
32:9b:e7:b4:a7:64:f0:ab:7a:0c:46:5f:17:2c:3e:
98:14:af:0b:d6:38:29:cd:38:00:c7:e9:19:0e:5c:
f1:4c:06:7c:23:0b:f5:eb:23:2f:e1:54:75:1a:40:
e1:1b:fa:16:dc:96:b4:e4:20:55:03:e4:8a:6d:8f:
ac:58:ad:6a:d8:97:75:c1:23:44:6e:8d:20:07:f5:
21:13:2e:cf:f5:d7:02:07:24:40:02:47:66:3d:90:
60:86:bb:ca:fa:e0:2d:82:97:73:38:1e:2d:b6:db:
73:a6:02:94:85:d1:f1:06:b2:98:14:82:4b:bb:7c:
05:02:43:8a:93:a3:cf:c3:f6:dc:b1:51:98:c2:8b:
1c:da:35:39:50:16:c6:c3:06:7d:64:03:9a:b3:eb:
c7:4e:52:80:e1:ec:c9:df:71:31:71:7b:3a:28:2a:
90:b7:c8:b2:36:e6:be:e4:0d:1f:65:b8:f1:a6:97:
e1:3b:4b:dc:a9:7c:b8:83:63:72:ce:3e:33:4b:e8:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:DD:06:FA:B1:75:64:ED:02:36:FF:54:C8:80:51:CD:06:DE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ca53acd4-8f16-3115-acc7-5837da260b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:76:99:9a:ac:71:bf:27:dc:0b:73:58:31:9a:0d:9f:19:9d:
e9:20:34:11:ff:c6:50:b8:84:b1:e6:06:e6:2a:a7:08:9a:a1:
24:c0:10:5c:fc:be:e5:15:a2:d7:d3:57:d3:d2:d5:fd:0d:55:
be:7e:a7:67:4d:03:7b:0f:59:87:c8:6a:44:e4:9e:9a:6d:26:
16:c9:bd:06:a0:cb:19:84:c1:8d:33:4c:a0:53:7e:43:82:0f:
f1:10:8b:d6:11:03:67:46:d8:c3:81:0e:71:a9:99:9c:1a:93:
25:a4:2b:1f:81:8e:3c:43:52:e0:44:76:5f:89:af:17:e2:c9:
04:92:ae:8d:75:4f:e4:50:b7:9b:51:ad:e1:70:00:c6:5e:03:
1b:49:63:02:3a:43:68:c8:96:6c:f7:39:ca:5e:9d:2d:fd:a2:
b5:45:54:32:ff:dc:9d:38:e8:69:8e:4d:68:34:3b:2d:50:c8:
7d:7a:99:34:80:e0:76:52:5c:e0:51:3b:73:f4:b9:87:d2:8f:
4c:1f:cb:79:c2:c6:cd:84:32:55:96:7c:de:e6:e6:33:8a:56:
4e:0e:53:39:80:52:17:bf:b0:20:c0:90:9b:41:26:09:f2:d7:
7c:84:ad:f6:55:d8:c9:a1:57:d2:9d:f3:ff:28:97:9c:90:0b:
11:5d:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:06 2024 by rpki-client on console-fra.rpki-client.org