Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa
File: e0a348ab-ca16-343f-a8f1-12844853c4b8.roa (raw, json)
Hash identifier: OvGsXSR3T7tGsfqfDav+W0pxNNQKwej9gaCxWvCLnbw=
Subject key identifier: F2:8A:62:76:93:4E:E1:0B:EF:F5:22:93:7E:D9:AB:5F:98:D5:73:24
Certificate issuer: /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial: 010D0C9F432858450C2028CBF1C77C1360657200
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa
Signing time: Thu 29 Feb 2024 02:00:27 +0000
ROA not before: Thu 29 Feb 2024 02:00:27 +0000
ROA not after: Wed 29 May 2024 01:00:27 +0000
asID: 31867
IP address blocks: 162.213.130.0/24 maxlen: 24
163.123.178.0/23 maxlen: 24
23.149.192.0/24 maxlen: 24
2604:7c40::/36 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:0c:20:28:cb:f1:c7:7c:13:60:65:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Validity
Not Before: Feb 29 02:00:27 2024 GMT
Not After : May 29 01:00:27 2024 GMT
Subject: CN=94b38722-b060-41fd-8915-254a6bf0e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:df:c1:0e:f2:98:da:c3:4c:bb:81:97:b2:
c0:c5:0b:5d:57:ea:e3:0c:55:17:9e:e4:9d:22:99:
80:f3:33:d5:be:0a:c8:08:92:88:1b:04:04:a9:db:
89:ed:f4:3a:34:2d:6f:db:30:58:f9:ab:ab:9a:a8:
56:97:45:fe:c1:c3:45:92:30:50:46:a7:7c:62:07:
5e:04:5a:96:b8:71:69:11:bc:7c:14:66:c2:9a:19:
6f:84:41:71:46:8f:f8:01:bf:cf:8d:f1:7e:33:91:
8b:e9:51:d3:de:13:ac:8d:de:86:56:48:0a:e6:31:
ac:ae:f5:ff:38:f0:a2:fe:62:c1:6d:71:1e:78:79:
44:e5:ee:f4:83:41:15:4b:44:77:27:65:89:cb:bf:
d4:24:7e:ca:7d:71:b2:85:0c:9a:ae:2e:ce:54:23:
58:63:d5:c5:3e:fd:27:ef:93:14:3a:df:5a:2a:62:
e0:2e:15:fa:94:fe:9e:58:df:e6:3c:9c:5a:4d:44:
3d:3b:fe:78:bc:91:d0:b4:58:2e:51:07:ed:a3:37:
01:ff:81:90:9c:c3:36:11:d2:72:06:2a:c1:55:ea:
d6:50:70:25:3d:d7:20:51:4f:cf:1a:50:94:e1:8c:
d1:5e:26:c5:fd:a2:f4:72:be:e8:6f:db:99:e9:c2:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:62:76:93:4E:E1:0B:EF:F5:22:93:7E:D9:AB:5F:98:D5:73:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
X509v3 Authority Key Identifier:
keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.192.0/24
162.213.130.0/24
163.123.178.0/23
IPv6:
2604:7c40::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:5b:0c:f0:9f:2f:35:fd:85:f7:d1:10:a9:4c:81:d5:f9:a8:
3f:1e:93:6d:69:00:3b:5e:b4:27:21:4e:8b:95:61:21:8e:49:
47:13:a4:af:c4:9e:7a:d4:15:d4:1e:d6:bb:86:d2:f2:21:91:
8b:c9:d0:47:0d:0b:91:ed:f7:94:c6:a9:d9:e7:dc:05:3d:87:
62:a2:36:29:e2:ea:d3:8b:89:44:3b:bf:96:db:bf:6a:9e:cc:
16:ca:d1:c8:92:fc:46:10:1b:d9:02:34:21:41:b5:15:72:b0:
bd:64:b5:f1:e3:ef:c2:d2:10:bc:c0:fa:a1:7d:e6:43:4b:8d:
a7:e7:6b:9a:b7:4c:d9:d7:62:cf:c7:b0:ca:48:12:5b:e6:63:
62:1f:71:dd:2e:2a:a4:22:d1:f4:a4:c0:16:e6:2c:ac:21:72:
f8:2c:ce:d3:b1:5c:c6:cd:e6:5a:28:49:0f:42:18:e8:ba:ae:
c2:fa:97:11:73:28:1a:d0:fa:8c:81:04:8e:5e:11:b9:51:24:
73:2a:af:5a:dc:c7:21:fa:2a:c2:8e:eb:88:9e:f2:6c:17:82:
77:5c:19:0d:5b:55:b9:6c:7e:5e:20:a7:31:3b:25:f2:93:b8:
81:54:14:a4:23:1b:84:65:d0:12:a1:b6:53:90:a9:ff:03:c4:
80:09:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:49 2024 by rpki-client on console-fra.rpki-client.org