Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/90261a7b-5230-35e0-a70d-519065ad3f80.roa
File: 90261a7b-5230-35e0-a70d-519065ad3f80.roa (raw, json)
Hash identifier: xCoIjF6gejjmfRM/1VvHSDDdqMeVH4RMXdDfl6Kg0QY=
Subject key identifier: FA:86:AC:52:33:B8:8E:0E:7D:10:E6:64:66:F7:7A:95:63:12:67:B0
Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial: 010D0C9F43285842DB4754E9B6457140BADFB180
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/90261a7b-5230-35e0-a70d-519065ad3f80.roa
Signing time: Sat 12 Aug 2023 04:31:01 +0000
ROA not before: Sat 12 Aug 2023 04:31:01 +0000
ROA not after: Fri 10 Nov 2023 05:31:01 +0000
asID: 394177
IP address blocks: 64.20.216.0/22 maxlen: 22
170.39.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:db:47:54:e9:b6:45:71:40:ba:df:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Validity
Not Before: Aug 12 04:31:01 2023 GMT
Not After : Nov 10 05:31:01 2023 GMT
Subject: CN=fbaefba8-464d-4402-9729-8f672daf97a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:73:2a:f7:e6:81:f1:0d:54:ac:ae:c3:19:
5f:3f:cc:15:1e:0b:19:29:ab:5d:48:9e:c2:ea:7f:
90:1f:55:f4:95:dc:d9:2c:43:b8:26:77:bb:3d:ca:
56:78:28:e3:16:a9:f2:79:5b:56:6b:79:5d:60:70:
4e:59:b2:77:11:59:7a:e3:8b:4e:2c:69:29:29:17:
de:67:1a:0e:72:82:06:51:05:f9:cc:e1:fa:6a:ed:
25:5f:3c:df:5e:64:32:0d:36:72:9a:dc:1a:15:37:
d2:c2:ac:21:10:ba:03:41:87:4f:fe:39:de:f9:9a:
6b:11:5e:8b:a6:ce:d3:f3:ee:91:e4:27:28:61:b4:
9c:bf:65:57:95:6f:55:8b:4a:8f:cb:b3:80:d0:6b:
42:6a:d9:d1:21:ae:3a:f7:89:d3:70:45:c9:a6:9b:
21:81:da:a8:62:e9:9f:02:28:6a:ac:2e:e6:16:af:
27:36:12:cb:03:af:a0:78:a4:6b:5e:61:ce:e5:4b:
ec:f0:6f:1f:59:ec:e3:89:fb:75:0f:1a:fd:05:fe:
8a:cb:5e:0c:6d:b7:ed:a6:84:9d:0b:27:19:59:29:
54:51:92:cb:b9:42:0a:a4:16:1a:2f:40:66:b5:ab:
25:0a:79:0e:24:67:2e:b7:92:ab:5d:e1:42:3a:49:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:AC:52:33:B8:8E:0E:7D:10:E6:64:66:F7:7A:95:63:12:67:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/90261a7b-5230-35e0-a70d-519065ad3f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
X509v3 Authority Key Identifier:
keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.216.0/22
170.39.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:cd:d9:fb:dd:10:91:c4:95:54:b7:fc:0f:d2:7a:cc:3d:ca:
af:b9:60:65:ce:55:7f:f1:ba:77:6e:76:f7:65:18:f8:45:9c:
e5:ef:ed:ff:00:e1:6d:ae:ef:9a:48:3e:55:e1:ee:fc:dc:3d:
4c:e2:54:80:c1:99:23:1e:c3:87:83:f8:8c:1e:4a:a1:cd:0a:
c6:ab:6e:ca:6b:81:20:b4:2c:99:25:f7:5b:79:28:9f:02:71:
07:12:97:f6:0c:7d:ee:3b:02:f6:13:cc:19:0a:a7:04:7d:c4:
9e:4f:69:d4:22:0d:41:33:30:04:10:df:ad:4e:1c:c6:4c:0f:
c3:c5:22:d6:e7:cc:4b:94:5f:c1:dd:84:6e:6d:a3:c6:07:a0:
3e:df:4a:80:e7:5e:88:da:89:af:8a:2c:11:d0:ab:e3:cd:5c:
53:b8:55:44:2b:ea:d4:58:48:3a:c8:82:cf:1f:4c:b8:9f:51:
21:85:1b:ca:a0:48:58:76:8d:9e:d2:ee:6b:0c:a4:fa:a5:57:
90:4e:f2:2d:67:0e:39:d2:ea:09:c5:01:f1:8f:3a:fc:5e:f5:
6d:a8:3c:1c:95:87:2c:46:3f:55:44:57:92:4d:4f:fa:fb:3b:
1e:42:f2:73:f6:7a:14:2f:16:1e:a0:1b:e3:27:15:43:6b:f7:
ee:1e:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:50 2024 by rpki-client on console-fra.rpki-client.org