Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/056ac924-7f51-3b5a-a22e-e651641f0984.roa
File: 056ac924-7f51-3b5a-a22e-e651641f0984.roa (raw, json)
Hash identifier: glKCZLtLtjlmIhwlWTkY7c/gqFoOfOqtBPZhsYDUZj0=
Subject key identifier: C6:D5:DC:9A:20:0D:26:0F:AE:D7:84:EA:00:03:6E:BE:30:C1:44:88
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285843E316891B89C978517C1A9700
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/056ac924-7f51-3b5a-a22e-e651641f0984.roa
Signing time: Tue 14 Nov 2023 16:26:06 +0000
ROA not before: Tue 14 Nov 2023 16:26:06 +0000
ROA not after: Mon 12 Feb 2024 16:26:06 +0000
asID: 212219
IP address blocks: 173.239.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e3:16:89:1b:89:c9:78:51:7c:1a:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 14 16:26:06 2023 GMT
Not After : Feb 12 16:26:06 2024 GMT
Subject: CN=2b8c91c9-f2f4-4ddc-b861-b29274d9e37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:1d:5a:99:4e:32:e0:ea:92:92:77:95:e0:
41:1c:35:94:d6:25:9d:86:a5:45:42:fc:c2:39:5b:
ed:77:41:d0:54:17:2d:c8:9f:b5:7a:2b:63:4a:62:
fc:ec:c2:ed:bc:e8:86:e6:9c:aa:12:da:0b:4d:dd:
f3:19:cd:1c:31:f7:0d:f2:ec:2a:24:44:e3:cb:1b:
ec:e1:16:0a:e0:83:d8:07:7b:39:ca:dc:ce:38:fb:
ba:7f:eb:a0:13:09:26:90:4f:b3:89:9b:77:dd:49:
d5:38:6a:6b:56:9a:07:f8:0c:86:d1:14:e6:44:c4:
a6:ee:d0:db:b4:46:69:25:f0:31:9b:f3:a8:8d:50:
a5:fc:ea:47:b8:4c:f7:d2:37:d0:b0:90:a7:49:e1:
54:df:3b:21:ec:ad:a4:dd:9d:c5:6a:84:bc:b1:3d:
bc:83:3f:31:f1:c8:7a:f4:fb:32:da:2f:fe:7d:aa:
74:88:d3:9a:90:2b:1c:d1:0f:71:44:02:a0:db:bc:
0f:ac:c9:f8:a7:92:1d:62:ac:9d:77:62:75:3f:71:
12:ec:dc:f6:2e:b8:2c:e0:03:83:62:cb:a8:d4:96:
30:3f:b8:1f:0f:66:4d:f4:6b:9d:a4:1c:69:22:8c:
9b:01:50:a9:1f:06:a4:54:12:5f:36:f6:c5:06:47:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:DC:9A:20:0D:26:0F:AE:D7:84:EA:00:03:6E:BE:30:C1:44:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/056ac924-7f51-3b5a-a22e-e651641f0984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:39:ca:ab:f4:1b:57:63:f2:44:ff:a5:8c:05:22:8b:98:5f:
05:8d:f8:6c:dc:91:38:9f:73:ac:72:ad:d3:4f:02:6e:b3:66:
1d:42:22:e1:7a:ff:58:56:18:f2:90:0b:86:4d:55:d8:db:d4:
86:07:2d:7f:f8:82:42:23:4f:2e:f2:ca:8b:48:cc:9f:e6:88:
65:7a:f5:64:43:41:8d:37:98:3e:6a:9e:1e:c7:be:6d:d3:f2:
d7:82:d3:b3:22:d7:96:ea:c6:69:39:75:4e:3d:2b:94:1c:6c:
76:c9:fc:a6:dc:66:82:24:a4:c9:01:d3:9c:a7:25:06:e3:3c:
10:62:d5:4f:45:c7:b0:c3:d2:62:8a:3f:38:b8:77:15:5e:20:
01:eb:49:bf:85:c6:6d:6f:d0:66:b8:7a:91:9c:b6:26:c8:94:
48:1c:2b:ca:ff:f5:4c:1b:4a:d4:05:b3:50:9e:27:4e:8b:98:
e8:0b:e6:59:89:8f:21:28:cb:90:14:6c:4b:00:c2:34:58:72:
5f:12:36:04:cd:ad:56:28:25:aa:45:21:17:dc:4f:5e:73:d2:
56:fb:83:03:93:40:77:2a:eb:18:48:f0:7e:89:69:cb:3a:77:
9d:9e:c6:74:3d:29:36:aa:cf:97:a6:66:0a:1a:28:dd:55:cc:
c8:f9:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:06:48 2024 by rpki-client on console-fra.rpki-client.org