Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5670f3ec-ddf3-324e-bd13-f6d180a8f209.roa
File: 5670f3ec-ddf3-324e-bd13-f6d180a8f209.roa (raw, json)
Hash identifier: xwRsGoyRl6ifCuzbtcMhj2l+UU6u9wOWt/jwlMklFq4=
Subject key identifier: ED:DD:BA:ED:0A:87:1D:08:DF:36:3F:0D:54:AE:B1:3A:8E:0A:2A:B6
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285843E3A63C5C3DA039B084B9C420
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5670f3ec-ddf3-324e-bd13-f6d180a8f209.roa
Signing time: Tue 14 Nov 2023 21:15:38 +0000
ROA not before: Tue 14 Nov 2023 21:15:38 +0000
ROA not after: Mon 12 Feb 2024 21:15:38 +0000
asID: 212219
IP address blocks: 173.244.42.0/24 maxlen: 24
64.64.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e3:a6:3c:5c:3d:a0:39:b0:84:b9:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 14 21:15:38 2023 GMT
Not After : Feb 12 21:15:38 2024 GMT
Subject: CN=dd44678e-aeaa-4e20-8d8f-acce26482864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:79:df:20:4d:4a:5a:93:1b:8f:bb:ce:70:
ad:73:41:54:27:78:7f:45:ed:79:3d:44:6f:2b:5c:
bf:ad:73:49:ba:f8:88:6c:06:44:3d:9d:cb:00:f9:
b1:cf:4e:8f:ec:39:0f:a3:8c:b8:9c:2c:85:e9:47:
ee:49:cc:bd:a0:48:48:92:38:eb:0d:ce:ef:28:f2:
da:d9:60:c2:cc:2e:00:89:1e:23:bf:44:45:fb:e8:
84:9b:f0:08:b9:3c:e1:60:40:f4:de:3a:78:73:59:
6d:57:76:a1:49:e9:8e:9b:17:cf:11:49:ca:ab:b8:
79:02:0b:33:e1:61:86:cf:c4:d8:de:60:55:9d:73:
31:3a:a1:d2:33:c9:24:d4:e3:44:ad:71:46:7c:e5:
92:84:7e:58:d3:c6:d8:d1:e2:bb:2f:36:2a:70:ca:
3c:0c:52:03:ba:82:99:f0:3b:08:b8:5a:23:41:29:
6f:d3:60:a3:5f:4a:94:52:f4:2a:9e:4e:36:47:01:
53:4f:58:2e:5a:e6:30:9b:c7:fd:87:04:b0:67:08:
85:87:95:13:84:9c:43:20:7a:cb:87:7f:86:bc:da:
a2:73:55:1b:4e:7c:b9:d8:be:68:30:97:4b:62:83:
33:d2:1f:0b:23:54:92:70:36:54:92:64:64:10:39:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:BA:ED:0A:87:1D:08:DF:36:3F:0D:54:AE:B1:3A:8E:0A:2A:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5670f3ec-ddf3-324e-bd13-f6d180a8f209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.97.0/24
173.244.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:71:b1:eb:d8:34:fc:fb:75:3b:75:89:eb:4f:30:4e:89:68:
33:e3:8f:9e:f7:c5:e9:b9:a9:a3:7b:19:0d:df:42:42:ea:e2:
0a:18:b4:5d:69:b2:f4:c8:ec:95:77:24:8b:c3:78:17:34:5a:
5f:50:fa:87:a4:3a:93:c0:49:40:3c:ba:aa:d3:36:2e:68:03:
d6:81:22:f1:fa:06:ad:4b:27:10:13:19:02:2f:d3:b0:98:03:
b0:57:13:9c:23:52:ff:64:35:68:4e:bf:f1:9b:b1:03:20:34:
46:5c:fa:1f:96:a9:3b:45:f7:58:0a:fb:df:3f:93:df:60:d3:
d7:8b:64:8c:8a:ac:62:9c:6b:ef:b7:1f:ed:fd:03:d6:80:79:
89:9d:e3:2e:8f:dc:db:f1:99:f2:26:b5:e2:2e:b7:b4:1d:8c:
4a:05:d4:6a:94:89:e8:2a:18:f7:b0:26:a7:e3:21:c5:0d:e3:
0b:5d:eb:d2:c5:c1:2b:77:e8:fc:80:23:f1:46:79:08:6e:5c:
ea:f8:5d:77:09:56:f0:ac:da:3e:33:68:63:d6:1d:42:ac:a3:
83:ff:0f:8c:be:91:d6:85:a2:0d:ba:0d:39:11:94:60:c2:b7:
0a:3b:3d:09:da:7f:5c:7c:5c:cf:a5:58:17:32:4d:bd:d3:f6:
d7:1f:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:06:49 2024 by rpki-client on console-fra.rpki-client.org