Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa
File: 345be5a5-a036-35fa-822a-3eeb91a464c5.roa (raw, json)
Hash identifier: QgKi77dJpeamKN0FvEfrLKreGPGUV8krRNCWHoYuXsQ=
Subject key identifier: C7:1E:93:72:2D:27:61:EF:7D:F7:27:15:BC:8A:DB:44:38:FB:F7:50
Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial: 990C81201FCD4598B24F27009CF4BBC2349706
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa
Signing time: Thu 27 Sep 2012 14:13:03 +0000
ROA not before: Sat 15 Sep 2012 04:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 393220
IP address blocks: 199.71.0.0/24 maxlen: 24
2001:500:31::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
99:0c:81:20:1f:cd:45:98:b2:4f:27:00:9c:f4:bb:c2:34:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Validity
Not Before: Sep 15 04:00:00 2012 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=ebb1c639-741a-4235-a7f0-aeddc7a07e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:53:8a:b6:0c:bb:2a:13:0c:71:1f:df:16:
53:d9:6f:36:22:0b:99:b4:98:e7:ad:c4:3b:8e:cb:
6b:1a:79:28:b6:b3:61:e9:22:1c:36:3a:dc:46:3d:
cc:fa:e0:40:77:ef:9b:b6:fd:04:a3:fc:ae:40:b5:
b3:6f:65:5e:88:9e:9a:19:65:c4:73:bd:b1:c6:62:
1a:bc:f9:b5:1d:49:1c:c7:e0:77:b9:8d:96:8c:44:
39:3f:9a:35:b3:5c:bf:0f:b9:d2:d0:85:1f:10:88:
71:f0:aa:b0:22:78:e8:2d:eb:58:4a:f4:a4:aa:9b:
ab:37:11:45:de:1d:b0:eb:3b:72:4d:94:1b:0a:7b:
b6:c2:e3:e6:9d:ac:68:45:37:22:73:d0:f0:35:ce:
8a:9b:53:c6:eb:49:c4:2c:2d:b5:2e:6a:a8:24:c5:
bc:f3:af:99:c4:da:4d:71:d2:4a:08:32:d1:14:56:
53:fe:4d:1b:3e:12:14:d5:23:cc:4f:3c:c8:aa:77:
b7:b1:d8:59:9a:06:b4:60:32:66:2c:68:83:5c:7c:
32:4f:f8:a3:ef:0e:3b:e1:d7:3d:7e:a6:d7:38:26:
29:19:32:70:f5:95:22:b2:25:4c:e2:f9:ac:51:53:
62:29:f5:e9:49:1a:e8:67:45:7d:93:f8:59:41:ba:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1E:93:72:2D:27:61:EF:7D:F7:27:15:BC:8A:DB:44:38:FB:F7:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
X509v3 Authority Key Identifier:
keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
sbgp-ipAddrBlock: critical
IPv4:
199.71.0.0/24
IPv6:
2001:500:31::/48
Signature Algorithm: sha256WithRSAEncryption
5f:46:85:f0:1b:af:a9:77:40:a9:35:71:87:91:6b:e4:9e:ba:
9a:d8:29:7e:bc:a8:8a:9c:a3:47:c2:54:81:93:86:ec:2f:b4:
2c:fb:9a:6c:70:c6:78:e5:ac:61:b3:ff:08:4c:65:40:a2:4b:
65:f7:26:56:fa:ea:d2:fc:25:f3:1f:f6:18:bb:91:6a:a0:be:
a6:c5:45:21:09:f3:f0:ca:0a:9e:2e:7d:9e:f5:8e:0e:66:46:
cf:4a:88:2e:05:b8:93:66:c7:e2:03:a0:8b:e9:da:25:68:42:
06:16:50:62:8c:b7:04:55:8c:84:03:a6:75:53:46:f2:ca:02:
68:17:ba:48:ac:ca:80:4d:b0:20:fa:23:77:48:cc:bc:e3:4e:
32:ff:ad:2a:b9:7d:65:0b:0c:75:27:1c:8e:00:10:42:09:68:
ae:1e:25:1c:be:a7:37:e9:2b:93:0f:04:4f:27:db:c6:eb:d8:
5d:bf:bb:80:f9:57:4e:f1:38:a7:0d:c6:31:55:b3:aa:c4:a0:
00:2d:73:43:9a:39:ce:4b:71:72:cb:c7:66:91:74:8d:40:84:
0e:ac:64:b4:b7:ae:a4:4e:fc:1e:b4:2b:10:c9:3a:30:aa:f1:
29:90:aa:ed:28:5a:ba:dc:d2:8e:96:47:0e:76:18:ed:0f:09:
5a:3c:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:22 2024 by rpki-client on console-ams.rpki-client.org