Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa
File: 43272661-bc0f-30fb-bbd4-fe85b45988bb.roa (raw, json)
Hash identifier: H6nntOilEJ04xLVb6UboCBS5VnH7Aiad8qLYRiSFEaY=
Subject key identifier: FD:83:6B:D7:1C:CF:E3:16:CC:D3:28:34:12:0D:FB:BB:03:09:DD:A8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285845805D75C6B04B00222F33468C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa
Signing time: Tue 09 Apr 2024 12:00:00 +0000
ROA not before: Tue 09 Apr 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:80:5d:75:c6:b0:4b:00:22:2f:33:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 9 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=c4b4eb41-e48e-4eae-b16f-0c11e2d11d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:6e:3f:d4:03:8d:8b:5c:5f:0d:14:3b:26:
3f:de:53:77:d1:e4:3a:7f:57:23:60:7a:b7:fe:23:
0e:34:8c:ec:23:21:90:31:56:f2:48:4c:a7:ee:27:
48:24:07:98:3a:18:5a:df:62:2d:91:f6:1f:07:c6:
5e:f8:43:27:8a:78:5d:be:80:f1:d6:6f:87:97:27:
8b:d1:1a:7e:e1:e5:6d:99:54:15:32:bb:95:f3:e6:
48:85:0b:25:7b:31:00:99:97:66:fd:4c:12:75:2c:
2e:28:67:00:58:28:df:aa:20:c0:b5:df:38:68:e0:
5f:65:b6:4f:42:1c:d0:67:4a:9c:e9:7f:bc:7b:11:
2a:70:e3:b6:2b:ff:92:bb:26:e6:e8:93:25:c0:bd:
17:05:d9:af:29:03:54:f8:66:8d:3a:56:1d:46:a3:
12:32:34:c2:13:18:14:ec:7a:19:13:ed:b8:e0:11:
09:a4:be:e1:58:37:6e:dd:d7:4f:b8:7d:9b:f4:16:
e9:39:4e:28:df:8e:f5:22:e1:e5:c5:ca:99:f9:af:
fb:2f:38:ee:ac:d3:41:4a:1f:58:a0:d7:81:5f:23:
4d:a1:37:86:e7:a8:23:e0:06:3d:c2:59:0a:36:26:
7c:ef:57:82:9a:6c:83:ef:0a:20:af:57:b7:86:63:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:6B:D7:1C:CF:E3:16:CC:D3:28:34:12:0D:FB:BB:03:09:DD:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:7e:46:b3:9c:ec:1e:68:c8:6c:c7:16:da:8d:35:05:0f:d9:
2c:6b:37:da:79:e0:2b:e5:51:ad:b8:26:54:29:19:7a:4c:73:
fa:a4:af:02:6b:7f:c9:25:84:45:76:69:a3:3e:4a:9c:2f:5b:
e8:08:c3:27:39:3d:2e:cb:c9:3a:f6:10:f8:0f:f4:43:90:2d:
a9:6d:75:f6:d2:5a:0b:7e:34:88:6c:ca:e8:0f:d0:66:37:2f:
e1:95:09:32:e9:30:ed:92:05:7a:d6:ce:ea:9a:db:e7:ca:ad:
90:59:df:2d:bb:2b:d7:cf:2c:68:1d:b3:cc:49:13:c6:a3:71:
18:b4:78:89:dd:cc:2a:ea:8c:52:21:9b:b7:6d:52:95:14:83:
ce:54:0d:7e:37:51:70:23:61:a0:cb:68:ce:f8:01:02:bc:ad:
cc:4b:3c:31:82:f9:17:27:c2:f3:f7:ce:f9:59:1e:67:81:36:
d9:33:74:43:a6:d0:7d:79:d0:47:30:a4:87:a7:3c:f2:be:b8:
27:2e:4c:ee:d8:c4:f9:94:f7:25:7e:31:95:0e:16:c1:b8:0c:
4b:60:3a:00:99:58:50:c1:68:3c:27:29:2b:88:ec:d3:d2:11:
d4:77:c6:5a:01:ee:37:e1:72:b4:5c:6d:b3:78:77:ab:c5:31:
72:80:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 07:38:33 2024 by rpki-client on console-fra.rpki-client.org