Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/f49c50b6-6cd7-36a2-9f71-5e201bf568dd.roa
File: f49c50b6-6cd7-36a2-9f71-5e201bf568dd.roa (raw, json)
Hash identifier: CVlifY0RdOJM66aV8HCH7Qj0Mja8QVkBE5kMRACLN34=
Subject key identifier: D0:C4:46:6E:F4:F1:1F:BE:E5:AD:61:55:87:8B:A9:5C:A1:1E:40:0F
Certificate issuer: /CN=10cf0e64-be53-4add-9414-d9b9f7f83aab
Certificate serial: 010D0C9F43285844F8B4ABE2FE5B258A1FFDE8C0
Authority key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/f49c50b6-6cd7-36a2-9f71-5e201bf568dd.roa
Signing time: Thu 22 Feb 2024 03:03:38 +0000
ROA not before: Thu 22 Feb 2024 03:03:38 +0000
ROA not after: Wed 22 May 2024 02:03:38 +0000
asID: 398906
IP address blocks: 203.217.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f8:b4:ab:e2:fe:5b:25:8a:1f:fd:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab
Validity
Not Before: Feb 22 03:03:38 2024 GMT
Not After : May 22 02:03:38 2024 GMT
Subject: CN=d8f98da8-721e-4952-ba03-d4d2cec5a1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:85:bb:64:e1:32:6b:f8:a2:94:8a:d3:78:
87:04:62:bb:67:dc:a8:a8:f0:05:3c:d8:b3:51:76:
b6:c8:54:af:93:fc:46:1f:72:66:c0:1e:2d:16:33:
f2:b9:e4:9b:e4:5a:1b:5b:50:ef:e3:5f:29:df:89:
94:7c:aa:ff:56:ab:df:09:ad:9e:e6:f6:2b:65:9e:
f6:c3:c7:34:61:a5:07:4e:80:ff:f1:22:5a:3f:2a:
98:45:e4:30:ba:88:b6:3d:05:f9:03:21:33:0a:c9:
49:f4:c4:21:d9:0a:0c:fa:67:4d:d1:53:39:43:11:
f2:b5:56:cf:cd:f4:b6:70:ee:c1:60:a0:60:e0:0b:
56:6f:d2:2f:30:6b:24:1d:82:f9:e3:56:c4:65:1f:
18:75:32:d6:01:ef:ed:d7:36:5d:77:39:19:1b:52:
c1:ae:b5:c4:ba:2d:01:eb:b0:b8:5e:30:94:b2:81:
83:c4:10:a9:ac:49:4d:aa:ee:20:b2:5c:ca:8d:08:
96:18:4e:ae:21:87:6f:48:6b:66:f1:66:79:37:91:
e8:6c:7a:dd:4d:42:72:84:cb:01:a3:35:75:65:d7:
93:a7:ae:76:a6:fe:3a:f7:ba:60:f1:3e:7b:d1:92:
32:e9:60:04:ff:f3:a5:56:72:3a:fd:5d:50:82:37:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:46:6E:F4:F1:1F:BE:E5:AD:61:55:87:8B:A9:5C:A1:1E:40:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/f49c50b6-6cd7-36a2-9f71-5e201bf568dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl
X509v3 Authority Key Identifier:
keyid:19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer
sbgp-ipAddrBlock: critical
IPv4:
203.217.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6d:8b:9a:00:01:74:f5:e5:12:03:bb:94:f9:06:7b:d5:46:
84:f6:80:1f:7f:dd:e1:26:ac:69:16:7b:df:73:bf:9f:7c:1b:
39:84:a0:9f:45:95:87:cb:18:33:4d:ec:b5:fd:ae:79:a1:ab:
e0:7e:1a:72:7c:b1:6b:65:9e:ec:ab:ff:4c:05:a3:ed:83:4e:
1a:24:6a:81:b3:bd:9c:5c:9a:f5:39:58:66:0c:51:f0:0a:0e:
af:1f:40:a9:99:9f:c5:0c:d2:87:12:9c:52:a1:7f:31:85:6a:
90:aa:95:c8:60:4a:cd:3e:26:54:21:38:42:32:3d:e2:13:de:
fb:02:4c:9e:45:c5:a2:4a:94:73:e1:92:61:04:8a:1e:41:15:
86:dd:e4:32:e7:1f:d5:e7:58:65:45:88:06:46:fc:49:62:e6:
ca:30:fa:0b:f9:55:cd:b2:95:ca:67:c2:96:52:ae:2a:65:03:
65:fc:0d:6a:e2:cb:f1:9b:f6:1c:91:0f:97:a2:91:23:ef:5e:
71:1b:41:36:ee:a8:e2:54:5d:ec:07:0a:ab:bc:1d:16:47:79:
60:e6:40:87:d7:be:43:c3:a3:67:52:1d:f3:43:41:7e:e6:37:
28:17:e4:04:54:72:07:11:3d:8c:00:d8:35:28:d4:2d:b0:72:
0c:a9:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org