Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/bcda9807-a211-3678-975b-23ec2b3d695f.roa
File: bcda9807-a211-3678-975b-23ec2b3d695f.roa (raw, json)
Hash identifier: Nd1oJl+eLJm4uFuCn+0rVQkcI7KlP3Skf/vodTf11EQ=
Subject key identifier: C0:0B:E5:11:9B:95:E4:17:93:9A:A2:80:0F:8A:77:1E:A0:34:3C:0D
Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c
Certificate serial: 010D0C9F43285844D6ACA7D9C2FEC9D21F666F00
Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/bcda9807-a211-3678-975b-23ec2b3d695f.roa
Signing time: Fri 09 Feb 2024 22:30:00 +0000
ROA not before: Fri 09 Feb 2024 22:30:00 +0000
ROA not after: Thu 09 May 2024 21:30:00 +0000
asID: 26520
IP address blocks: 23.171.88.0/24 maxlen: 24
2602:f987::/37 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d6:ac:a7:d9:c2:fe:c9:d2:1f:66:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c
Validity
Not Before: Feb 9 22:30:00 2024 GMT
Not After : May 9 21:30:00 2024 GMT
Subject: CN=526bbe9e-1749-4b77-82b6-1803ac131cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:04:49:72:2a:4c:48:d7:9f:10:4d:b3:94:
5b:6f:77:f3:26:34:64:d7:a5:e7:3b:41:b5:8c:c2:
06:53:62:70:c9:9d:62:fb:32:21:11:70:4e:7e:6c:
3b:dd:7d:2a:32:b8:ff:d7:eb:a5:a8:11:d1:5f:14:
2e:12:ad:92:c6:eb:fd:ed:f7:31:47:b3:36:3b:a1:
7d:e2:45:a0:b1:25:0f:39:9d:a7:e4:ec:20:ab:88:
9c:fc:8d:ca:f1:0d:72:19:29:ae:29:aa:43:f9:f9:
66:89:99:9e:15:77:08:36:40:49:18:4e:d3:89:c2:
0f:50:5f:ee:97:9c:a2:04:8d:32:98:13:e5:d2:f1:
ee:5a:49:61:17:ee:00:64:97:dc:66:82:4b:9e:30:
ca:27:f0:7d:05:58:a8:ad:0f:c5:85:77:70:66:90:
21:03:a2:4b:22:0e:d2:37:28:25:27:65:d5:b3:5b:
2b:c6:d0:25:3d:9c:82:f6:e7:84:fd:c4:10:2c:f5:
a1:87:8e:da:ca:d5:87:5c:12:76:72:22:e0:ed:69:
eb:ce:fd:f0:3d:1c:94:dd:b9:45:dd:ac:e2:c8:87:
81:b1:a1:84:00:f2:b3:81:54:bd:11:6a:42:18:e5:
7d:b6:4a:9b:70:37:5a:d6:35:89:d6:7b:eb:5d:fa:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0B:E5:11:9B:95:E4:17:93:9A:A2:80:0F:8A:77:1E:A0:34:3C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/bcda9807-a211-3678-975b-23ec2b3d695f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl
X509v3 Authority Key Identifier:
keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.88.0/24
IPv6:
2602:f987::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:db:1f:f8:f9:db:9a:98:6d:4c:2e:80:1c:48:6b:7d:da:c5:
74:9c:e3:c1:b1:43:3f:87:55:a5:e9:23:08:89:4e:ae:bb:40:
e1:f5:1c:02:02:ba:8f:4c:42:ec:b3:32:65:e5:86:b4:04:93:
c9:96:d3:37:aa:37:05:07:95:ba:15:42:48:04:c9:20:61:30:
85:b8:89:a1:44:37:7c:af:8d:0e:eb:e3:31:7d:05:8a:5b:b6:
61:31:0e:8a:01:6a:f1:f5:b8:8e:23:05:ed:8b:7b:95:1b:a7:
9a:c6:30:ee:f0:6c:c1:c6:65:33:b2:ea:3e:b2:e4:3d:24:0e:
0e:24:2a:70:d7:b4:8f:ae:4c:62:1c:5b:b0:23:37:b2:08:0d:
81:88:23:36:02:6d:08:48:fb:4b:0c:53:b5:8b:34:94:61:5e:
b2:18:72:cb:1e:7e:cf:e5:06:17:c3:ec:fb:bc:cc:53:62:15:
29:86:cd:1a:a7:0c:b6:2d:5b:71:79:1d:ee:29:33:13:5a:38:
d2:16:c2:10:9c:4f:99:fd:c6:97:4d:1f:29:bb:db:2f:8f:fb:
7f:d2:0b:70:5e:e4:cc:c4:c2:d3:8d:3e:30:5e:45:36:fc:2d:
d5:46:91:18:5a:fe:3a:1a:70:6b:76:41:06:e2:28:68:f9:c4:
7d:6f:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org