Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/c804d48b-c0e7-390c-b6a2-fb7087096dda.roa
File: c804d48b-c0e7-390c-b6a2-fb7087096dda.roa (raw, json)
Hash identifier: rQvltVifh71j+Bi0mMz0cPZcJOn46SYIj0wCUIcWDAQ=
Subject key identifier: 4D:1D:95:28:7A:E0:1E:4A:C5:D1:4E:50:BC:E3:F5:83:7F:1A:13:6B
Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c
Certificate serial: 010D0C9F43285844DBFC23FBD2F12560EF73F180
Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/c804d48b-c0e7-390c-b6a2-fb7087096dda.roa
Signing time: Sun 11 Feb 2024 20:09:12 +0000
ROA not before: Sun 11 Feb 2024 20:09:12 +0000
ROA not after: Sat 11 May 2024 19:09:12 +0000
asID: 26520
IP address blocks: 23.171.88.0/24 maxlen: 24
2602:f987::/37 maxlen: 37
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:db:fc:23:fb:d2:f1:25:60:ef:73:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c
Validity
Not Before: Feb 11 20:09:12 2024 GMT
Not After : May 11 19:09:12 2024 GMT
Subject: CN=0b44b160-0208-403f-9c2d-94a9fd622916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:f9:f9:58:54:62:0b:ee:d2:7d:74:50:ca:
1a:25:f9:08:da:40:4f:09:91:e5:d0:1b:38:0a:7b:
77:00:d6:7a:54:04:13:ae:2a:29:1b:89:91:a9:d9:
21:00:af:5a:24:52:88:d9:35:aa:dd:9a:5f:e0:48:
94:31:02:92:29:47:69:6b:74:08:50:5b:3a:e0:3b:
6b:77:f1:14:6b:66:3c:39:cc:0c:43:eb:56:41:17:
04:52:1d:4c:ba:57:40:1b:ec:c1:3a:39:d6:b2:01:
5a:b5:e2:2f:93:9e:fd:d9:12:85:f6:76:fb:01:92:
8f:87:5b:17:da:d0:a3:f5:99:b8:a2:9c:65:cf:b5:
7c:20:80:c8:da:3d:ed:19:9b:37:3a:d1:af:6b:22:
2f:6b:7e:3c:48:95:04:1f:87:b3:9c:90:95:77:9d:
29:ad:75:08:01:51:06:7f:db:fe:aa:4f:56:65:5b:
f5:94:69:d7:78:6e:8e:93:0d:eb:db:8a:d1:77:2e:
06:40:c8:05:53:5d:62:c4:87:3c:08:0a:0d:e1:b9:
97:78:7e:10:9a:cc:d0:8a:1a:48:3b:23:2d:0f:2a:
8e:f8:fc:20:4a:59:db:ed:3c:fd:3a:d4:db:51:f0:
d4:45:8a:7c:99:5f:19:7e:b0:f6:18:99:77:f2:90:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:95:28:7A:E0:1E:4A:C5:D1:4E:50:BC:E3:F5:83:7F:1A:13:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/c804d48b-c0e7-390c-b6a2-fb7087096dda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl
X509v3 Authority Key Identifier:
keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.88.0/24
IPv6:
2602:f987::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:30:25:5f:1d:29:be:92:17:9b:d5:24:66:a6:60:59:52:40:
9a:3d:42:8f:9f:43:19:f6:6e:bb:ca:31:c4:e7:1b:4b:97:90:
c2:d3:48:ff:c1:84:af:d6:18:1e:c3:f7:f7:12:4c:61:06:65:
86:cf:0d:b3:01:a6:ef:15:c2:0d:27:67:3c:c2:9a:5c:3c:d6:
b1:e4:05:30:cd:cf:aa:93:9f:b4:66:0f:6d:26:42:68:61:08:
9b:10:77:66:d2:8a:3c:70:1f:f5:3c:b6:da:8c:4a:ee:66:7a:
e1:b3:fe:9a:c6:94:5f:ea:e0:30:01:fa:e7:57:de:e6:8a:27:
38:6b:13:34:8b:5f:01:65:3c:8d:bc:37:d2:c3:ca:c2:74:8e:
63:47:7e:b2:ba:e2:c7:d1:24:6a:df:e9:60:2e:e1:49:7e:cf:
60:c2:56:ea:45:46:ac:0f:ab:42:06:13:6e:d1:f1:7c:0f:0e:
90:1b:9e:b2:ac:a9:a3:12:4e:95:37:20:40:bb:06:d6:86:02:
2b:16:16:ab:76:14:d0:e0:54:70:89:0b:93:b3:c9:e5:95:8e:
37:09:9a:ea:45:89:16:0b:0d:e8:5c:fd:55:ee:88:49:ff:36:
de:db:2e:06:6f:37:64:ec:94:6c:9c:7a:fb:e1:4c:53:df:e0:
d0:d6:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org