Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/49535075-58c0-3dfa-9277-b7df7ffa7905.roa
File: 49535075-58c0-3dfa-9277-b7df7ffa7905.roa (raw, json)
Hash identifier: 5Z3A+U4cxRXjtjiVv0IGTdAMMW9JEXUo1N9A/X1RAOE=
Subject key identifier: E4:FB:81:96:BC:D5:F8:BC:78:F7:A8:EA:93:64:3A:B0:B1:55:1B:14
Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial: 010D0C9F43285844F9FABDCA97F33BCDA0B0F360
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/49535075-58c0-3dfa-9277-b7df7ffa7905.roa
Signing time: Thu 22 Feb 2024 14:00:30 +0000
ROA not before: Thu 22 Feb 2024 14:00:30 +0000
ROA not after: Wed 22 May 2024 13:00:30 +0000
asID: 19970
IP address blocks: 104.167.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f9:fa:bd:ca:97:f3:3b:cd:a0:b0:f3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Validity
Not Before: Feb 22 14:00:30 2024 GMT
Not After : May 22 13:00:30 2024 GMT
Subject: CN=bec74f83-122f-4327-9ae3-9f5213e8066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:ef:e8:80:1d:70:d4:84:0c:9d:08:ea:4a:
76:b6:4f:04:b3:81:42:41:8f:5e:9f:5d:46:2e:35:
f4:5a:c1:89:ca:a4:70:f3:8f:64:87:4f:10:2f:70:
78:88:ee:94:47:23:33:af:d9:95:a4:56:ed:19:0c:
4e:02:45:9f:4c:36:96:d7:4a:ae:b2:40:60:9c:a2:
9e:20:fc:57:ec:98:5c:46:8e:c5:1d:2e:89:5f:76:
ea:b4:a3:c1:a6:a0:f2:b4:eb:f3:1a:68:44:b4:f9:
d6:a0:d2:f7:1b:16:c1:79:3f:df:80:4f:73:65:74:
4b:33:c6:31:1c:dd:e6:be:9a:6a:b3:52:ce:48:ec:
e0:13:c3:c6:e3:0f:68:40:cf:3c:fb:e8:18:01:3b:
c7:c9:b9:73:fa:0f:8d:b7:9e:88:5b:77:ad:02:d3:
55:dd:f6:c8:88:95:18:14:cc:80:06:6c:fc:c0:7b:
ea:2f:b1:49:a7:28:eb:10:0e:b4:ed:a1:03:16:45:
16:9b:0f:50:a6:06:8d:bd:96:99:2e:43:11:e4:a5:
96:af:ee:3a:a7:e6:ff:2e:3b:79:91:a2:54:a4:c5:
bc:21:a8:07:57:8d:fa:63:c8:69:2e:c9:a9:2a:61:
91:44:bd:54:dd:06:af:10:c8:b5:d4:2d:f4:3a:f8:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:81:96:BC:D5:F8:BC:78:F7:A8:EA:93:64:3A:B0:B1:55:1B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/49535075-58c0-3dfa-9277-b7df7ffa7905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
X509v3 Authority Key Identifier:
keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:b9:5d:e7:a7:db:ca:b4:42:ba:9b:17:64:e1:e7:7d:de:7a:
7e:ce:64:9f:1d:89:fe:98:b3:dd:15:f6:dd:eb:6d:05:16:08:
62:e4:6b:34:e2:aa:60:18:d2:e3:77:54:f4:49:1f:0c:9e:8f:
ca:e2:86:55:11:18:d3:dd:fa:62:3e:ff:35:43:50:37:cf:75:
d0:95:84:f7:84:2d:8b:16:8d:61:31:35:4a:03:35:13:d7:4a:
24:f9:d9:1e:48:5a:d8:12:c5:81:54:a3:33:fc:b6:7f:6a:c4:
48:9a:45:03:ee:5e:78:aa:cb:8c:52:fd:07:6d:ec:89:96:14:
fa:9f:d7:59:fb:20:c5:25:17:a6:64:c7:40:aa:02:d6:61:4e:
43:f5:af:16:01:32:d2:b1:d8:67:3d:8c:2e:30:e6:35:05:c5:
57:84:aa:c6:f6:1b:43:55:bc:04:77:c1:7b:5a:53:78:f4:7b:
da:5b:63:ef:f2:ba:b0:4d:18:bb:70:14:69:6f:97:9a:34:0f:
9a:ab:24:49:b7:c3:3c:a6:83:28:34:22:48:f3:21:38:c7:66:
4e:ee:31:71:e1:d8:7c:32:d4:24:7f:6a:cd:40:5d:f6:05:98:
b2:16:75:57:81:b8:e4:52:c4:6d:48:d2:ee:4c:2e:4d:8b:d5:
10:68:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org