Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/381b9c96-8000-3aff-a61d-5b7231bda528.roa
File: 381b9c96-8000-3aff-a61d-5b7231bda528.roa (raw, json)
Hash identifier: eU9tXko5A6nM1dq0Ao8v7JEa0Dx+woOervNYclq8ERs=
Subject key identifier: 8F:0E:19:5C:F1:AA:2D:01:99:34:3F:76:EF:48:4A:89:67:FC:69:D4
Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial: 010D0C9F4328584221384EF1297BC4305F15D7C0
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/381b9c96-8000-3aff-a61d-5b7231bda528.roa
Signing time: Tue 06 Jun 2023 13:00:19 +0000
ROA not before: Tue 06 Jun 2023 13:00:19 +0000
ROA not after: Mon 04 Sep 2023 13:00:19 +0000
asID: 13638
IP address blocks: 199.38.204.0/22 maxlen: 22
199.38.204.0/23 maxlen: 23
199.38.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:21:38:4e:f1:29:7b:c4:30:5f:15:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
Validity
Not Before: Jun 6 13:00:19 2023 GMT
Not After : Sep 4 13:00:19 2023 GMT
Subject: CN=38ed2667-5c3c-4f62-b9b2-4a81cebae871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:f7:96:f5:58:6d:42:fc:a1:09:c2:67:f5:
31:ec:50:9f:0e:c8:6e:46:e3:bc:cd:94:e9:fe:3d:
41:d8:d2:44:7e:6a:73:46:5c:39:4e:0d:f1:bf:e7:
42:95:e5:12:2b:88:d6:7a:9a:75:d6:40:d1:2f:65:
7f:4b:72:7c:fb:50:cf:01:95:ec:04:e0:24:34:00:
c7:9e:d7:70:93:d4:62:f9:2d:db:d2:06:14:c1:fd:
f6:1c:11:5e:cf:c6:0f:ac:d6:1c:ff:87:3f:99:1e:
cb:c3:90:00:13:df:e3:48:36:4d:2b:ea:dc:4e:9f:
af:1a:59:4c:d5:c4:37:db:0b:72:ae:7d:ec:bb:65:
5b:e6:4b:07:4a:44:dd:1b:33:12:54:af:39:54:c4:
c1:33:ec:7e:8b:df:54:90:dd:17:13:b6:38:b6:12:
3d:58:3e:91:fb:65:75:53:79:32:8e:74:ad:83:d8:
4c:d2:b7:49:e2:75:88:ca:fd:11:40:49:a5:4f:3e:
76:06:0d:3a:43:fb:95:49:2d:42:3b:c5:38:35:05:
2d:da:49:16:55:aa:05:12:26:47:f3:75:fa:8e:0a:
39:ab:17:73:f3:a7:1a:f4:1e:f5:c2:be:d6:d4:ce:
74:32:1b:b8:cb:63:c4:75:9a:5f:bf:3b:8c:be:57:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0E:19:5C:F1:AA:2D:01:99:34:3F:76:EF:48:4A:89:67:FC:69:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/381b9c96-8000-3aff-a61d-5b7231bda528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
X509v3 Authority Key Identifier:
keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2a:e3:b7:71:5b:be:fe:01:1e:3e:11:2e:ba:27:0c:13:4b:
8a:24:f4:b9:59:6e:f8:09:06:b6:e2:56:e9:31:e2:d6:59:29:
29:72:cc:e8:2c:99:dd:c5:90:3a:d5:2e:1d:4b:e5:f6:09:37:
2f:bf:c3:f8:7c:d2:60:c8:f5:a0:59:c4:dc:5d:de:04:19:7a:
39:31:f8:c0:83:ed:ed:e0:9d:22:b2:90:e0:00:cb:ca:03:b3:
a9:43:bb:d6:47:d0:4f:ff:af:8d:7c:2f:57:99:9e:c8:68:6c:
ef:ce:8f:28:27:8c:47:af:bd:36:4f:f0:7a:f4:16:25:ec:b7:
e6:da:e1:c9:50:8e:da:a1:50:fe:f4:69:04:c9:be:eb:9b:a7:
90:ec:b1:07:a5:6f:e6:c9:e7:2c:86:46:cd:94:c9:a3:de:7b:
a3:7b:d5:a3:19:01:16:ce:70:92:52:a6:76:0e:8c:f8:76:55:
80:16:4a:5b:85:26:72:fb:7a:95:56:92:61:17:22:79:c3:20:
5a:96:af:7b:54:2c:5c:f0:78:73:d4:97:d3:70:a0:7c:32:9f:
b4:1c:72:fe:e7:55:8d:ae:83:aa:74:9d:7e:59:de:81:6f:93:
a4:8d:8f:81:64:74:02:e4:3b:aa:f0:c5:6e:56:43:86:f4:23:
8b:7e:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org