Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c33cfae7-e7d6-3a12-8220-0c2867dcd052.roa
File: c33cfae7-e7d6-3a12-8220-0c2867dcd052.roa (raw, json)
Hash identifier: 7KyQ2jIf7faiapERP2eYVFCwa5K6130zkAC/t+qOR0k=
Subject key identifier: DB:E4:74:09:A8:21:65:3B:7F:E7:2A:D1:A5:60:16:D8:AB:CC:60:32
Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial: 010D0C9F4328584461D448D09D7F2B46868510C0
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c33cfae7-e7d6-3a12-8220-0c2867dcd052.roa
Signing time: Sat 30 Dec 2023 02:00:15 +0000
ROA not before: Sat 30 Dec 2023 02:00:15 +0000
ROA not after: Fri 29 Mar 2024 01:00:15 +0000
asID: 1239
IP address blocks: 104.171.24.0/21 maxlen: 24
104.171.23.0/24 maxlen: 24
104.171.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:61:d4:48:d0:9d:7f:2b:46:86:85:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
Validity
Not Before: Dec 30 02:00:15 2023 GMT
Not After : Mar 29 01:00:15 2024 GMT
Subject: CN=bbabac74-d399-403a-afb5-c2064f382493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:53:31:98:92:78:b7:72:25:f6:e2:4e:5d:
82:8e:41:f3:eb:cf:03:fa:09:b8:24:91:8b:5b:f5:
bf:88:57:0d:bd:be:9d:c6:e7:f2:41:0f:a8:4f:09:
91:4c:d4:4f:a2:f1:98:0d:90:5d:c7:44:92:83:4d:
66:c0:6a:f3:2d:0f:9f:51:8a:69:93:19:51:02:c0:
2f:cc:04:18:d4:5d:85:5b:13:b5:cd:e8:98:83:e6:
f2:8e:14:31:a3:c9:d0:58:0b:21:94:05:11:49:e3:
50:fa:c6:a5:47:17:d6:c3:0d:b9:53:15:ac:c8:40:
c4:76:f3:6c:3e:32:51:3f:da:3d:e7:90:ef:79:45:
5b:e6:cd:aa:e3:9b:7f:24:9a:f0:5b:40:33:9f:dc:
9d:f1:59:42:58:d1:68:c1:ea:09:9c:c4:df:39:4f:
8a:73:45:46:2a:e1:3c:b7:58:3a:8b:47:39:57:36:
03:56:c0:90:4b:f0:44:26:d1:18:a7:3e:be:4f:7c:
c4:54:cc:7e:a9:ff:6b:5a:41:34:e6:74:22:63:e2:
08:e4:04:8f:a6:99:58:aa:6f:ec:b0:ef:7f:15:43:
c5:39:ed:9a:98:bf:8e:7f:a8:1c:02:e8:63:58:f3:
c4:00:28:13:af:96:42:7b:59:b8:90:c9:a0:4e:99:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E4:74:09:A8:21:65:3B:7F:E7:2A:D1:A5:60:16:D8:AB:CC:60:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c33cfae7-e7d6-3a12-8220-0c2867dcd052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
X509v3 Authority Key Identifier:
keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.22.0-104.171.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:00:53:3e:b3:b1:df:e6:d5:65:8b:d9:47:26:28:64:3e:32:
68:54:f7:5c:78:63:7b:84:cf:22:20:6e:b3:73:26:89:71:2e:
04:b7:82:99:23:0c:4f:3c:3b:c4:01:10:7f:7c:9b:8a:5b:31:
a7:af:3c:60:d9:77:bc:7a:b8:50:fe:fd:6c:b0:d9:7d:36:c8:
5b:b8:41:b7:d4:4d:23:29:05:f6:f5:21:91:73:42:4e:56:1d:
a7:69:3f:87:d3:71:30:bc:37:95:07:d5:f1:43:f7:59:9c:f3:
09:b1:ad:16:f8:61:2e:86:12:27:0f:6c:4f:90:05:61:7c:9d:
01:dc:f4:2b:bc:26:b9:83:02:9a:7c:f3:9b:eb:d4:f6:14:43:
7b:c3:0d:ce:de:9e:dd:0b:c7:5a:f7:e5:6f:ca:a7:37:c6:67:
da:e9:1c:18:17:a4:4e:f3:95:9e:9b:89:06:fa:32:94:24:d5:
7d:f2:b7:47:34:a2:68:a3:64:e7:0d:8f:8d:81:57:30:5d:dc:
fd:0a:e2:2b:46:9c:13:8f:96:34:cc:eb:4f:6f:dd:31:d3:43:
a7:53:6a:80:08:02:49:c4:e7:63:12:cc:d4:8c:2e:49:3b:54:
e2:f8:15:5d:a1:5e:2c:d9:f5:3b:88:12:50:d1:c3:84:da:e0:
ff:83:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org