Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4b04a2be-d5ce-353d-9ed8-6c671ded0990.roa
File: 4b04a2be-d5ce-353d-9ed8-6c671ded0990.roa (raw, json)
Hash identifier: a6CKvJap3XRTiMWcCYZAGudji5gWx/qVhH+SoOgUgFA=
Subject key identifier: 63:45:B8:3F:10:55:57:9F:91:4B:24:E6:53:A8:88:AB:43:65:AE:57
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858447F2497B9FCCC4768722FCCC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4b04a2be-d5ce-353d-9ed8-6c671ded0990.roa
Signing time: Tue 09 Jan 2024 14:00:29 +0000
ROA not before: Tue 09 Jan 2024 14:00:29 +0000
ROA not after: Mon 08 Apr 2024 13:00:29 +0000
asID: 13213
IP address blocks: 149.143.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7f:24:97:b9:fc:cc:47:68:72:2f:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 9 14:00:29 2024 GMT
Not After : Apr 8 13:00:29 2024 GMT
Subject: CN=c70bab5b-f68d-46cc-9f87-b5a301b3a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:fb:20:5e:26:5d:25:48:0c:e0:fd:0c:55:
c4:cb:22:34:a1:5a:b7:81:ec:e2:05:9f:7f:ff:70:
b1:40:47:23:90:92:ab:d6:c4:96:f6:8b:0d:4f:c0:
57:88:d7:55:40:f4:51:6a:46:2c:2e:e1:8f:4b:fd:
34:d2:4b:b8:9e:f1:0d:0a:16:fb:2c:28:11:36:ce:
64:fe:32:7b:15:e3:7c:c2:b4:f6:e8:4b:b7:9a:65:
5b:8e:ac:bb:3f:3d:45:89:d4:4a:cb:04:bb:98:16:
4e:6d:67:ea:35:05:7b:c5:91:a9:9b:b9:67:3f:cc:
b3:78:b9:ef:90:7f:ce:03:b6:4e:0d:5e:a2:ea:6a:
9a:58:83:d6:cf:7d:75:cd:4d:a2:ee:d7:47:d9:de:
aa:a4:e8:28:53:69:fb:d2:17:0e:08:19:e2:d5:43:
76:43:9f:9a:fb:48:55:56:17:e2:c7:89:6c:a9:46:
4a:db:d3:ef:5d:cc:ca:5e:b8:20:47:48:b1:76:3f:
7e:1f:d4:99:7b:ad:f6:ef:a1:e5:8b:d2:64:11:12:
4a:c3:41:86:76:e8:26:e2:b6:83:47:0e:88:86:1e:
ec:5a:3f:80:00:be:fc:37:5f:d3:0a:e7:fa:0f:75:
0a:18:99:09:2d:b0:0c:e0:52:fb:d5:58:18:c4:f4:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:45:B8:3F:10:55:57:9F:91:4B:24:E6:53:A8:88:AB:43:65:AE:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4b04a2be-d5ce-353d-9ed8-6c671ded0990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:80:3a:7c:47:ff:95:fa:89:c0:df:45:c8:30:03:4a:10:4b:
2c:75:84:84:70:a0:d6:55:01:d8:d5:61:68:fe:32:2b:c7:11:
fc:17:85:3e:08:eb:25:c5:74:61:a2:15:54:85:6d:dd:04:e6:
b1:7e:08:cb:9e:db:6c:1c:ef:28:ea:a1:b5:1e:3a:b7:71:1d:
1e:ff:e2:24:f9:d4:af:8f:79:de:16:57:4a:a6:4e:fb:03:ee:
b7:4e:5c:d1:21:aa:e4:f2:1f:dc:09:77:72:fd:e1:b2:36:a2:
aa:ac:64:90:93:37:3e:bb:56:3a:a5:0a:d3:6f:14:86:4e:80:
c6:67:af:f5:b8:52:d7:ef:99:c3:22:6b:c7:49:c6:74:61:e1:
02:88:fe:9a:5a:aa:7f:10:93:5a:96:bc:6d:52:c2:08:9c:20:
79:8e:07:d4:c6:89:d8:44:a1:99:95:7f:1c:cb:24:53:bb:00:
18:19:33:a6:30:99:ed:41:76:c7:0f:9a:6c:a2:05:95:61:d0:
a0:02:69:a8:a7:57:0c:ff:37:c7:48:02:8a:f5:89:ec:b1:fb:
0e:16:41:90:93:00:e9:a5:31:4f:e1:3f:4b:4d:5c:17:b4:ad:
2e:37:95:41:e9:fc:70:2e:bd:b8:96:b7:2f:80:fd:13:db:d3:
03:96:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:14 2024 by rpki-client on console-fra.rpki-client.org