Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/1971595c-b948-327f-a36e-42791e94f813.roa
File: 1971595c-b948-327f-a36e-42791e94f813.roa (raw, json)
Hash identifier: VNq1YqMMnnjEWTfxwwcWWfPwC1RIyhZoE6YcVRcsB14=
Subject key identifier: 5C:C6:A6:06:07:29:6B:9D:64:54:78:30:CD:70:2F:1D:39:D3:20:6C
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F43285842FF29BC01F663AAD64B555A80
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/1971595c-b948-327f-a36e-42791e94f813.roa
Signing time: Fri 25 Aug 2023 01:00:22 +0000
ROA not before: Fri 25 Aug 2023 01:00:22 +0000
ROA not after: Thu 23 Nov 2023 02:00:22 +0000
asID: 142632
IP address blocks: 23.247.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ff:29:bc:01:f6:63:aa:d6:4b:55:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Aug 25 01:00:22 2023 GMT
Not After : Nov 23 02:00:22 2023 GMT
Subject: CN=7a997baf-6a3f-4452-859e-f04f310405cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:a0:e1:91:7a:74:49:94:7b:07:e6:81:97:
2b:61:d4:0f:31:6a:19:27:1b:c6:75:e6:47:6c:c2:
2b:bf:26:ea:a8:96:fb:5c:f7:4f:c6:ae:9e:89:8d:
c3:3b:aa:cc:5a:4d:84:4e:4c:94:f6:ee:57:30:94:
11:4a:65:9e:37:f3:6e:09:80:cd:c6:99:8d:4a:ba:
0f:f8:a8:e4:76:3e:03:0a:f7:44:0f:bd:86:8a:cf:
79:72:43:e3:2c:7c:63:88:9f:3c:38:d5:ab:3c:a0:
0d:7b:e3:ef:72:eb:35:8c:b7:e6:fb:6d:87:71:42:
5b:d2:9d:63:bd:6c:ae:d7:20:e0:b6:d7:23:4f:9e:
85:7c:82:b8:36:f8:20:6f:35:ec:8f:df:25:63:4a:
87:eb:8b:be:b1:4e:42:6a:f7:7e:30:63:5e:fb:66:
61:be:d0:4f:1e:ee:bd:7e:16:b4:d3:48:dd:bd:b8:
4c:23:1a:de:25:1f:71:04:d2:2a:9a:1b:60:1c:b6:
c8:0f:f9:84:5b:13:23:84:ce:ea:bf:e9:03:ca:82:
92:fc:d4:48:00:0d:b2:28:6b:f4:f4:0f:61:2d:1a:
b0:b1:13:96:af:8e:15:ad:22:46:c7:ee:60:40:8b:
a3:5c:be:d2:ec:e0:01:b7:41:1d:5e:79:6a:78:63:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:A6:06:07:29:6B:9D:64:54:78:30:CD:70:2F:1D:39:D3:20:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/1971595c-b948-327f-a36e-42791e94f813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:cf:3f:f3:9d:d3:f3:2c:bf:d6:a7:77:6f:57:dc:e3:22:8a:
a7:21:2a:2f:32:99:dd:77:e1:7c:82:72:56:26:8d:d6:db:aa:
c3:e5:93:81:78:4c:45:dc:0b:0a:56:0b:21:a1:5e:a0:3f:36:
e8:69:37:7b:f3:bb:72:97:48:dd:64:80:92:f7:9a:d0:a2:97:
bf:07:60:c5:8c:f7:7b:57:89:9a:2d:d3:d6:f5:1e:48:31:4f:
e2:d5:24:31:68:ce:f6:6a:cb:4c:69:3a:f9:bb:f6:6c:d9:c4:
8d:a7:5d:5a:a9:a1:8a:ee:28:b0:22:c5:24:6a:7d:4e:6c:cb:
26:47:9c:3d:b2:ca:fc:73:6b:5b:cf:54:6c:4b:77:97:43:ff:
e2:99:f1:da:74:a7:5e:c0:6a:8f:85:6e:a6:88:c2:45:c5:5c:
5f:cb:3b:a9:da:c4:a7:75:c3:f9:c8:11:13:af:5b:3d:69:44:
3e:7c:71:45:75:40:3b:3b:00:68:be:3a:b1:b0:bf:01:77:6a:
31:b9:18:35:ab:1e:f1:73:11:c8:3a:4f:be:37:1b:aa:f0:d1:
0f:33:94:a3:69:b3:02:07:ac:ff:d8:a9:60:a4:b5:39:5a:6c:
2a:00:c7:83:16:8e:62:61:a5:7c:85:c3:13:8a:f6:87:28:3c:
42:9a:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org