Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2ce25e49-1221-3223-8831-9808e9bb1708.roa
File: 2ce25e49-1221-3223-8831-9808e9bb1708.roa (raw, json)
Hash identifier: zPA5s7EmHYuJNw0At0SZR0Kf8x8OiPMa4RuSeRURsgo=
Subject key identifier: A3:52:43:31:1C:36:36:4D:BE:80:81:86:46:98:3B:39:05:58:2C:8F
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F4328584476C478142BBDA11EF83F8300
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2ce25e49-1221-3223-8831-9808e9bb1708.roa
Signing time: Sat 06 Jan 2024 14:00:20 +0000
ROA not before: Sat 06 Jan 2024 14:00:20 +0000
ROA not after: Fri 05 Apr 2024 13:00:20 +0000
asID: 55103
IP address blocks: 23.128.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:76:c4:78:14:2b:bd:a1:1e:f8:3f:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Jan 6 14:00:20 2024 GMT
Not After : Apr 5 13:00:20 2024 GMT
Subject: CN=c420e4bb-bebb-41bd-b7e5-b9074bb5f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:ac:9c:0b:30:ef:03:ea:64:a8:0c:33:4d:
65:4b:84:03:59:fb:68:bb:43:69:71:fe:dc:ed:7b:
8d:e9:28:38:e5:a2:60:cd:ee:83:60:b5:6e:d8:c4:
37:37:8a:27:4f:14:8e:ac:57:8d:1a:6e:19:62:69:
43:d9:22:4e:3f:a6:7e:44:6e:9c:50:7c:d7:1a:4b:
23:5d:93:e1:ac:e9:97:d0:6b:df:68:87:5e:c8:2a:
da:38:6a:ab:21:b4:44:34:26:33:99:d2:e7:83:a3:
28:93:29:27:1e:d3:47:00:1e:aa:1b:e1:42:6d:db:
64:42:b7:b7:66:08:64:92:f6:dc:ac:41:f9:49:a3:
27:47:09:0a:85:7e:44:80:1c:e8:f1:49:68:bd:38:
ab:03:64:a3:ec:c4:27:f6:fe:b2:f5:bb:16:2d:1f:
e0:40:02:66:12:e6:55:91:1e:7f:9d:a3:e8:42:50:
33:7f:0d:b5:37:3e:05:a3:cb:63:cc:23:dc:9d:08:
16:db:83:e6:98:0e:c9:9c:2e:dc:21:53:b6:18:9f:
46:46:c3:ff:85:c4:d9:dc:4f:b4:7d:e5:46:99:0c:
27:74:dd:4b:47:ad:75:ae:41:8b:64:5f:23:f8:74:
18:5d:71:03:7f:50:86:02:fb:29:57:2f:b9:14:27:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:43:31:1C:36:36:4D:BE:80:81:86:46:98:3B:39:05:58:2C:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2ce25e49-1221-3223-8831-9808e9bb1708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f9:4b:af:59:21:cc:b0:1f:c1:12:24:0c:6c:15:a0:0a:45:
9c:cb:6f:b0:72:af:1b:fa:da:2a:4f:b0:6d:92:62:fa:e8:fb:
5b:95:3b:ba:b5:2b:64:df:49:5f:48:48:44:4b:cf:46:22:ab:
c9:89:d2:68:b2:61:3b:0b:d1:ab:f3:0a:61:82:85:1c:69:0d:
ed:01:e5:79:c1:b4:8c:80:c3:a3:40:27:03:c7:1a:aa:5f:28:
7b:71:4a:c8:06:76:bc:fe:d5:b3:50:85:98:19:79:71:a7:5a:
49:19:8a:ed:1d:ee:bc:6c:47:82:99:db:52:ae:ac:0e:fb:5e:
ba:40:87:ea:fe:a7:11:20:29:48:c9:93:1c:aa:93:bf:22:1a:
75:d8:78:a4:61:cd:c6:80:72:05:f5:28:58:ef:93:5d:5d:f2:
70:3b:fd:08:96:05:74:de:2f:61:29:1e:a5:42:0a:49:41:cf:
e4:db:b5:e7:f4:75:00:61:56:03:c1:0b:32:76:2f:c0:58:f5:
97:59:aa:b9:c4:94:27:88:81:99:2f:f4:f4:a6:18:84:25:a8:
6c:2b:66:96:71:b9:f9:46:f6:a7:8b:cc:d0:93:13:23:f2:c2:
0e:94:25:fd:35:a5:ef:cb:b3:ef:c2:bf:2b:9c:a0:8c:e1:bc:
32:6d:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org