Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00bff1a5-39d0-302a-ac78-868b2b84e17f.roa
File: 00bff1a5-39d0-302a-ac78-868b2b84e17f.roa (raw, json)
Hash identifier: jJYRocUDkKBcUaZ2RgwiP+rTm69k4D5j859ZIqF8iB8=
Subject key identifier: 3E:69:2A:2A:42:95:A9:77:0A:14:5C:FB:C2:76:85:D3:11:A0:C5:56
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842ECE4B8C7B56A8134BE5D6180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00bff1a5-39d0-302a-ac78-868b2b84e17f.roa
Signing time: Fri 18 Aug 2023 11:56:53 +0000
ROA not before: Fri 18 Aug 2023 11:56:53 +0000
ROA not after: Thu 16 Nov 2023 12:56:53 +0000
asID: 32489
IP address blocks: 172.94.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ec:e4:b8:c7:b5:6a:81:34:be:5d:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 18 11:56:53 2023 GMT
Not After : Nov 16 12:56:53 2023 GMT
Subject: CN=1bd20671-724c-4092-b9f9-9ec77209bd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:bc:8c:b3:6e:84:12:49:12:8e:85:d4:1f:
98:72:ef:08:50:e6:0c:af:80:97:47:51:97:14:da:
d2:99:68:05:ab:ee:ce:36:5d:b6:5e:95:69:a8:8a:
aa:2d:68:95:be:9f:ba:7d:e6:66:a9:16:54:bb:f7:
4b:0f:66:2e:48:01:83:14:3a:8c:8e:6d:8a:26:cc:
7b:d4:7d:a1:eb:db:c6:f9:d7:fe:56:5d:6b:c3:43:
c3:03:76:c8:30:b7:ed:df:cd:0c:d1:fb:c9:06:ee:
de:cf:4f:d5:f9:a3:42:00:38:b6:08:5b:28:d7:26:
86:18:0f:ed:06:e6:2c:be:b3:cd:43:9d:3a:a8:f4:
85:a8:75:ee:20:2f:40:82:49:b8:c4:14:cb:66:fc:
b3:14:c3:43:19:fb:e9:82:79:e4:10:58:8f:e0:5d:
de:af:f4:c8:7c:46:26:58:1c:ce:dc:4b:89:d1:bc:
ec:a0:43:e4:0a:3f:57:6f:6e:3f:76:2f:04:53:7b:
1d:d3:13:11:ed:93:e8:a3:85:3c:78:2a:45:4e:9d:
d1:11:e8:98:25:c8:78:78:c1:be:42:b4:e1:37:2d:
f3:df:8e:ff:8e:21:32:13:65:e2:65:eb:b2:87:8c:
5e:c9:c0:91:a8:2d:1f:c2:6c:29:88:fa:13:a6:6e:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:2A:2A:42:95:A9:77:0A:14:5C:FB:C2:76:85:D3:11:A0:C5:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00bff1a5-39d0-302a-ac78-868b2b84e17f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:89:69:76:fb:9a:8a:b4:fe:ca:33:ed:1b:8d:44:6f:a2:49:
89:bf:71:7c:8e:c4:06:b0:ef:b0:08:ac:11:23:81:10:1e:4b:
8c:9c:3d:27:23:9c:88:4b:80:81:ca:f8:69:35:60:57:24:33:
52:81:c4:2d:88:79:57:df:76:6c:d8:96:fa:7c:0a:36:de:52:
a4:8b:54:db:cc:97:58:5c:5a:2e:41:df:1b:f8:6e:0b:11:7c:
fe:77:f4:5e:47:31:d2:00:86:80:3c:c4:36:fd:37:0d:a0:ee:
d0:4f:b1:87:95:1d:52:a3:25:de:7a:d4:3e:7d:f8:b0:dc:de:
d6:51:9a:18:21:73:3b:23:a2:c3:e2:6a:b8:03:eb:bc:b4:47:
51:6a:85:c4:32:40:95:54:67:df:35:77:fb:63:ab:a3:0a:74:
80:8e:b0:3e:b2:37:e3:55:f3:52:ff:41:1b:f6:cc:98:5b:2d:
3b:4c:4e:ea:74:08:26:09:cf:59:e6:2b:df:fe:43:3a:74:ea:
63:20:b5:26:74:9a:da:d6:d1:49:fc:ef:11:db:2a:fa:35:9c:
2f:df:0d:f2:7e:02:e2:ea:32:23:ba:0e:12:82:51:da:10:fe:
a8:a9:58:a8:d7:4c:ef:6d:ac:09:b4:c5:54:87:15:63:ce:cd:
80:c5:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:57 2024 by rpki-client on console-fra.rpki-client.org