Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14f46bac-9ec3-37a8-98cb-38ad5dd22524.roa
File: 14f46bac-9ec3-37a8-98cb-38ad5dd22524.roa (raw, json)
Hash identifier: 9HMsFkYsC9V2ydtFts9nWrlIVWXJxdEyoNSlIpEhhRk=
Subject key identifier: 40:67:0F:F7:FD:BB:A6:1D:B0:B3:B9:67:F8:05:E2:19:93:15:C4:EF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858432D39FF8F37914CD003649520
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14f46bac-9ec3-37a8-98cb-38ad5dd22524.roa
Signing time: Sun 10 Sep 2023 13:00:24 +0000
ROA not before: Sun 10 Sep 2023 13:00:24 +0000
ROA not after: Sat 09 Dec 2023 14:00:24 +0000
asID: 43289
IP address blocks: 172.111.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2d:39:ff:8f:37:91:4c:d0:03:64:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 10 13:00:24 2023 GMT
Not After : Dec 9 14:00:24 2023 GMT
Subject: CN=e258dcde-82e6-4a65-8c86-c1ee2c9bbfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b5:be:ab:c8:71:d3:4f:41:54:7e:bf:ca:1d:
49:9d:b8:df:b2:07:0e:27:38:f7:61:b8:c8:ad:91:
53:ad:49:2f:fb:10:6f:db:d7:c0:d1:db:df:69:59:
ac:75:26:2f:ac:ec:5a:8b:0f:cf:04:45:55:30:53:
e8:b2:1c:53:78:9d:e5:40:6c:71:03:00:e4:e5:5e:
b7:24:13:fb:fb:50:ec:50:f7:4c:d6:0c:b9:7c:e0:
fb:26:5b:f5:34:4e:1a:4d:ac:44:ab:13:f1:d4:73:
3f:ba:03:0c:a6:94:22:c7:1b:64:3e:ac:d9:48:05:
0e:91:41:dc:32:9c:98:96:a6:b1:a0:02:7d:0d:bf:
b7:e7:f3:1e:87:2d:f1:66:cf:b4:2d:a5:b8:a4:cc:
ce:e7:18:1d:4e:80:2d:da:65:79:de:32:b1:d8:a3:
d9:22:53:81:71:ee:a9:f9:e5:0f:1c:06:20:0e:2d:
84:02:1a:b5:a5:f7:ae:a8:2e:9f:51:1e:1a:33:54:
71:da:af:ab:06:39:31:2d:23:e5:f0:db:5b:8c:53:
af:1a:8c:14:4a:29:a1:4d:27:94:68:32:4e:b7:30:
f8:bc:c2:45:c4:7b:e8:b4:a5:ad:5e:84:67:e9:21:
86:22:2f:55:2e:6b:68:e6:a4:73:65:37:2f:66:d7:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:0F:F7:FD:BB:A6:1D:B0:B3:B9:67:F8:05:E2:19:93:15:C4:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14f46bac-9ec3-37a8-98cb-38ad5dd22524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c9:47:95:6d:43:96:1a:35:33:c9:5d:2c:66:57:be:f9:95:
5d:42:95:9c:da:cc:41:ce:51:b2:c9:2e:f1:db:0c:7e:ea:c3:
e4:80:97:d1:8d:40:3d:42:57:67:2a:0c:40:83:39:c3:e6:b5:
1f:45:83:49:69:be:3b:cc:8e:25:12:68:8c:2a:f3:a0:21:45:
ac:fb:c0:cb:78:d2:6a:02:6a:be:e6:97:4e:1b:d6:39:56:6c:
0d:50:1f:49:72:73:3f:58:51:82:1a:ca:7d:35:4e:41:74:96:
2c:df:47:ee:83:59:fd:af:a8:b8:24:7e:ea:08:24:87:af:4f:
ec:77:91:76:e0:7c:87:d4:65:ae:73:40:51:2e:de:fe:bb:a7:
65:4a:a0:f4:22:6d:b6:d4:24:37:96:eb:e7:ca:4a:6e:a3:96:
05:94:a6:d9:f2:d4:39:9f:e3:66:93:81:fc:3b:ab:c1:e4:8e:
57:b1:c8:10:41:22:04:48:21:ca:0e:4e:bd:2b:c5:dc:e7:d3:
d9:66:ae:ea:15:56:b6:94:5c:3a:c9:29:aa:28:71:7c:ce:b2:
d7:5a:97:37:f7:bd:bf:19:74:27:7f:67:e0:9b:a8:bc:37:59:
34:d6:1f:78:80:e6:99:bb:e1:e8:03:30:5f:c2:61:33:f6:aa:
ba:f9:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org