Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ffb879a-54eb-3698-b50e-f69012110e40.roa
File: 1ffb879a-54eb-3698-b50e-f69012110e40.roa (raw, json)
Hash identifier: 0V2J+yNoxjTZ9bVh5xQ/KBLkcE4L0kNu8opiIwHE6rM=
Subject key identifier: 55:05:2A:4F:68:33:FA:8B:96:38:00:6C:BA:7C:B0:B0:1B:81:A9:95
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843BA3583EE34A73F827150E7C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ffb879a-54eb-3698-b50e-f69012110e40.roa
Signing time: Tue 31 Oct 2023 01:00:15 +0000
ROA not before: Tue 31 Oct 2023 01:00:15 +0000
ROA not after: Mon 29 Jan 2024 02:00:15 +0000
asID: 9009
IP address blocks: 172.111.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ba:35:83:ee:34:a7:3f:82:71:50:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 31 01:00:15 2023 GMT
Not After : Jan 29 02:00:15 2024 GMT
Subject: CN=9a6270c6-0ec9-48c6-aab2-1c176d2c241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:65:aa:be:71:b1:ab:e9:da:bd:6f:8e:61:
da:0e:6c:1e:f1:ad:99:cd:36:75:90:aa:72:47:24:
d4:0b:18:10:08:86:8d:6a:d0:2a:41:a4:57:a8:27:
67:cf:aa:37:c3:8f:93:f4:70:85:d2:13:fd:00:d3:
c6:9e:87:18:ad:65:16:67:b6:06:36:75:eb:2b:63:
bf:9a:fe:1c:55:94:fe:d3:a9:af:c5:c4:3c:ac:56:
e0:de:68:8f:9c:1c:eb:40:7a:26:fc:76:1b:cd:e2:
5a:b4:19:12:9d:b5:c2:d2:15:c9:f2:2c:57:a2:39:
f5:79:95:c4:a4:41:61:c8:e9:ba:c0:cf:78:98:05:
f7:b1:83:1b:7f:10:27:3c:2a:6f:6a:71:53:6f:b3:
ff:b3:4f:63:91:47:17:be:63:93:1b:eb:44:ec:15:
07:56:7c:2e:ba:43:06:0c:fa:96:52:ef:ad:f4:ca:
dc:f4:42:6e:d9:6f:10:ea:3a:d6:0a:ef:a2:10:87:
37:a4:65:5d:fd:7f:57:cc:67:6b:5d:2a:92:12:a0:
d2:e2:e7:fe:e4:02:77:36:06:b9:08:53:31:b4:6c:
f7:0e:97:d9:a1:d5:02:85:89:87:5c:3d:d4:f1:3a:
94:00:f4:72:1c:19:68:e2:31:c5:42:10:c2:89:59:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:2A:4F:68:33:FA:8B:96:38:00:6C:BA:7C:B0:B0:1B:81:A9:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ffb879a-54eb-3698-b50e-f69012110e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:75:78:a9:7a:d0:5e:c9:7f:55:45:14:a8:52:2e:12:62:fb:
46:49:1c:36:b1:2c:cb:83:9b:ea:ea:f6:7d:f1:19:b8:8b:68:
a9:a6:da:b6:a9:b1:96:83:ef:b5:b6:2c:15:22:52:2d:60:aa:
3c:4d:31:f3:69:9d:85:f4:ec:d0:7e:3a:06:1f:1a:74:3d:58:
a0:83:02:06:78:5c:1a:25:3a:bf:1a:79:05:4e:b1:c4:8f:db:
f4:2e:a4:13:69:51:64:85:f1:e4:2e:91:df:36:74:3e:c6:d0:
0b:ca:24:13:57:d8:c1:96:08:68:af:bc:6b:4d:5b:15:cb:11:
d8:c4:00:ac:62:06:0a:7b:b1:dc:a8:5d:93:0f:e3:7a:e2:20:
9c:3b:7c:e4:9c:23:1d:7b:f2:03:60:e9:24:c5:c7:75:c0:2f:
88:71:a2:ea:e8:a6:ad:5b:ed:81:5a:fc:b4:ef:4f:21:93:82:
4a:ec:fd:6e:44:a5:ec:8d:37:38:3e:36:38:12:c8:c2:08:bc:
4f:18:23:57:14:65:b9:22:14:84:88:df:58:13:6e:3f:90:8b:
6b:1c:d7:ce:e2:65:1d:ae:84:40:48:e6:55:0c:9a:50:c9:00:
0d:a7:8d:cc:9f:78:31:94:99:19:5c:89:91:c8:a8:a3:a7:80:
fb:45:1d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org