Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66918cc2-9a9e-360a-b963-281e35439d8a.roa
File: 66918cc2-9a9e-360a-b963-281e35439d8a.roa (raw, json)
Hash identifier: JDZuJWDW5xCfD+y6n8aVCcgt4pL2YtZGn3QDLBm9Al0=
Subject key identifier: EC:88:D5:F6:4C:DA:A1:47:F1:1C:B1:CD:68:2A:56:A8:FA:E2:94:98
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842D979777E1AD97C433AEB4530
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66918cc2-9a9e-360a-b963-281e35439d8a.roa
Signing time: Fri 11 Aug 2023 13:00:24 +0000
ROA not before: Fri 11 Aug 2023 13:00:24 +0000
ROA not after: Thu 09 Nov 2023 14:00:24 +0000
asID: 35913
IP address blocks: 172.94.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d9:79:77:7e:1a:d9:7c:43:3a:eb:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 11 13:00:24 2023 GMT
Not After : Nov 9 14:00:24 2023 GMT
Subject: CN=9c541729-87de-406c-8c23-45afa62495af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:f1:4a:e2:d4:05:9a:d7:b8:6e:16:f2:3d:
7e:25:86:a8:5d:79:5b:d3:64:ef:d4:5a:39:79:e4:
48:67:6f:3e:a2:5d:7f:b3:6f:51:ce:9c:1e:4c:9f:
5f:41:f6:9a:26:13:18:8e:1f:0e:cd:95:6c:ab:8c:
ea:b1:f0:85:7b:b1:7b:63:71:83:dc:3b:ab:30:a7:
45:c6:01:6d:80:8d:82:89:a8:36:a0:4e:54:20:95:
26:d9:14:d3:fd:aa:a8:ab:1f:b1:ff:8a:f0:d7:fd:
9f:82:76:aa:3d:ec:85:9c:48:2e:60:ac:6b:18:ad:
a6:b1:a5:96:3c:50:4e:f5:63:bb:d3:65:5b:05:40:
e4:3f:ea:3b:78:a0:19:96:51:58:d7:c3:e6:a6:6c:
79:6a:69:b7:cc:33:e0:5c:c8:29:a0:00:aa:ff:93:
e6:90:ac:7d:43:fc:53:fd:f3:1f:ba:fe:64:be:56:
0b:70:6d:31:08:f7:1e:21:96:32:10:bf:99:05:f4:
67:42:3b:18:3b:ab:67:ab:08:b2:3d:8f:5a:e5:ad:
37:f0:d8:09:0d:2b:d1:73:b9:d9:dd:50:b7:78:22:
19:4a:5a:4e:0b:d0:01:af:e8:76:ad:87:aa:d5:1d:
d5:8d:40:99:d4:ec:cb:0b:00:9f:97:67:9b:d1:b0:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:D5:F6:4C:DA:A1:47:F1:1C:B1:CD:68:2A:56:A8:FA:E2:94:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66918cc2-9a9e-360a-b963-281e35439d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:6e:cd:eb:c4:04:01:1d:57:c3:3f:29:1a:cc:ea:be:62:ef:
a8:ef:cb:db:7e:30:57:e2:b0:5c:fe:52:97:33:2f:6e:d4:6c:
0c:e8:52:3b:04:a9:7c:45:c3:46:f5:a6:5c:5c:b2:28:67:e8:
aa:aa:87:e0:2b:85:30:73:c3:69:75:63:28:4a:4a:b6:10:cc:
7c:1d:4e:1b:6b:2c:b5:56:7e:31:45:4a:ba:30:17:18:65:0e:
04:85:97:2d:9a:24:0f:6d:c9:1f:e2:52:ef:71:b8:1f:44:9c:
fd:52:ec:5b:b4:f1:d4:32:8f:c7:6a:ff:e3:6c:19:46:f8:8d:
54:5b:9a:96:ba:6a:bf:97:6f:d1:7c:97:11:0e:05:a9:23:90:
18:74:d3:ce:1e:91:fa:e5:c8:f1:74:86:d7:72:5d:0f:d7:7d:
ff:95:2f:a3:8d:80:80:45:bf:e9:88:0a:5a:45:e2:2d:46:57:
c4:60:ba:a7:2d:82:4b:97:29:ef:69:83:31:d6:a0:b6:5a:e9:
45:f8:ec:00:02:6e:6b:c0:67:a4:6a:ed:90:eb:8b:ab:a6:ae:
56:f0:4f:59:9b:1d:fe:e9:4f:d3:a2:c8:96:fd:46:16:f5:a5:
0f:05:45:94:5f:05:ff:01:7f:b4:47:74:e7:58:e9:b0:69:7a:
bb:72:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org