Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d2b3de4-66b8-3199-977d-4c484aeb488c.roa
File: 7d2b3de4-66b8-3199-977d-4c484aeb488c.roa (raw, json)
Hash identifier: SP5DOOvo2tV2RU3o3oKJqUk1gOzoDXyjR3x02T6uT2I=
Subject key identifier: DB:37:E0:6F:DF:8D:BC:18:6B:6D:EC:17:CE:51:AC:65:97:CE:04:B2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858430B2CEFAF0F6E5BAC9B7329F0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d2b3de4-66b8-3199-977d-4c484aeb488c.roa
Signing time: Tue 29 Aug 2023 08:16:38 +0000
ROA not before: Tue 29 Aug 2023 08:16:38 +0000
ROA not after: Mon 27 Nov 2023 09:16:38 +0000
asID: 209378
IP address blocks: 172.111.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0b:2c:ef:af:0f:6e:5b:ac:9b:73:29:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 29 08:16:38 2023 GMT
Not After : Nov 27 09:16:38 2023 GMT
Subject: CN=211f272e-6fca-4e5a-b082-497b1cf41223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:91:bd:eb:45:da:e2:01:2e:3b:1f:4f:ea:
76:85:da:4f:ec:40:4e:58:e2:1d:a3:00:4c:32:87:
94:25:ab:33:dd:61:0e:76:f3:cb:2a:b6:b2:f2:2d:
b0:0b:f4:03:00:97:dd:24:4d:9f:56:2b:b3:43:62:
d8:7c:49:3d:a7:71:94:60:3f:65:5b:0a:9f:e3:5a:
a6:48:db:40:72:69:40:bd:b2:2b:53:73:00:29:ab:
43:65:29:02:ed:c3:83:21:84:cc:d5:bd:e8:63:7f:
5b:03:cf:c6:9d:a6:4d:d8:03:ca:3b:45:ab:a9:8b:
1c:04:55:5e:41:98:b2:b1:9d:53:a2:99:12:98:7c:
b0:8d:fb:e8:40:c0:06:69:81:a4:8b:97:fa:c2:da:
30:7c:ce:e4:f4:85:7a:d2:9d:29:02:d4:09:68:98:
34:81:17:c9:1d:ce:8d:21:b1:57:fe:4b:37:cd:8c:
57:4d:6d:98:5c:7f:b7:a0:d7:32:0c:ea:91:f7:44:
a5:04:17:b3:d5:83:7a:08:25:48:f2:e6:55:e3:e8:
f1:6d:bb:94:1d:03:ae:0a:79:63:e7:89:12:b5:2a:
12:00:b9:11:75:84:0e:3c:1c:04:a3:43:bd:0d:62:
2d:ad:0d:11:e4:25:bf:18:80:4e:07:27:2b:84:a0:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:E0:6F:DF:8D:BC:18:6B:6D:EC:17:CE:51:AC:65:97:CE:04:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d2b3de4-66b8-3199-977d-4c484aeb488c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:26:f6:0b:df:65:df:6a:0a:03:08:5d:83:86:2d:1b:5a:a6:
bd:cc:89:42:75:b2:fb:29:6d:eb:d1:b3:d9:26:0a:ff:a2:54:
89:68:51:a2:59:3c:12:1c:24:c9:cc:fd:85:b7:18:43:8a:02:
ec:fc:36:25:31:f3:67:b7:41:ab:b3:4e:63:fb:bc:4b:73:59:
37:3c:d4:9c:d0:64:d1:ed:41:10:71:42:6d:b3:7d:d7:8c:16:
e1:32:d7:4e:fb:01:5e:7b:5f:91:49:d1:83:0c:14:d9:b7:32:
6b:0e:db:3e:ce:af:16:31:66:5d:1d:3c:4a:8c:ac:a3:91:da:
51:8b:0e:0b:34:96:1a:da:e8:60:24:36:0a:8b:2b:fc:4d:f3:
a9:4c:34:17:b0:4a:d1:53:95:03:b3:46:be:42:08:10:d4:0c:
fc:b1:c1:10:38:60:52:19:f5:ee:cc:6f:f1:fd:a2:1e:0a:f9:
23:6d:6b:17:2a:6d:b4:e2:c5:68:a9:7a:81:cd:33:58:0a:3d:
03:f1:59:1f:12:6f:fc:7e:57:dd:49:7f:03:0b:ee:e8:49:4a:
aa:f1:e3:26:cd:e2:8b:51:92:2d:2b:44:00:ea:4f:b3:99:73:
8d:59:4b:cd:5b:08:cc:56:a8:4b:1f:e1:69:f5:63:93:a0:63:
6c:fd:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org