Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85a2031d-e753-38c6-899a-5aa813526cb0.roa
File: 85a2031d-e753-38c6-899a-5aa813526cb0.roa (raw, json)
Hash identifier: ce/SHSpz/X/VvNEiS42F+JKsjpu4L02qF82e8YGWsAU=
Subject key identifier: 48:33:18:F1:66:C2:F6:9E:C3:01:7B:42:CB:96:42:16:5B:77:C7:F9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842AB6924C75B5ABD1996F1F72C
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85a2031d-e753-38c6-899a-5aa813526cb0.roa
Signing time: Wed 26 Jul 2023 01:00:16 +0000
ROA not before: Wed 26 Jul 2023 01:00:16 +0000
ROA not after: Tue 24 Oct 2023 01:00:16 +0000
asID: 50867
IP address blocks: 172.94.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ab:69:24:c7:5b:5a:bd:19:96:f1:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 26 01:00:16 2023 GMT
Not After : Oct 24 01:00:16 2023 GMT
Subject: CN=d409ca26-56a3-47d9-ba19-840f33e5a279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:16:e7:57:f3:d6:70:df:9b:e6:a0:98:58:
ae:2e:55:dc:87:f5:34:ed:63:91:19:b2:26:08:b3:
79:da:65:f9:fc:4c:7a:9d:30:c9:76:0c:11:5f:38:
52:c1:00:5f:90:96:91:b0:96:32:a7:ca:74:2f:7c:
99:a4:a4:be:4a:d6:15:3a:1c:28:92:64:54:02:15:
1b:c8:2e:51:ac:54:ce:70:ac:95:ae:86:17:d8:32:
a9:a3:3f:11:ee:d9:b1:43:3f:28:43:cf:7d:57:40:
d7:15:bf:a4:2a:8b:dc:88:81:dd:9f:1b:72:92:c0:
de:a9:7e:b1:07:57:2c:1f:59:1b:f1:5f:71:9b:9c:
93:e5:15:a5:d7:25:a4:fd:26:af:d2:e3:29:7c:29:
a9:c3:f8:fa:96:2c:0a:a1:8e:0d:0e:ca:d2:d0:cc:
0d:5c:bf:54:5a:c1:d7:cb:6c:e4:53:8e:33:9c:ac:
e5:0c:ec:05:69:5a:71:36:94:fc:10:74:fb:00:31:
8e:00:36:1f:ba:4e:bf:92:20:e7:0f:a2:73:73:96:
ea:00:e1:56:93:a7:b4:e3:9a:90:cd:6f:71:88:83:
6a:69:00:ff:c4:91:a5:3b:95:59:67:43:f5:95:0a:
26:0b:a1:e7:f5:ed:e1:9c:78:2a:fa:d5:48:93:ed:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:18:F1:66:C2:F6:9E:C3:01:7B:42:CB:96:42:16:5B:77:C7:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85a2031d-e753-38c6-899a-5aa813526cb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:89:83:1e:d5:e0:a1:27:3b:25:b6:b1:33:f0:7e:e6:ca:e2:
47:70:a2:e7:81:fe:c5:28:e1:d6:e7:52:7f:c7:5e:b6:09:bb:
20:16:f1:16:ac:7a:a4:02:82:95:70:44:25:01:3b:a1:fa:20:
80:21:4a:e2:6b:09:83:ab:55:69:55:95:c4:51:90:36:f4:bd:
4f:9c:1b:bd:fd:d3:4f:11:04:46:06:0a:1b:fd:92:e2:ab:8b:
44:bc:c2:e2:8a:5b:11:69:40:c1:5d:e9:a1:c7:1c:56:df:5b:
58:4c:ab:20:d6:68:23:c7:22:21:69:65:15:db:80:d2:b8:59:
e2:e6:97:57:ec:ac:89:a0:d9:dc:67:ae:36:51:ed:ba:8f:90:
c6:63:4e:e9:c9:5c:b5:34:af:b3:c4:34:f7:b1:1a:36:a3:5e:
76:7c:17:1a:9b:2a:7b:12:19:a3:24:f9:a1:b0:28:22:b3:6c:
94:34:44:a2:a6:d1:56:73:01:3b:a9:94:e2:e7:54:36:50:0f:
4b:03:29:cd:6e:a4:fb:6a:c8:1d:18:44:50:69:74:0d:d0:ef:
91:40:6c:82:5e:6e:bb:ea:c3:80:85:ea:6f:07:e7:5a:33:59:
d4:96:db:92:51:ab:eb:07:1b:6c:2a:3f:1b:b2:cf:24:84:a0:
04:64:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org