Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/878e1a65-df40-3aa7-aa0c-3ae7c25278f2.roa
File: 878e1a65-df40-3aa7-aa0c-3ae7c25278f2.roa (raw, json)
Hash identifier: Kg4USsouAa+ivrPpaPhi+BeyLeeSaE4Ngu8JOputw2Q=
Subject key identifier: 6B:8B:3E:00:19:09:5D:82:9A:3A:36:DE:66:C2:0F:32:29:07:B3:31
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285841E46CF504E5602E8DB76CAB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/878e1a65-df40-3aa7-aa0c-3ae7c25278f2.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Sun 02 Jul 2023 16:19:32 +0000
asID: 132372
IP address blocks: 172.94.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6c:f5:04:e5:60:2e:8d:b7:6c:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 2 16:19:32 2023 GMT
Subject: CN=264c4686-aa5f-484d-a4a3-c47500759d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:41:15:be:dd:fd:08:46:06:37:02:4a:4b:
da:fb:44:cc:b2:7f:04:99:7e:82:c4:94:d7:44:b5:
10:21:40:60:ea:e8:75:9f:63:a4:ae:93:c0:30:55:
7d:92:78:ed:3c:42:bd:3d:d0:c2:cd:ff:79:23:54:
6d:ce:ef:e7:b3:a9:1e:80:83:b3:00:a5:e4:67:3d:
c4:69:69:a6:58:d0:57:d2:5b:d5:37:4e:52:76:a2:
21:bd:5c:7a:7e:1d:01:7a:ae:5c:da:f7:dd:45:96:
32:a1:a1:e1:eb:ac:4b:be:8f:4f:cf:80:8a:dc:e9:
b7:ba:74:fb:6f:e8:81:00:1c:fa:19:a9:35:e9:a9:
6f:c9:a9:5d:08:0e:0e:ac:8b:d2:11:fe:1b:e6:f1:
c9:6c:49:f6:57:03:c1:38:96:17:98:7e:cc:ea:c3:
da:e5:3a:f6:6f:d4:b7:d2:49:ea:fc:b6:94:6d:06:
d9:fb:3c:3f:88:43:3e:c6:ac:e2:6a:56:ac:5e:2c:
a7:fe:ef:98:a8:fe:cc:5e:6f:bd:97:65:3f:7f:00:
88:db:06:02:15:b7:3c:bf:95:28:33:a1:20:d2:40:
aa:05:dc:e6:1f:97:33:3e:9e:d7:54:46:33:a4:1e:
a3:c7:25:13:34:3c:80:47:e6:ec:af:e8:2e:bb:74:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8B:3E:00:19:09:5D:82:9A:3A:36:DE:66:C2:0F:32:29:07:B3:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/878e1a65-df40-3aa7-aa0c-3ae7c25278f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6c:26:f7:64:a6:68:ad:d1:8c:91:6e:64:14:45:7a:5d:d8:
44:ea:1a:51:68:a1:53:d2:8e:46:2b:51:80:98:2d:13:0c:d7:
ce:55:eb:d1:3a:40:5b:d4:76:f4:7f:56:f9:00:f5:17:1b:f7:
3c:ad:22:bd:b8:32:e5:37:79:82:cd:b0:87:3b:d6:6a:03:a0:
87:bf:79:f6:5a:fe:70:2e:df:e8:94:43:5b:92:2f:eb:88:cb:
6c:f1:15:5c:a6:1a:57:4c:93:2d:e0:32:6c:f5:8d:b4:8d:ab:
1a:f9:1d:9b:aa:c5:86:bd:bb:13:8e:92:da:26:96:66:03:9a:
23:ab:05:bb:3f:9a:04:6c:c7:45:12:93:a9:56:53:0f:09:22:
06:b1:c0:68:88:db:c8:c7:a4:10:1b:ee:b0:40:e8:66:3c:fe:
f9:44:53:cd:4a:17:c2:3f:ec:71:2f:e0:b4:4d:79:0f:a2:4a:
65:32:9a:0e:db:72:2d:05:a8:40:0d:da:70:f5:22:78:7b:74:
0b:90:dc:9b:bd:99:5d:9c:46:3c:bf:d1:e2:17:fb:26:62:15:
38:5f:37:c8:b4:96:f2:de:c4:3f:2e:c9:46:0f:cb:9b:39:ae:
8a:7c:89:a1:ab:d8:1b:da:e7:8e:ae:aa:9a:42:4c:71:ae:79:
b0:ed:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org