Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4345f6f-ef2e-3c9c-8eb1-c2e4f075ac3f.roa
File: b4345f6f-ef2e-3c9c-8eb1-c2e4f075ac3f.roa (raw, json)
Hash identifier: vysULfS/OCIKBM4Q75i/2u/wTyZi9rbH2wMNsS5WGY4=
Subject key identifier: 30:F0:53:C7:59:67:27:C0:65:DC:6C:41:F6:47:A4:7D:B5:2E:23:36
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285841E46CF5ED7AEF7E6DD6B66B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4345f6f-ef2e-3c9c-8eb1-c2e4f075ac3f.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Sat 05 Aug 2023 19:25:36 +0000
asID: 206264
IP address blocks: 172.111.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6c:f5:ed:7a:ef:7e:6d:d6:b6:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Aug 5 19:25:36 2023 GMT
Subject: CN=166ef1b0-cc55-4475-84d5-71b6c30d9cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:bd:b9:8a:20:93:5d:34:5e:f8:7c:e1:e9:
fc:60:be:9e:e5:af:06:73:07:75:d0:1f:73:5a:13:
30:2c:07:97:52:12:5e:c9:71:9a:01:0c:73:02:62:
72:d8:45:02:b4:15:9d:4c:0d:32:da:b6:98:13:88:
05:1e:e4:89:88:75:09:b6:ac:f0:66:f5:da:53:65:
a5:43:52:89:a8:06:69:db:73:bc:5c:80:e4:ed:37:
f4:50:df:53:c6:04:eb:dc:a1:07:8b:46:a1:13:6d:
1a:28:66:34:e0:f5:39:4f:35:6d:5b:05:2e:46:38:
80:b6:5b:09:fd:f1:cb:f9:f4:f9:3b:7c:99:d9:6c:
c6:bc:3d:2b:c2:db:84:32:b6:73:04:4d:44:3f:98:
e3:90:7e:9c:a8:4d:cc:42:72:9b:70:d2:e0:87:5a:
38:b4:9f:f1:6d:1b:40:84:5b:85:01:cf:b2:45:5f:
e0:21:d2:9e:a0:2d:a6:36:99:35:8b:b8:4b:5d:93:
80:8b:af:81:98:94:26:8c:72:26:8f:03:52:f6:2c:
52:14:08:8a:e0:be:cf:89:bc:07:f0:4f:08:ca:64:
10:3e:d2:c0:ad:09:8a:72:d0:8a:e8:4f:d0:9a:69:
c5:cc:22:06:1d:ec:6b:33:d4:db:8d:65:ac:cd:59:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:53:C7:59:67:27:C0:65:DC:6C:41:F6:47:A4:7D:B5:2E:23:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4345f6f-ef2e-3c9c-8eb1-c2e4f075ac3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c8:37:14:86:c4:b2:fa:b4:5e:d5:6e:b0:b0:70:4e:57:a1:
0e:cc:61:dd:c9:53:0d:d6:2d:e9:f4:cf:3a:f0:51:7f:7d:e0:
74:3b:90:ec:3e:1b:87:e7:80:8d:42:d3:f7:a3:54:06:24:48:
83:4a:a2:b9:ea:ca:ee:6c:79:18:a9:ae:54:39:30:06:e7:01:
a0:d9:82:07:a7:3f:44:d2:08:1e:9f:ee:e7:c1:8c:1f:ad:21:
9e:62:18:8b:bf:88:68:63:fa:75:4b:af:32:10:81:70:99:b2:
ab:bf:b6:b9:24:f8:11:ad:42:77:72:fb:85:89:60:b9:92:8f:
a7:68:77:c7:c7:f3:39:13:e7:73:fa:5b:2b:e5:53:94:24:c6:
fd:84:b2:65:81:03:4b:da:d2:ea:ba:c3:33:2c:03:64:17:79:
8e:c4:f7:68:6f:cc:15:b0:13:b3:fa:ad:7d:0d:ed:d7:61:0a:
9a:09:69:8a:bc:50:cf:63:a7:a5:84:1d:aa:e2:76:b1:77:61:
c5:46:54:d4:ed:3e:3a:b3:6f:ef:d4:1b:76:69:3e:ae:cf:e5:
6f:68:d3:35:d7:58:64:d0:00:00:1f:a5:69:5b:a8:20:12:a8:
e3:ff:a7:86:6f:50:95:fe:64:87:76:11:a1:45:4b:cf:1e:77:
93:a8:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org