Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa
File: f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa (raw, json)
Hash identifier: KeIIhEbc4m+L57xMXorMtADKAmAC1cOiEtwBmk75ZI4=
Subject key identifier: E1:DF:BA:7A:87:B3:F4:47:B5:10:E6:1B:C4:CE:5F:28:83:38:DE:3F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584311BDA3B2292042A3AB32E2E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa
Signing time: Thu 31 Aug 2023 16:43:02 +0000
ROA not before: Thu 31 Aug 2023 16:43:02 +0000
ROA not after: Wed 29 Nov 2023 17:43:02 +0000
asID: 212238
IP address blocks: 172.111.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:11:bd:a3:b2:29:20:42:a3:ab:32:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 31 16:43:02 2023 GMT
Not After : Nov 29 17:43:02 2023 GMT
Subject: CN=27ee2e01-3735-491a-bbca-ea2cf9e8b1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:bb:b7:c1:d7:02:6a:82:a6:16:ac:f7:46:
2a:ac:a1:71:e4:4c:bb:f0:97:b0:7c:3c:ff:2a:a3:
e1:df:2c:47:c2:8d:ba:69:0a:db:b2:fb:be:2b:a9:
59:d5:c7:d7:28:fa:6d:c0:5e:ee:93:9c:58:44:ec:
69:58:c2:22:3a:36:64:75:41:5e:1b:4b:b6:ce:7e:
98:1f:2e:e3:4f:6a:e5:ce:2d:da:6c:0d:07:e6:5d:
b0:42:46:cd:99:4b:53:ba:79:8a:85:5a:e2:4a:34:
05:a7:dc:f9:d7:88:aa:1a:ff:c5:75:4c:76:b6:89:
49:99:4a:fd:c1:81:bf:52:9a:61:1f:f4:66:30:8e:
13:76:26:ae:f1:30:bb:96:1c:e2:cb:da:ae:69:9c:
2b:b6:fc:f0:15:97:73:29:77:83:8a:bd:99:02:81:
04:64:22:c1:71:77:29:f9:20:aa:b8:4f:6b:9c:79:
95:ab:96:23:0b:bb:c6:d7:53:5e:cb:8a:15:3e:11:
de:01:d1:44:6e:81:aa:a3:f2:48:2c:b7:72:d1:13:
a2:75:e9:72:6a:cd:aa:11:fe:16:a8:2d:e6:81:ab:
71:91:18:d8:17:44:60:12:10:92:16:71:df:4f:c2:
d3:67:3e:03:42:c1:ea:df:bf:16:8a:48:0c:db:dc:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:BA:7A:87:B3:F4:47:B5:10:E6:1B:C4:CE:5F:28:83:38:DE:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cd2176-bce3-362d-b3a0-c4660ba34a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d9:6f:e1:79:d0:77:b0:4b:02:42:4d:ed:e1:03:7b:0e:18:
c1:7f:15:51:52:36:6b:d4:19:7f:14:80:2c:51:d6:e6:2e:d3:
60:02:54:d1:5e:e3:c3:71:44:7a:f1:c6:10:3a:a8:db:d2:e9:
64:e6:8d:3f:5b:f4:ee:92:09:e0:d7:e5:d7:b4:ee:62:32:ae:
3d:b9:88:ed:de:b8:c2:e0:33:ac:bd:1d:01:97:a3:72:45:95:
f0:66:e9:60:6c:94:6f:cf:71:34:ed:35:5f:b3:e3:4e:17:25:
92:b9:08:d4:77:4e:9f:c1:31:fc:86:d3:39:13:87:58:e9:b8:
cc:f3:10:09:8d:9b:07:e7:17:bc:19:7c:c8:36:59:23:d1:d0:
b3:ef:02:68:1a:07:9f:59:03:92:c8:90:3c:42:18:02:28:39:
5e:f7:d1:74:42:b9:e6:5c:f4:e4:d4:bb:4d:f0:f9:73:92:01:
89:40:68:07:23:92:be:92:28:dc:31:75:7b:58:63:b1:26:43:
04:06:b9:56:38:7c:77:97:f3:78:18:d2:c9:1c:df:89:c0:aa:
62:be:99:74:ee:3b:91:5e:c4:95:9b:60:7a:29:7f:9c:ac:4a:
4a:48:67:7b:af:29:7a:e7:d9:55:fc:e6:21:80:d9:72:2b:ee:
14:e5:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org