Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e692b23a-8a50-3335-897d-1bdf0e1c9df4.roa
File: e692b23a-8a50-3335-897d-1bdf0e1c9df4.roa (raw, json)
Hash identifier: 1hzqtOnUaH4cuNkLiug333qVlq989U+qxVPw82TY2hk=
Subject key identifier: F8:30:AC:24:36:FA:3F:19:61:50:9A:97:BB:9C:AD:9E:41:13:80:84
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858446339B1BC41405A9567147B80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e692b23a-8a50-3335-897d-1bdf0e1c9df4.roa
Signing time: Sat 30 Dec 2023 14:00:21 +0000
ROA not before: Sat 30 Dec 2023 14:00:21 +0000
ROA not after: Fri 29 Mar 2024 13:00:21 +0000
asID: 11232
IP address blocks: 24.225.96.0/20 maxlen: 20
24.49.112.0/20 maxlen: 20
184.169.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:63:39:b1:bc:41:40:5a:95:67:14:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 30 14:00:21 2023 GMT
Not After : Mar 29 13:00:21 2024 GMT
Subject: CN=3d4a37e7-be90-43a2-9df4-db05208f4c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:de:94:78:d8:e2:12:5b:66:29:de:20:f8:
06:a7:d5:ac:52:f3:9d:49:da:11:45:6e:02:ce:c1:
ca:d0:08:11:10:41:73:2e:28:97:0a:57:4a:43:b4:
dd:4e:c8:7a:29:0b:55:ea:bd:76:66:e2:7d:3c:97:
c4:65:c4:4a:a7:85:62:97:86:d5:73:50:d5:fb:44:
7c:b2:c9:bc:89:e3:12:c1:ae:a6:4b:cd:f7:9d:9d:
9d:42:d1:fb:ef:6b:e4:8d:ba:50:92:ba:22:68:f7:
01:9f:5b:b9:3b:d1:aa:e6:b3:35:ac:73:f6:65:f3:
bc:75:92:2f:11:82:35:2e:b5:37:1f:8e:4b:29:0b:
15:7c:99:bc:ef:cb:fc:5c:4c:2f:31:18:23:1d:67:
95:96:64:2e:78:a3:f2:11:9c:3b:34:82:96:79:04:
37:e7:2f:96:58:dd:77:3f:08:f5:a0:b4:b6:a2:fa:
fb:7b:8a:5c:da:54:ef:72:6e:26:6f:7a:f4:ea:d7:
3c:eb:f0:ce:b1:e6:e4:ef:60:a9:7c:a9:05:a3:65:
b3:57:7d:9e:06:7e:63:8a:40:c7:27:1a:93:c5:27:
b0:1a:4c:b3:1f:96:8d:b8:97:0e:91:35:82:5d:c1:
f2:bd:65:6f:0f:0a:94:55:76:e4:40:c2:64:53:b3:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:AC:24:36:FA:3F:19:61:50:9A:97:BB:9C:AD:9E:41:13:80:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e692b23a-8a50-3335-897d-1bdf0e1c9df4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.112.0/20
24.225.96.0/20
184.169.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:d1:81:6a:ff:bc:ae:15:f8:33:fe:82:cb:5b:26:c0:c5:8f:
30:1f:78:64:5d:d1:0e:6f:33:31:af:8f:50:bd:ec:b7:b9:0a:
a7:4f:e2:d6:48:1f:f4:03:9b:8f:65:dd:2b:06:a7:0a:3c:ab:
4c:48:0d:14:a5:9f:3e:51:1d:90:db:02:dd:2b:b3:c0:75:a6:
5d:eb:24:c3:20:7c:0d:db:94:0b:e5:e1:1c:91:10:df:26:ec:
f6:e6:21:9e:42:2e:36:17:c8:30:f5:1e:71:04:c0:b3:7e:4d:
ce:9d:fb:d3:f1:2c:28:2f:0a:21:1a:c7:72:aa:3a:89:90:f5:
e4:ae:d0:18:bb:96:4b:48:74:79:06:91:3a:50:34:8a:d0:fe:
e6:83:64:5f:df:29:44:90:c2:53:4c:23:f7:bd:d8:30:87:06:
db:21:03:74:22:65:06:1a:ca:5f:cd:57:f6:90:ac:8a:a5:d3:
02:80:5f:e3:49:49:6b:f1:3c:a3:16:65:d3:f0:05:f3:62:71:
c6:c4:d1:33:c5:f9:e4:c7:14:f4:bd:c4:06:2a:be:d7:9d:c3:
da:a8:87:6b:f5:a7:c5:98:a1:49:2d:36:1e:f9:a0:a5:b3:06:
ce:4a:2c:36:01:21:4a:7a:76:eb:e2:27:e9:64:b2:89:4b:0f:
e2:22:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org