Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa
File: ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa (raw, json)
Hash identifier: ERpiJvenxh1lSxiSDiTFYhi4RJ8Zkrqzo0bFs9LJJ7U=
Subject key identifier: A3:DF:10:4A:70:A8:78:A6:C3:FA:78:BC:B7:EA:58:84:27:36:06:4B
Certificate issuer: /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial: 010D0C9F43285842D07987C9882EFD891C8E2900
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa
Signing time: Tue 08 Aug 2023 07:38:16 +0000
ROA not before: Tue 08 Aug 2023 07:38:16 +0000
ROA not after: Mon 06 Nov 2023 08:38:16 +0000
asID: 834
IP address blocks: 208.99.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d0:79:87:c9:88:2e:fd:89:1c:8e:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
Validity
Not Before: Aug 8 07:38:16 2023 GMT
Not After : Nov 6 08:38:16 2023 GMT
Subject: CN=5db064f7-2812-4a2d-9639-f6823e43d5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:f4:09:98:7b:58:f1:50:00:ae:0b:c8:fd:
7a:2d:1c:38:21:75:e9:55:c6:0a:f7:77:c2:f2:16:
5c:ce:a0:56:71:4c:c5:ae:b9:c9:8f:57:be:8a:e6:
23:a2:87:f2:49:23:ef:f2:89:f0:bb:80:46:14:54:
f0:17:4c:3e:b8:45:7d:a4:ec:f2:92:cd:f4:7b:a5:
85:55:4a:f0:09:3f:e7:24:4b:d1:57:7c:bd:f9:69:
3c:57:87:33:55:5e:1d:21:ef:15:21:0b:ed:62:af:
99:22:fb:1a:76:fc:67:22:f9:eb:a5:39:59:f6:97:
cf:b4:9a:e2:42:b9:ac:01:6c:fe:3c:43:a1:2e:cb:
c6:6d:6c:b5:33:c7:33:db:92:6e:7f:55:c2:f1:2b:
ae:c1:2b:99:14:43:a1:04:f5:a3:c9:f8:63:92:17:
3e:a2:f5:17:1e:67:88:96:88:c6:8d:d3:39:c8:d3:
f9:ce:5f:7c:22:66:95:2e:07:bc:ae:d5:80:8f:12:
8e:14:ce:c3:f8:9d:a1:09:92:1a:66:b6:75:53:76:
c8:ea:c5:b2:13:59:e0:19:06:dd:57:a0:a9:77:5e:
ec:1c:0a:8c:be:7b:d3:c6:81:60:06:81:a9:00:90:
64:f4:9d:f4:bf:1b:3c:df:d0:4b:4a:85:0d:10:76:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:10:4A:70:A8:78:A6:C3:FA:78:BC:B7:EA:58:84:27:36:06:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl
X509v3 Authority Key Identifier:
keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c3:d5:52:30:41:f2:fa:ee:e9:95:56:08:fe:7e:3f:51:b0:
3c:30:51:76:1f:f1:86:19:97:dd:59:63:65:50:af:1f:3a:9e:
47:bd:ca:04:72:6b:0a:14:5b:41:91:9d:cd:2d:38:cf:60:58:
18:aa:9a:7c:fe:32:4c:09:b8:e2:15:2d:5c:5d:b0:72:33:46:
b9:c6:ec:2b:78:60:48:be:d7:30:20:b3:26:05:df:10:1f:a8:
5c:1b:8a:09:87:68:2b:0a:78:96:f3:dd:d1:49:2e:b4:ff:f7:
a4:79:2e:cf:fb:35:ba:05:02:81:05:79:19:e2:63:e4:80:44:
0b:60:ef:a7:bf:13:a3:0b:98:97:3e:4b:52:79:cf:1d:84:72:
07:f3:1b:3a:96:4e:82:31:50:e8:17:31:41:ba:11:e6:3f:d1:
42:66:3b:07:4e:3c:e5:5e:d1:04:52:41:06:f4:b9:79:3e:f8:
a6:95:4c:eb:a1:e2:b9:48:a1:7b:18:80:48:75:d3:00:37:ef:
4d:ab:20:be:4c:9a:e8:d1:b8:f8:61:3c:7f:a2:a5:98:bc:25:
80:d0:3d:8e:99:10:b7:24:de:44:b9:bf:1b:7b:cc:0a:42:42:
1b:f8:37:d5:75:eb:8b:02:43:2d:d9:55:ed:68:cd:61:29:aa:
33:c5:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org