Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/380955ef-a90d-339a-bec3-fe2b3109742f.roa
File: 380955ef-a90d-339a-bec3-fe2b3109742f.roa (raw, json)
Hash identifier: lRGMAyzgZG1UaCpuH+mMhDZzo1QPMP7efklv4nyFiUA=
Subject key identifier: DB:7A:0F:D8:74:DD:CF:E3:6C:30:01:F3:46:15:D9:A2:63:86:88:0A
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BC010ACADC54F30D340
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/380955ef-a90d-339a-bec3-fe2b3109742f.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 13536
IP address blocks: 68.70.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:c0:10:ac:ad:c5:4f:30:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=867d2460-85d9-496e-970f-81e01eca4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:4b:3b:ca:67:c9:4e:27:3b:63:04:f9:10:
45:4b:0e:20:63:45:a7:3d:42:7e:a2:c5:2b:9a:ef:
61:86:91:4f:7b:3f:8c:24:61:2e:9a:5a:43:46:25:
bf:d8:29:8b:75:b0:d6:f4:2e:89:94:fc:4a:76:ce:
d3:de:49:43:c4:a8:d7:2b:b7:32:6e:6d:d0:9c:a1:
99:02:2d:d4:e7:d0:ec:ad:8e:b1:0e:78:05:79:b5:
9d:44:24:db:c2:9e:e6:ce:4a:61:19:dd:68:96:86:
b9:d4:a5:c0:cb:8b:8c:bb:37:a7:eb:f1:9b:1e:9f:
f1:5f:1f:17:53:cb:6c:42:34:bf:27:6b:e9:4a:18:
ee:67:65:47:6d:54:64:7c:df:b5:7d:d0:f7:fd:3e:
14:c1:49:1b:4b:d7:d4:3f:62:24:e8:35:97:38:66:
b0:80:c0:8e:d8:31:eb:73:fc:a1:39:e7:77:94:c4:
fd:c5:c6:9e:27:9d:3d:b7:a6:6c:35:47:f4:ea:5e:
67:3e:3a:57:79:10:88:80:d0:97:48:c9:ee:79:27:
f8:6e:da:45:f3:64:96:f9:c7:f6:cf:fe:c5:fa:58:
a0:a1:9f:82:a0:ee:db:2e:8c:8a:c9:13:f9:d8:29:
3a:7e:9a:01:8c:d1:49:87:38:28:a8:00:41:fb:2d:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:0F:D8:74:DD:CF:E3:6C:30:01:F3:46:15:D9:A2:63:86:88:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/380955ef-a90d-339a-bec3-fe2b3109742f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:31:c9:73:b3:74:ea:9e:49:a9:8f:ed:d3:e5:c6:11:cf:4f:
90:6c:df:fb:b7:93:66:f5:46:6d:2a:b0:e5:f9:94:68:d3:15:
ae:5e:f9:46:f7:40:f8:9e:07:df:39:1c:8b:41:0b:80:f9:f5:
ed:9d:37:d1:ef:e4:db:a8:0b:57:d6:81:37:d8:67:8f:df:8d:
a9:b3:44:a7:53:a9:87:04:dd:eb:65:f4:4d:4a:a8:03:73:6c:
dc:b4:69:23:e3:4b:19:6f:f1:e4:49:a5:0d:d7:ed:9e:f5:25:
8e:64:41:cd:c6:e6:93:0c:5c:ba:f2:b7:8d:e6:37:2b:c5:21:
7f:85:50:b0:c1:30:e4:28:41:90:91:e6:f4:1c:45:45:2e:0c:
09:ac:b5:d0:4f:39:f6:ea:fb:3c:91:9d:92:45:4f:27:fd:80:
4a:4f:79:2c:4e:43:e6:e5:a8:84:b3:29:75:55:6d:bb:ac:23:
12:29:c3:ca:3c:f6:1c:23:67:4f:75:41:81:64:c7:b3:ab:4b:
1d:cd:81:17:dd:89:9b:98:df:30:8a:65:7a:3a:00:dd:17:40:
08:c7:7c:00:90:3f:2b:71:1b:42:23:24:1f:68:44:6c:ef:15:
21:db:86:1d:ef:5a:72:01:5c:3c:20:71:85:de:44:4f:95:76:
c2:2f:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org