Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ff99a77-711d-301f-b3a8-15fc82aaa2a4.roa
File: 4ff99a77-711d-301f-b3a8-15fc82aaa2a4.roa (raw, json)
Hash identifier: IaTK8yvGu6GppG6biI+/igUQeUSzNSS+jTDRYOir5Fc=
Subject key identifier: C5:F7:1F:25:C0:FB:5E:0A:C7:99:68:F8:DE:D6:C2:AD:97:A0:6C:E1
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BC1AE3F0BB0D03DAA20
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ff99a77-711d-301f-b3a8-15fc82aaa2a4.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 21547
IP address blocks: 72.12.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:c1:ae:3f:0b:b0:d0:3d:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=7d2811f3-95fe-4761-98ca-9fa3bffe9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:5a:c7:b7:8e:b8:a5:0d:ae:d3:82:37:fe:
78:dc:32:0c:d7:49:44:ae:c0:18:d1:f4:e1:05:e4:
cb:f7:cd:64:49:81:eb:19:40:82:16:10:c6:01:ca:
77:fd:8f:0c:c2:04:e7:f4:75:16:af:dc:b5:c1:90:
5a:62:24:28:a8:12:5c:3c:aa:37:83:84:55:66:05:
f8:0f:d7:9c:34:66:29:4d:d1:03:7f:f1:8e:5b:0e:
f0:19:a5:28:05:ff:a5:2c:77:16:8a:88:64:13:e1:
cf:5b:5d:be:5a:45:6a:90:f5:7c:bc:ba:40:b8:b0:
56:52:09:14:10:8d:de:46:9d:a7:cd:f7:b8:4f:4f:
36:e6:2d:1c:1a:0b:6c:91:fc:b8:3b:5f:97:59:8e:
bf:12:3a:0f:82:40:ac:c9:0f:46:d3:fc:0c:d5:b4:
ac:5a:82:e4:fa:62:b6:1d:1a:63:c2:2c:f4:8c:0a:
9e:fa:28:57:87:f1:35:f3:6d:44:d4:27:b7:b5:e5:
bd:ac:84:18:41:aa:3e:6a:2c:24:41:d8:38:60:7d:
c5:70:99:5f:49:94:97:de:bb:be:3f:14:cc:9f:47:
e5:99:05:44:76:5c:be:43:17:ed:4a:9e:c8:1d:a9:
91:44:1f:6b:cb:31:97:bf:05:c5:b1:e0:cd:91:db:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:1F:25:C0:FB:5E:0A:C7:99:68:F8:DE:D6:C2:AD:97:A0:6C:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ff99a77-711d-301f-b3a8-15fc82aaa2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.12.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3e:16:bd:fa:11:ae:30:c2:f5:47:11:80:4b:fa:a0:71:b0:
22:67:bd:4f:65:88:76:37:43:81:2b:f7:8c:bc:8a:0b:c9:22:
9f:36:f8:2c:15:12:a9:19:17:26:0d:4e:1b:a8:c0:b7:5e:ab:
cd:8d:8f:4d:9f:b5:7c:30:42:f5:ac:b0:93:70:f2:08:25:a9:
cd:42:7e:01:9d:47:74:17:a8:17:ce:0e:72:f9:16:81:57:2e:
97:9a:12:e1:70:3a:f7:a0:25:4e:ef:00:a4:36:07:9f:8a:58:
c3:97:b8:b3:b9:31:c8:6a:ed:de:ce:08:df:df:3e:ea:48:a2:
2a:80:9d:12:24:7e:81:4e:8f:c4:a2:e8:16:99:f9:d4:3a:30:
5e:4b:74:85:1b:0f:36:46:06:5d:ab:75:54:3f:f3:05:ff:d9:
ba:e7:73:45:8c:b6:b5:9c:7d:49:64:0c:f4:a8:81:e7:b9:31:
2a:14:90:e3:7f:33:28:95:d8:8d:60:79:78:bb:ae:9a:55:77:
66:bf:ff:cc:6b:9b:9a:f9:42:82:0e:3c:5b:e0:ab:51:ca:64:
b5:67:c3:a6:d9:4e:18:20:04:eb:d8:a5:69:e1:44:0b:8b:9d:
fb:38:1d:34:67:46:10:51:51:64:60:26:0f:91:d1:3c:16:e1:
1a:47:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org