Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5ebf6a25-f1e2-38da-9914-15a48fcc61d4.roa
File: 5ebf6a25-f1e2-38da-9914-15a48fcc61d4.roa (raw, json)
Hash identifier: QnPuTMoVni5GBdSDiCBgAx9RzicIMHgFmoLhzXScxNo=
Subject key identifier: E7:C8:D1:C7:05:A9:4E:3A:D5:CA:67:C6:2C:02:40:B8:59:55:DC:58
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BCD142CE10C31EA5800
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5ebf6a25-f1e2-38da-9914-15a48fcc61d4.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 21547
IP address blocks: 69.168.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:cd:14:2c:e1:0c:31:ea:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=3f3e9b37-525c-4c23-bbf5-3c8850dda1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:cc:70:ce:57:44:d0:10:57:3b:34:a0:ed:
13:19:ea:86:bc:c5:62:ee:d7:ba:3e:f6:d0:7b:35:
65:d7:49:fd:59:bc:e7:1a:2d:f2:be:a4:51:b3:d3:
7e:eb:51:7d:02:56:ed:41:93:2c:30:09:e9:6f:59:
3e:ff:1c:1c:ef:aa:84:05:a7:64:a4:74:7d:c6:8a:
33:9b:5e:07:c4:13:15:fc:02:13:ba:45:89:d4:d4:
42:3a:10:3f:71:0c:8d:36:ba:48:d0:88:8b:c5:6c:
f7:d9:31:1b:52:d7:08:6d:36:91:3b:98:77:12:a0:
ba:84:71:eb:bc:0e:95:25:4d:cc:76:fc:9d:b1:11:
66:c5:42:b1:a8:cf:d8:8e:fb:29:49:81:d1:af:65:
9f:9c:ac:df:79:a5:99:7c:c7:d0:55:73:74:c4:de:
dd:57:83:85:0f:b2:04:c5:87:db:2b:9c:8c:fb:60:
a2:e7:36:1f:d8:8d:aa:f8:21:60:c4:dc:90:5c:7a:
01:62:1a:bf:78:ea:e0:94:c6:c4:c2:9e:c5:23:75:
f9:4c:53:f0:28:84:7b:04:aa:6e:c5:de:3d:c8:61:
f5:ac:42:9d:eb:04:eb:49:b0:89:1c:9d:e6:e2:b5:
1f:0b:eb:79:76:db:68:fd:1e:80:18:1d:72:b7:08:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:D1:C7:05:A9:4E:3A:D5:CA:67:C6:2C:02:40:B8:59:55:DC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5ebf6a25-f1e2-38da-9914-15a48fcc61d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5a:bf:01:3c:db:fa:34:47:be:51:8a:aa:c9:65:1a:a0:26:
65:a3:f1:5a:07:7b:27:cc:e8:7e:2e:d7:93:d6:d4:46:fb:40:
c1:2f:f3:bc:a2:3c:8c:40:e3:b3:3d:95:ca:fc:82:32:2d:78:
d8:b5:ca:20:ea:02:63:96:44:e4:e2:4f:12:b3:72:ba:9c:a4:
ad:a4:08:66:e9:35:92:11:8a:96:1f:fa:a9:76:76:e1:b0:da:
de:76:68:d4:53:5f:91:c4:cb:7e:f6:4f:b6:7e:bc:26:bc:73:
08:4e:92:09:4c:dc:28:8d:b3:71:c6:e0:89:65:6b:ea:dd:e7:
8e:81:2e:cc:a0:9c:3d:f5:35:3a:cf:53:62:b5:a4:3f:8f:07:
01:e4:ee:8f:e3:5f:ac:b4:ad:df:9e:83:3e:aa:d4:91:ac:62:
e4:47:4c:ca:d2:d0:17:0b:03:bc:eb:96:0a:c7:0b:1b:da:c5:
9a:91:4e:3d:1c:82:8b:04:dc:d0:ee:08:48:17:6d:d9:58:3c:
04:10:e2:a0:0f:26:61:e7:50:e7:eb:e8:19:19:4a:10:2c:6e:
ec:e0:53:c5:89:ca:63:0a:e5:a3:57:79:9a:f8:d7:23:51:8a:
05:d6:cc:e5:95:0a:f8:3e:6c:29:b9:3a:bf:2c:64:d0:3e:9d:
0e:d8:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org