Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a048ffe0-380a-3f27-b31b-520ccde56871.roa
File: a048ffe0-380a-3f27-b31b-520ccde56871.roa (raw, json)
Hash identifier: i4GAl5jwISx9SuAWwA4nt9U+qZguKRdf0ZHX6sBiN/g=
Subject key identifier: E3:8F:36:E2:70:F6:95:1E:8D:62:55:E3:23:96:D1:B1:1F:33:62:51
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858408740BA2484FDB6A9E222F500
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a048ffe0-380a-3f27-b31b-520ccde56871.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 3770
IP address blocks: 216.179.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:87:40:ba:24:84:fd:b6:a9:e2:22:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=12a93614-9166-4ff4-bce9-c6938770ab00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:79:c1:f7:e5:f8:1c:93:ec:c9:d9:f5:e4:
37:f4:28:f3:a3:20:4c:49:f7:51:7e:17:c6:7f:32:
dd:f4:fb:6f:3b:f2:70:72:b1:6a:84:8e:77:1a:29:
b3:85:b0:93:c8:92:a3:a0:e5:47:9c:d0:70:23:fa:
30:cf:6f:50:19:76:f4:f2:27:ce:37:d7:e4:5b:2f:
82:50:24:7f:df:c8:bc:0f:8f:60:8e:43:bc:5d:bb:
f6:09:04:2c:10:9c:f2:fc:79:b8:a6:3b:a3:67:9b:
8b:d2:a3:6d:ff:54:82:57:a4:39:1d:9b:40:90:5f:
19:c1:ac:e0:23:cc:17:d2:15:2e:fe:e7:fd:87:ec:
f8:f7:be:ca:4b:a9:58:e4:0b:77:cd:40:22:b6:4d:
39:48:8a:1a:56:46:72:1e:23:09:0e:87:49:ce:32:
2a:05:c4:e1:6d:a8:cb:15:ba:8c:b6:56:ee:c7:2d:
bc:fa:31:cd:34:c9:18:04:20:67:17:2b:8e:76:72:
e4:76:66:60:9e:82:f9:fe:6e:db:3a:eb:f8:e9:ae:
2d:fc:c0:f8:f5:0d:73:d1:9d:64:b7:4c:47:eb:dc:
ce:8f:68:97:e2:90:ed:b8:f1:0d:3f:80:0d:c8:69:
d4:41:8b:ea:67:c1:67:81:97:3d:5f:ba:db:07:8a:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:36:E2:70:F6:95:1E:8D:62:55:E3:23:96:D1:B1:1F:33:62:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a048ffe0-380a-3f27-b31b-520ccde56871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.179.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:3c:ae:83:a8:5f:7e:1c:72:e7:f5:e4:94:f0:56:36:8e:22:
1e:3c:0e:05:bd:e3:6a:1c:e9:ff:58:d0:ed:c5:4b:97:58:1b:
72:1d:3e:aa:92:1a:8f:b9:e1:d9:12:69:a7:fd:45:01:fd:69:
6e:56:6b:c3:f6:33:53:29:22:95:0b:5d:76:7d:87:52:f1:73:
e9:ec:d1:39:96:e6:0a:5e:e5:66:f7:42:7b:89:79:15:32:9f:
da:f1:08:6f:ae:fc:03:13:0c:eb:92:4b:b9:42:9b:30:26:e1:
ec:f8:cd:09:69:5a:0f:66:0f:6d:56:af:16:7a:f6:85:6d:29:
b4:cb:05:0d:2c:af:97:f6:d7:59:3c:39:9a:71:1f:0c:b2:43:
17:86:59:8d:e0:d8:6b:1a:d6:c8:e1:46:76:6f:58:fc:6f:b1:
1a:3c:0f:e7:3a:e2:9a:99:f5:e2:d5:6e:09:71:60:87:78:a4:
17:32:24:7c:fb:a3:b3:d3:84:10:d0:06:a0:2b:97:27:a8:ce:
fd:2f:05:49:5b:d7:f7:1b:64:f4:40:31:fb:34:8a:c1:1a:93:
33:d6:4c:b2:ae:f5:14:24:68:b5:e5:d8:d7:83:4a:65:43:bc:
e1:54:24:77:0f:71:6a:f8:12:ed:f3:ed:f3:30:c4:a9:83:bf:
30:4b:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org