Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a073fb68-476b-3820-9024-0da4460cb455.roa
File: a073fb68-476b-3820-9024-0da4460cb455.roa (raw, json)
Hash identifier: HIyb6aR1XBZF/wfWXBm/mYV7TsSb64DoBg8VGPigFc4=
Subject key identifier: 9F:42:E5:00:04:02:4D:37:12:73:4C:C2:F8:1E:31:6D:69:56:91:F6
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BB42940CB87B0398500
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a073fb68-476b-3820-9024-0da4460cb455.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 27382
IP address blocks: 69.84.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:b4:29:40:cb:87:b0:39:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=3b6eac28-12d1-46ec-86de-d949e82023f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:a0:29:15:ca:f4:d2:e5:94:26:56:56:4f:
84:20:71:35:c4:46:7c:47:bf:39:06:eb:21:00:62:
98:b3:7e:74:14:55:30:a1:d6:da:95:70:4d:0b:c6:
b2:1b:69:27:13:7b:16:a0:47:7c:14:60:3c:c1:5c:
9c:ba:4f:6f:86:27:d2:eb:08:b3:a5:3f:be:11:95:
4c:a2:a2:12:0f:4d:79:b9:36:8e:98:fc:6c:6d:f0:
54:07:63:40:b7:2c:79:79:0c:76:ba:29:65:61:e3:
2c:d4:cc:f8:40:f0:45:56:48:e6:d3:ee:0d:b3:0b:
64:97:bf:c6:bc:3d:f3:ec:58:cf:e4:64:1d:3d:e5:
dd:df:4d:f6:40:8f:1b:94:94:6c:2e:3b:d6:88:af:
e3:73:b7:5f:e4:00:8d:6b:d9:17:8f:11:0c:ff:1d:
c3:a6:ec:21:b6:2f:8b:90:70:10:d8:32:0e:2e:3f:
41:dd:b1:dc:cf:5d:95:4c:7d:75:f7:2b:06:7d:cd:
0d:61:50:1f:cb:14:2d:2b:3f:3f:b2:e6:fa:92:5f:
9e:3b:1c:58:4c:d4:84:e6:5c:69:2c:f6:38:b9:eb:
4f:8c:e0:9c:79:3f:50:89:05:c7:f9:4f:3d:34:99:
04:26:cd:dd:67:b9:cb:d3:c0:bd:01:3d:e0:7e:5a:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:E5:00:04:02:4D:37:12:73:4C:C2:F8:1E:31:6D:69:56:91:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a073fb68-476b-3820-9024-0da4460cb455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.84.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:25:fb:09:ec:4b:7f:b2:b7:8a:99:78:f0:b8:36:41:a6:17:
5f:bd:9e:1a:c3:fe:e0:54:bd:a1:24:a2:55:c5:f8:d0:ba:6b:
9e:0f:d9:ff:1b:ae:ad:b5:bf:44:01:fa:2f:5a:07:02:8b:aa:
60:7f:1f:86:99:22:9e:63:7a:e9:a4:81:7e:73:e8:10:d3:d1:
18:01:04:ba:95:5a:04:73:a4:ae:8a:cc:4b:a4:96:93:e4:c0:
21:4c:aa:1d:93:4e:a3:b3:e2:9e:d6:ef:d7:d0:09:83:54:bb:
9b:0c:b9:66:ca:37:a4:c5:82:53:b1:67:c9:3c:b4:b3:19:a1:
6b:18:0a:58:04:3c:95:8d:44:9c:a9:c9:6f:6d:bb:33:20:b0:
68:65:1b:d8:e8:c0:06:89:b0:31:e1:7e:4d:5e:55:00:18:bf:
8b:18:18:55:a3:64:a9:b5:ca:ae:24:0c:14:dd:27:98:12:bc:
79:c4:ea:52:4d:71:84:14:9d:6c:91:aa:7b:9d:af:5e:87:39:
d6:03:e9:45:cb:74:d3:c3:9c:ec:6b:bb:a5:72:f6:30:c9:12:
0e:a1:b0:b4:88:4b:01:14:0e:b5:f9:53:3d:a7:fb:6f:67:59:
79:7b:5d:ce:32:29:78:ee:63:8f:16:5a:9a:5d:fd:ff:ac:1d:
a6:85:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org