Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b5942397-16c8-3c1d-ad5e-82c091ae18f5.roa
File: b5942397-16c8-3c1d-ad5e-82c091ae18f5.roa (raw, json)
Hash identifier: oMqmtOw0Xydrho3Xsxy0pyQXjjOLJK3+hxIluPJqq3E=
Subject key identifier: D9:8D:51:E6:29:E4:8F:A3:D0:AE:EA:74:A6:A3:81:78:F0:DA:92:C5
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858407BD51E1AC2CB20C40FCC3080
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b5942397-16c8-3c1d-ad5e-82c091ae18f5.roa
Signing time: Fri 30 Dec 2022 19:32:05 +0000
ROA not before: Fri 30 Dec 2022 19:32:05 +0000
ROA not after: Sat 30 Dec 2023 05:00:00 +0000
asID: 14477
IP address blocks: 98.159.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7b:d5:1e:1a:c2:cb:20:c4:0f:cc:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Dec 30 19:32:05 2022 GMT
Not After : Dec 30 05:00:00 2023 GMT
Subject: CN=ca230804-b25f-423c-bbb0-bf1ff99ddfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:86:bc:5a:43:3f:0f:ec:f5:ef:74:45:41:
6f:2c:e2:36:24:d0:41:d0:bd:23:2e:63:e8:6b:ee:
c4:aa:d8:1d:f0:6f:8c:4f:c9:85:e9:1a:74:ac:af:
28:a9:b0:6e:ed:98:dc:2b:0f:1f:0e:9b:7c:c4:ee:
ae:b4:e5:96:ad:2b:57:0a:ae:7f:3a:33:36:2f:d6:
55:ab:c6:1f:ad:e7:d6:53:cc:5d:23:1e:ba:07:91:
7e:f9:73:bb:b5:b8:9f:eb:16:e5:e3:3e:b8:a4:de:
ef:0d:39:cc:fb:92:13:21:a7:99:13:2e:f5:f9:52:
70:4f:21:a8:79:82:e8:c7:97:62:d6:be:8b:c4:c6:
34:54:c1:47:5a:a1:ed:64:4a:60:2c:1f:33:89:3a:
49:47:b9:5c:66:f9:2c:e8:4d:a4:8e:43:1a:08:16:
37:9b:b5:78:45:a5:33:1b:c5:c7:fd:2f:63:bf:58:
ab:21:54:f5:2e:be:28:03:6d:ed:44:c6:66:b8:20:
d3:e3:54:01:1a:b5:02:20:44:21:97:35:b0:26:8a:
ff:8f:84:9f:cf:5c:49:69:2f:4f:d7:e3:5c:13:35:
65:24:e4:9f:93:77:07:0b:80:11:e7:b2:b2:4a:5d:
fc:09:8f:0c:0f:8f:e4:84:27:8a:c0:54:a9:f9:c2:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:51:E6:29:E4:8F:A3:D0:AE:EA:74:A6:A3:81:78:F0:DA:92:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b5942397-16c8-3c1d-ad5e-82c091ae18f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:67:5a:e4:5e:ad:86:da:40:0a:c8:c9:ce:0e:12:a5:89:dc:
27:cf:9d:2f:31:e1:4a:99:1b:e4:58:66:cb:eb:f8:5e:13:b8:
60:0c:a7:69:cf:eb:e6:52:71:47:99:71:5b:12:ce:4e:b9:91:
bb:03:5b:1c:ca:b5:f8:3e:49:44:a7:89:8f:cf:9b:ad:6a:7d:
41:a7:23:0b:ee:cc:f3:19:c6:97:e5:b8:87:9f:e1:c0:9d:08:
a0:53:93:27:b8:ee:50:67:c8:00:1d:e2:b7:5b:eb:28:3a:86:
28:40:5d:5c:a1:91:11:1b:8e:77:b9:bf:ab:be:97:80:f8:41:
eb:13:5d:63:10:36:ab:bd:df:db:f0:8e:c8:eb:fc:29:1a:34:
02:6d:30:3f:dd:05:8b:23:15:72:40:16:b0:f4:bd:9c:dc:22:
0e:7f:5d:77:7c:9b:82:f2:3c:5a:be:21:34:2c:61:2f:ec:30:
7c:ee:71:9f:e1:5f:ed:e2:2e:fb:78:52:d7:d7:ee:3a:84:0a:
f7:c9:ba:84:de:d4:1f:02:f5:03:74:a3:20:16:01:ce:0b:b5:
c7:f1:ce:44:06:5a:04:fa:f5:be:44:99:ae:a8:84:44:23:cd:
23:6e:7f:83:22:da:62:36:6b:cf:bf:06:a5:d2:0e:12:cb:fa:
44:a8:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org