Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bdd40c61-1b0a-3584-b045-0619e26f16db.roa
File: bdd40c61-1b0a-3584-b045-0619e26f16db.roa (raw, json)
Hash identifier: WcuQWemvRSlL1ocmSyUl4+6HCNtqaVwt2CZYtoQqtfU=
Subject key identifier: 1A:1F:1F:A7:3A:62:05:A7:BF:77:29:3D:EF:A9:A3:6C:B5:1A:F9:AD
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9553543E36C73BEF5F40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bdd40c61-1b0a-3584-b045-0619e26f16db.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 15320
IP address blocks: 216.27.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:95:53:54:3e:36:c7:3b:ef:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=2703916e-e0b8-4a2b-8c23-b2edfd34c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:41:25:74:a3:e6:7e:67:35:64:5b:a0:fa:
ac:62:b4:51:36:46:87:a9:67:7a:9a:95:bc:c0:c2:
9b:dd:94:e7:3a:ac:dc:05:18:fe:8e:96:db:01:92:
58:92:d6:f1:31:5b:5f:60:58:44:70:98:68:03:8f:
ca:8b:f9:5a:50:d3:42:d4:b2:86:68:e8:3a:3f:bf:
01:f4:f9:d8:7e:18:90:69:99:17:d6:ed:4d:6a:2f:
e7:3f:34:8c:49:41:7d:70:39:c1:d4:1c:53:5d:33:
3c:c3:d5:2a:fe:54:41:36:80:d2:b0:2a:db:02:84:
c1:97:c5:43:4f:c7:a8:2d:3e:4b:64:21:c8:57:0a:
53:61:cd:af:d1:04:d6:f4:04:91:67:60:0f:6d:ed:
c5:27:aa:ae:91:7c:74:b6:bd:e2:77:1f:6d:18:52:
3b:08:3a:49:4c:3e:f9:a4:c7:6c:38:57:97:1b:a3:
48:eb:81:02:54:0c:34:6d:bb:a7:dc:41:75:81:29:
52:6e:01:4d:b7:24:d8:0b:42:5c:4e:a1:c8:e9:79:
19:bd:a9:79:13:0d:c3:ec:96:22:64:44:ee:7f:b1:
ee:81:05:b2:a7:63:0b:6e:1f:c2:33:3e:17:41:74:
99:ab:e8:1b:47:4e:a9:a6:31:22:26:57:41:cf:ee:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:1F:A7:3A:62:05:A7:BF:77:29:3D:EF:A9:A3:6C:B5:1A:F9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bdd40c61-1b0a-3584-b045-0619e26f16db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.27.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2e:34:8f:c9:90:74:f9:ea:e2:da:0c:89:b5:35:75:81:17:
0c:28:7f:b3:2d:eb:f3:2f:be:f3:7c:62:96:60:37:fd:62:f9:
bc:6f:45:6c:43:80:b9:ac:85:25:5b:b7:a1:23:92:49:7c:df:
38:a4:7d:dd:fa:5d:fb:43:c9:21:51:69:88:28:40:49:d6:1c:
62:db:9f:f7:97:bd:a6:59:32:94:63:7a:04:83:e5:dd:84:87:
7d:e0:57:93:ba:b4:bb:c0:65:e1:4f:30:df:68:23:de:7d:92:
27:7c:3f:a2:e3:1b:25:7c:84:d6:46:1d:ee:aa:8e:9c:cf:a8:
50:23:a9:f4:f6:78:38:6f:10:86:e1:77:92:33:26:ca:a0:4c:
a6:0f:f6:5f:f5:b4:1c:e4:72:9b:2b:25:6a:68:ff:bf:4c:cf:
b5:b7:3c:f6:be:d5:b1:11:4b:5b:cf:35:5c:4f:57:8a:6c:a1:
d4:23:93:34:33:89:aa:9f:ed:18:85:dd:6e:4d:fa:8e:0a:aa:
9b:26:4b:f1:00:56:c8:b3:d8:7a:ff:be:b3:83:44:9c:1b:72:
e2:70:bd:bc:82:ca:6f:b9:41:00:36:ee:e6:51:b4:66:1d:c8:
5f:e0:9f:bc:61:c0:c2:78:d4:90:23:c4:a4:bf:12:eb:0f:51:
18:da:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org