Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c541039a-4ebe-325e-a95b-d2ed105e7946.roa
File: c541039a-4ebe-325e-a95b-d2ed105e7946.roa (raw, json)
Hash identifier: un1NNPTrO6y2/WKTJodptrohivWqDw3vU1cd7REqxnA=
Subject key identifier: 28:20:22:89:29:F8:96:1D:70:35:5C:1E:43:8A:6E:0E:26:DC:E3:F0
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584087746758C647F7FFD3410A80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c541039a-4ebe-325e-a95b-d2ed105e7946.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 14477
IP address blocks: 66.152.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:87:74:67:58:c6:47:f7:ff:d3:41:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=8d82b7b8-b005-472e-9509-30022b0319f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:ff:cc:51:f2:03:7f:f0:0f:4b:b4:2b:92:
ee:d6:bf:c7:97:6e:a8:69:42:ad:3b:08:2f:14:17:
3e:09:a2:5c:51:68:75:01:a7:05:82:5e:20:89:59:
2f:de:c5:4f:11:4c:0b:86:f1:21:46:d9:e4:c8:9b:
b8:78:9b:86:94:6a:2a:e9:38:d2:f3:a7:2d:fd:23:
0a:1c:e9:71:46:27:73:ea:ea:21:09:fb:e6:b0:3b:
38:f7:03:ec:0e:44:0b:6a:de:94:0f:80:cc:59:38:
62:98:51:fc:46:4e:e2:9e:be:00:e4:15:ea:92:80:
0c:fc:ea:e5:e6:c2:31:07:49:4f:56:45:9f:06:6c:
36:e2:07:9a:80:01:2e:3f:57:a5:1c:7c:f0:9b:df:
84:fa:4e:3b:c2:db:f9:4d:75:57:e7:e5:d7:09:4e:
ab:68:62:85:4d:13:ae:16:4f:05:25:b2:ce:85:89:
50:a2:11:8d:e3:4c:29:34:10:8d:ba:8f:de:b4:8c:
34:34:5b:12:07:52:3c:1b:3f:aa:1e:12:e1:a6:6a:
8b:fb:21:d3:8f:b5:23:b3:6a:65:52:06:82:66:a6:
7c:16:05:1d:42:eb:ce:04:32:26:3a:6e:26:2e:dd:
39:99:05:fe:4f:6c:f9:6e:20:37:9f:b1:39:12:73:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:22:89:29:F8:96:1D:70:35:5C:1E:43:8A:6E:0E:26:DC:E3:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c541039a-4ebe-325e-a95b-d2ed105e7946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6d:7c:ff:fc:ed:eb:b0:d5:2d:16:5f:a0:c1:41:9f:6b:d9:
9c:0b:6d:7e:0b:b2:e8:c8:04:27:7d:ee:2c:54:a0:e0:d0:32:
b9:f0:bb:f2:57:f9:17:5d:b1:af:b1:23:a6:11:52:99:66:b1:
1e:e2:70:89:2d:a5:06:eb:ed:e7:ef:f7:f6:2e:90:aa:a9:7f:
c6:e0:8b:3e:66:de:36:9c:7e:d6:b9:4f:bc:12:2b:da:1f:0e:
11:ec:7a:4d:d2:42:24:e2:c6:21:80:2a:45:03:e3:da:fe:c0:
ed:7d:ee:b0:be:03:a8:4c:8f:25:2a:57:bc:66:0e:46:e2:c0:
35:65:9a:9d:7b:08:76:29:48:fc:58:48:59:9e:d4:ba:65:3f:
a6:e5:0b:56:c2:e1:c3:62:c7:e0:04:9e:1b:07:9e:af:09:2a:
3e:fb:32:43:a8:91:8f:b9:c5:9a:82:ce:34:f2:ea:d5:56:1a:
50:20:80:36:af:3e:85:ae:d3:8d:3f:ad:a1:67:c6:12:53:47:
0b:32:6a:a6:f3:b9:ab:f4:06:f5:6b:b4:24:c9:ea:e0:b9:7e:
e3:11:a8:11:fc:63:c0:c6:3c:cd:3b:b0:30:c1:28:39:60:16:
8e:ea:ac:64:24:d3:6e:3f:44:dc:03:68:7d:2c:fe:87:91:b2:
fa:12:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org