Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f52df46f-393c-3ede-9ff6-e984e76ea853.roa
File: f52df46f-393c-3ede-9ff6-e984e76ea853.roa (raw, json)
Hash identifier: j5PBxREvx0/s2RvP2TfTgnZUlJSJWAnq0y/W5QbIM/8=
Subject key identifier: 5E:AD:72:9F:63:DD:D2:7B:6E:C9:31:6D:42:52:7F:6A:42:35:24:4E
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9B9652E39203DF2A1880
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f52df46f-393c-3ede-9ff6-e984e76ea853.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 21547
IP address blocks: 72.55.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:96:52:e3:92:03:df:2a:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=3e0ab26d-7fc4-42a6-82ba-4a6aa3005dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:c0:25:8f:47:f3:a9:6f:8a:d3:93:be:da:
1f:0e:3b:83:52:b1:fd:ce:f3:00:57:80:8a:9b:c3:
51:c6:b8:85:a1:c8:ba:67:d4:51:b3:b3:7d:ee:e7:
ea:2b:cf:23:e3:33:40:58:08:6c:e1:f5:1d:e4:cc:
c8:ef:31:a2:86:63:88:a9:ad:b1:47:cc:80:4e:9d:
0b:0e:75:7a:d3:bf:e9:21:25:f1:83:ba:c5:1f:73:
58:45:08:7b:ff:48:87:0c:88:93:59:e1:20:5c:27:
36:81:07:06:b8:e8:1f:fa:85:3c:dc:c0:c4:ac:c5:
d6:66:66:30:42:71:eb:f6:e8:0b:da:1c:ee:7d:2c:
18:a6:00:8c:82:87:10:6a:24:4c:59:44:47:97:d8:
27:47:0f:64:a8:df:d3:da:19:6e:49:ce:cd:e0:8d:
e8:4b:2d:8d:df:a1:78:66:64:46:22:a2:d1:9e:de:
62:ec:14:e9:17:2f:74:12:3c:25:02:24:06:ca:20:
ea:92:ba:63:62:2d:42:10:83:67:cf:14:90:98:e7:
0e:28:23:3b:c5:aa:df:59:c9:7d:05:c2:28:30:84:
57:e4:9f:c8:8e:71:6f:26:3d:cd:f7:86:51:6d:17:
92:51:19:58:16:11:b2:4f:63:b4:9d:b1:0e:b4:35:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:72:9F:63:DD:D2:7B:6E:C9:31:6D:42:52:7F:6A:42:35:24:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f52df46f-393c-3ede-9ff6-e984e76ea853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.55.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:17:09:7c:a8:cb:02:02:b8:fa:9a:db:21:c7:0b:95:7f:9e:
7a:58:42:5c:73:47:83:99:9a:93:b8:eb:a9:b5:41:66:a5:4c:
3e:6f:9f:48:77:e4:d8:d2:b1:7f:45:cf:7c:43:6d:df:a0:88:
63:dd:57:46:d6:00:64:55:08:e4:56:0b:8d:9c:37:56:ad:49:
d4:41:e3:9d:ca:a9:56:0d:ef:0b:85:6a:90:d9:f6:ed:c9:ba:
bd:b4:f1:bc:4d:9b:4e:aa:d3:33:55:20:84:ab:17:aa:a3:3b:
d2:73:d6:fb:ea:15:92:40:b3:37:ed:28:8b:85:58:10:1c:3e:
b1:c0:48:21:46:38:9f:f2:f0:9e:9d:56:f7:f9:91:cd:03:4c:
6b:72:bc:94:c3:bb:5f:5c:4e:2a:80:3e:bf:b2:fb:19:c5:b3:
e4:9e:1a:c3:bb:20:af:b8:4e:e3:86:f8:39:ba:bb:4b:2e:53:
9c:e0:4e:14:be:20:f7:88:4c:ec:3c:a2:38:b1:0d:ab:67:c7:
81:94:4e:3c:0e:4c:39:86:ba:65:9d:e8:8b:bd:cf:e6:fe:01:
fc:be:25:5b:52:f6:71:20:dc:63:f3:8a:1b:bf:ff:0d:98:24:
0f:c7:00:f6:20:f0:13:a4:48:d6:43:fa:b7:27:96:fa:d3:3c:
71:32:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org