Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/616ae426-0651-30f6-8060-4675d3dffc57.roa
File: 616ae426-0651-30f6-8060-4675d3dffc57.roa (raw, json)
Hash identifier: 6p+XRjMOhAVHnCffabI5It7T9tXdKLx5lxLEHuD7QWI=
Subject key identifier: 3C:3F:D2:24:95:0A:EA:C0:10:13:52:67:E3:80:FC:CE:7F:77:2A:FE
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285842A30916CDEDE45E62E4FF8480
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/616ae426-0651-30f6-8060-4675d3dffc57.roa
Signing time: Sun 23 Jul 2023 01:00:17 +0000
ROA not before: Sun 23 Jul 2023 01:00:17 +0000
ROA not after: Sat 21 Oct 2023 01:00:17 +0000
asID: 3257
IP address blocks: 134.195.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a3:09:16:cd:ed:e4:5e:62:e4:ff:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Jul 23 01:00:17 2023 GMT
Not After : Oct 21 01:00:17 2023 GMT
Subject: CN=08a3c221-41ff-42ae-be79-81b495b5b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:bc:c7:3f:5c:13:84:04:59:64:48:83:2b:
a8:73:7b:63:21:4d:f7:73:47:f6:48:ca:a9:82:8a:
35:36:6f:9d:bf:5c:fd:cb:f9:f2:f2:03:56:29:f8:
69:f3:2f:aa:4d:c9:97:55:cc:4c:27:1d:eb:7a:a0:
82:00:05:0c:4e:80:a5:e0:14:39:cd:34:75:36:9c:
78:97:20:7c:e7:d2:16:fd:fc:5b:64:eb:29:ea:63:
0e:ed:82:34:ff:db:0b:17:fd:c5:1d:1b:1d:02:36:
c0:3a:73:d7:c1:d0:43:eb:cb:0a:8a:3e:9c:a8:29:
75:dd:c5:df:5c:0d:af:c0:6e:82:15:78:71:91:c5:
7a:c1:73:cc:c8:7a:34:7f:17:c8:0e:f7:16:f1:12:
e0:ef:9d:9d:de:55:12:e3:cd:b1:dd:6b:e9:e9:43:
a5:5d:97:14:62:f6:91:aa:21:97:58:76:64:0a:97:
78:30:77:49:9a:b0:47:d2:0e:d5:36:53:9e:65:79:
94:a7:3b:9e:14:d3:96:2c:e2:20:15:19:0a:ad:5d:
b6:ae:8c:a6:04:16:cb:f2:02:8a:48:fa:3f:a4:bd:
74:37:a0:3e:31:67:8c:8c:81:9c:fd:a6:6b:d4:73:
89:91:a2:dd:bc:b5:03:f1:dc:8c:e5:37:4a:bc:bc:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:D2:24:95:0A:EA:C0:10:13:52:67:E3:80:FC:CE:7F:77:2A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/616ae426-0651-30f6-8060-4675d3dffc57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:10:f1:d4:aa:2c:d2:25:8a:b9:ea:c1:30:43:6f:7c:66:95:
fe:68:f4:af:86:61:6d:c3:01:ec:cd:0e:0b:c0:42:54:cc:75:
03:52:9b:7d:6a:d1:0a:8f:7f:e3:82:b6:9d:53:fa:43:9b:03:
9d:d3:d0:08:24:9d:07:82:3c:16:28:14:d6:c3:38:41:2c:ee:
27:0c:bc:04:8a:5e:e7:ad:59:15:eb:cd:f4:fc:ed:73:2e:35:
67:bd:17:4f:52:65:89:31:fa:94:90:33:12:ce:85:94:60:f9:
93:b7:d1:08:50:db:33:70:57:bc:81:a5:21:10:62:74:a0:ce:
a3:56:30:e3:28:c4:d5:c9:9e:71:25:fb:af:1f:f8:73:08:79:
bf:f9:41:e3:37:fc:7a:2b:2c:84:62:36:6d:32:45:0b:aa:b8:
69:71:e3:89:62:bb:d6:e9:67:db:d0:dc:12:d1:92:9f:50:d7:
8e:ed:da:40:12:5d:eb:5f:7c:2a:da:cb:d9:ec:cf:c0:ee:86:
4b:15:33:7d:0f:d0:8b:84:c8:ae:a7:02:25:98:bb:6f:ef:bd:
3a:7f:30:db:ee:83:ba:ba:71:54:a5:a3:39:3b:a2:17:a9:c0:
1e:4b:84:96:d7:76:74:bf:e5:7a:43:c4:f2:c5:be:ec:83:79:
40:88:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org