Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/6fffe25c-17df-37b8-961a-94490ce8408f.roa
File: 6fffe25c-17df-37b8-961a-94490ce8408f.roa (raw, json)
Hash identifier: n/zPL12aQZX/SJazAw1GUBtAD8kDgLsVDqU1nYUHyBY=
Subject key identifier: 0A:43:2E:8E:D2:55:D1:A3:C1:85:A6:B5:6F:07:F0:A3:D5:44:A2:4D
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285842885008FF86BEB9F8F937F980
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/6fffe25c-17df-37b8-961a-94490ce8408f.roa
Signing time: Thu 13 Jul 2023 11:16:28 +0000
ROA not before: Thu 13 Jul 2023 11:16:28 +0000
ROA not after: Wed 11 Oct 2023 11:16:28 +0000
asID: 834
IP address blocks: 64.112.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:88:50:08:ff:86:be:b9:f8:f9:37:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Jul 13 11:16:28 2023 GMT
Not After : Oct 11 11:16:28 2023 GMT
Subject: CN=ce9f80be-a7d1-4c28-a7b5-a53dc0f0463a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:24:9a:f4:1a:97:ed:5e:9e:f0:04:c0:ee:
f6:fb:2b:49:64:b5:24:8e:66:01:8f:49:c5:e5:af:
a1:8c:45:c8:ed:01:10:a1:89:0b:54:c9:65:76:b3:
ca:a3:e0:89:b0:9d:8f:41:01:14:71:20:32:aa:92:
6f:59:a5:e6:b5:7c:60:2f:ba:2e:f7:4b:20:a1:eb:
5e:21:6b:de:04:54:5b:f8:be:33:5a:b7:80:11:8a:
ec:cf:7c:80:ba:49:7f:76:fc:a2:74:0d:3d:a5:cd:
04:2f:87:db:1a:d8:4f:79:a5:32:bb:85:f4:d5:72:
ba:95:5f:f8:5a:98:70:12:18:7b:bc:f6:75:81:ec:
ab:39:cd:72:a0:07:28:59:b6:23:56:1b:a8:c0:da:
3b:bc:5c:69:09:75:67:43:5b:ab:6c:bd:e1:94:d7:
77:7c:b6:b4:38:50:d0:4a:79:d9:56:2c:f6:36:fe:
5f:f1:54:ae:d9:42:17:8b:53:d4:13:9d:fd:ae:e7:
b6:3d:cf:3d:82:d3:b3:d9:15:f8:6e:a0:53:92:bf:
3e:f5:b9:01:c1:3a:77:bb:83:b7:06:e5:f9:41:60:
ac:94:04:93:93:0a:cc:58:fb:72:f1:90:d1:50:30:
5c:ed:1e:cf:a0:af:00:06:f0:ae:0b:0a:37:53:a0:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:2E:8E:D2:55:D1:A3:C1:85:A6:B5:6F:07:F0:A3:D5:44:A2:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/6fffe25c-17df-37b8-961a-94490ce8408f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:14:0e:b5:53:e4:47:a1:d3:8b:e0:a6:b3:be:48:c3:bc:06:
02:11:2d:a3:a2:35:59:29:74:f5:08:e4:00:2a:ce:4a:5f:ef:
a9:1b:4b:e8:fe:f1:c7:ba:81:2a:3c:18:92:f9:81:95:f1:da:
34:cb:1f:4d:7f:1e:72:32:95:8b:e1:2e:af:54:69:c3:52:96:
7e:50:9a:c1:c3:6e:b4:7b:24:50:ac:6d:a1:08:49:d4:6e:b8:
7b:cd:a1:0b:7c:03:ad:40:70:19:10:d9:b3:ec:86:6d:3f:ef:
6d:5c:55:73:1a:86:31:08:1d:ff:f4:8d:c2:2e:fa:06:a7:2e:
45:f7:5a:45:78:9b:0b:0f:83:5f:9f:c5:e0:bf:e6:57:8a:6c:
5e:4a:5c:1e:41:03:1f:2d:05:ea:f7:56:42:4c:0f:df:63:e6:
e5:03:db:ed:4a:36:7c:be:80:89:89:48:da:65:cb:83:45:62:
09:38:33:a3:d9:39:b2:98:e5:c8:bd:c4:cd:97:34:72:fe:dd:
2a:e3:0c:4c:86:be:a1:e8:25:a6:66:5d:37:e1:47:76:6f:c2:
a6:06:7f:88:fd:24:80:ce:89:05:93:2a:95:75:70:89:73:bf:
f1:fc:51:24:b8:6a:8e:88:86:e4:ab:b9:00:08:76:ba:5a:d6:
0d:ba:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org