Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa
File: 2d321e5c-c24e-309b-8dbe-811f709bffec.roa (raw, json)
Hash identifier: dVJZTnHZcWzIV8Mb2sC77lr14hF4qZZsv9Lpszc21fw=
Subject key identifier: 43:4D:7A:93:27:FB:0B:E8:9F:1D:52:F7:02:93:C7:87:3F:75:38:7F
Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Certificate serial: 010D0C9F43285842C237286362535728FBBFF400
Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa
Signing time: Thu 03 Aug 2023 05:03:13 +0000
ROA not before: Thu 03 Aug 2023 05:03:13 +0000
ROA not after: Wed 01 Nov 2023 05:03:13 +0000
asID: 14618
IP address blocks: 208.99.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c2:37:28:63:62:53:57:28:fb:bf:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Validity
Not Before: Aug 3 05:03:13 2023 GMT
Not After : Nov 1 05:03:13 2023 GMT
Subject: CN=beadd87c-bd43-4e67-9f28-c1b02f752c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:74:95:1d:b6:bc:b4:19:b9:02:ce:5f:19:
6c:8b:6e:1d:f4:62:91:86:a7:b5:cf:49:2f:c7:e2:
ae:82:41:91:b0:db:43:88:b5:34:74:96:2d:74:39:
32:a9:e5:ac:55:ff:03:30:36:75:3e:fe:c6:f4:2c:
d1:0b:84:fe:64:d5:0f:db:10:3d:a5:16:a8:84:43:
00:13:9f:88:67:71:82:33:b2:38:51:e6:bd:fa:12:
e3:cc:a2:f3:22:fc:db:d3:c6:ad:d1:ab:33:a6:d6:
a0:4e:eb:71:34:93:27:ee:19:40:65:5b:35:9d:ca:
18:5e:3c:b0:fe:3d:88:97:67:bb:eb:48:1a:95:d9:
bc:a7:c5:bf:fd:3a:7c:44:fb:7e:ff:f7:ed:32:c1:
56:8f:db:82:9a:62:fc:30:36:67:65:8a:90:d1:c8:
12:d3:d1:d3:2a:59:98:02:cb:b3:de:a0:09:c1:82:
39:93:7f:7a:6f:d8:f3:b8:5f:68:17:35:43:bd:e7:
b9:9e:41:a4:f0:97:49:fe:e2:0e:d8:9c:33:f7:60:
f9:89:61:70:f2:8e:e8:59:3e:1c:c1:ef:b8:58:1a:
b0:af:1e:d0:64:3f:d7:d0:96:5e:ca:07:f2:fc:d0:
2b:1f:8f:8c:d9:9d:46:4f:3e:bf:62:21:3c:92:c8:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:7A:93:27:FB:0B:E8:9F:1D:52:F7:02:93:C7:87:3F:75:38:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/2d321e5c-c24e-309b-8dbe-811f709bffec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl
X509v3 Authority Key Identifier:
keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:4b:fc:d5:c5:6c:3e:84:01:db:b3:ae:46:42:dd:90:05:1a:
22:aa:59:a5:64:2e:3a:a2:b7:46:76:fe:34:bc:71:a5:b7:4c:
21:20:5f:11:90:52:3b:0b:cf:13:49:70:af:28:20:20:5a:63:
d9:d6:96:89:f3:15:e3:cb:80:f9:ff:ac:fa:a5:7a:db:72:6b:
e8:de:cb:6e:c4:26:51:0e:29:c4:0b:bb:ac:ba:0a:cc:cf:bf:
54:27:a3:a1:31:44:9e:43:7c:12:1a:ab:3b:36:53:a8:41:41:
29:ea:b9:ef:fd:25:58:6d:dc:fd:ea:db:09:20:b7:b1:4f:8f:
15:9a:b6:d1:55:55:d7:f4:4d:df:ba:1e:14:37:d4:62:0d:89:
09:20:13:df:b1:90:60:44:43:1c:0c:ff:57:b1:31:56:1d:4a:
7f:ae:11:42:7c:59:9a:eb:5f:d4:b1:e7:a9:1d:82:ff:91:52:
07:8a:a1:8d:8c:fd:6c:9a:25:58:b9:93:2d:9b:88:b1:87:e0:
95:c2:9c:d9:94:63:39:21:57:72:45:de:87:b2:4d:93:22:23:
09:cb:91:8d:46:8e:f6:68:ba:16:98:49:a6:ac:0b:b3:52:c2:
a7:71:5d:a7:68:7e:cc:86:8e:14:97:68:89:ab:ed:49:28:eb:
d4:6f:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org