Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/9c73a3ac-1147-3511-8f73-4cb05a29bdaf.roa
File: 9c73a3ac-1147-3511-8f73-4cb05a29bdaf.roa (raw, json)
Hash identifier: rRZWidmYtGWH+wSKX/ww4K6LzepE93k1D0gtTivD2kA=
Subject key identifier: B1:7D:ED:86:20:B0:DA:FB:9A:DA:06:0C:B5:AD:1C:C3:40:72:C0:DE
Certificate issuer: /CN=460e35b5-8730-404c-9b7c-76c5af2c5d96
Certificate serial: 010D0C9F432858441DFB1CE461D2671771BEE7F0
Authority key identifier: AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/9c73a3ac-1147-3511-8f73-4cb05a29bdaf.roa
Signing time: Tue 05 Dec 2023 18:43:32 +0000
ROA not before: Tue 05 Dec 2023 18:43:32 +0000
ROA not after: Mon 04 Mar 2024 18:43:32 +0000
asID: 399891
IP address blocks: 132.204.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:fb:1c:e4:61:d2:67:17:71:be:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460e35b5-8730-404c-9b7c-76c5af2c5d96
Validity
Not Before: Dec 5 18:43:32 2023 GMT
Not After : Mar 4 18:43:32 2024 GMT
Subject: CN=66d614f4-bcf2-4e71-b97c-8412de9959d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:06:4c:fe:29:eb:df:13:80:d9:aa:a9:c2:
f0:3c:a2:cb:27:68:c0:a1:05:11:2d:e1:75:c2:93:
20:c8:7c:02:21:38:d7:d5:4e:87:92:00:b2:2e:58:
f3:c4:6a:3b:c2:d1:5a:01:07:85:91:c5:e7:76:f8:
c7:c3:09:22:d3:1b:58:2b:21:60:8f:ac:89:4e:44:
ad:27:c0:f2:93:af:cc:82:1a:0c:50:11:d8:cb:c1:
d0:07:6d:af:52:d6:ef:1f:2a:0b:c1:de:0c:38:a8:
e1:de:f4:9f:79:b5:da:b7:fc:d2:58:94:97:65:72:
a2:11:f8:3e:db:92:51:c2:a1:b8:01:31:85:93:dc:
0e:dc:f3:3c:3f:e3:18:45:55:47:10:fd:e7:78:4f:
14:7c:17:ff:b2:e0:33:0c:3e:2c:22:a1:79:a8:fb:
3b:ba:6b:82:35:70:a0:e6:f8:9c:3c:c8:02:dc:34:
30:e8:f7:1a:27:ae:1d:c7:dc:d7:b8:cb:19:f9:4d:
fe:39:62:59:db:24:23:bb:cf:12:e7:ff:13:e1:10:
b3:84:e6:d8:3d:d4:6f:18:c0:6c:05:fd:b7:a1:49:
1f:89:9e:2e:cc:4f:53:7e:28:9e:f8:8b:04:b1:33:
ef:49:9a:a8:e1:fd:c6:cf:6b:e8:fe:fb:e2:83:d2:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:ED:86:20:B0:DA:FB:9A:DA:06:0C:B5:AD:1C:C3:40:72:C0:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/9c73a3ac-1147-3511-8f73-4cb05a29bdaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.crl
X509v3 Authority Key Identifier:
keyid:AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer
sbgp-ipAddrBlock: critical
IPv4:
132.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ea:22:d9:9c:29:43:fa:d7:a1:94:cf:e9:55:4e:28:21:37:
4f:37:d4:a9:28:8f:16:23:10:aa:18:aa:02:46:5d:60:8e:71:
a3:8f:69:41:cf:e5:23:ee:2c:44:3e:b3:2f:28:df:b8:c4:c1:
e3:a4:4f:b3:5d:9d:55:2b:11:93:c8:d1:d6:5c:81:8f:55:c1:
10:a5:da:4f:1c:e3:57:99:25:41:cc:50:1c:3a:ce:e1:81:69:
a2:9d:51:d9:f3:ea:10:56:34:4f:6d:3f:a3:df:82:be:48:15:
f4:8d:40:36:1a:78:12:db:7d:4a:5c:b8:41:72:2e:96:11:a2:
a9:b3:18:84:35:cc:09:5d:28:28:8b:04:f8:53:59:f7:73:ee:
e4:f4:12:19:9d:67:f8:da:21:11:ea:4d:e9:0e:fc:ac:45:a2:
ee:9a:9a:7e:6c:49:3d:72:a0:73:dc:2e:8d:c5:2d:ab:a2:9c:
fc:bc:f8:47:55:1f:89:4e:fe:34:03:e6:c6:9d:be:c8:d5:d6:
26:02:f7:63:6f:e6:ba:64:bd:97:e7:d2:dc:1e:18:a1:84:e4:
a0:17:03:8d:3a:d7:c9:2f:2d:d6:a7:db:aa:f8:e7:81:4a:e7:
42:8a:e8:d7:77:00:9b:04:42:ff:6f:aa:ee:c3:6d:59:ae:1e:
4a:d9:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org