Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e4a10700-a11a-3dd2-8947-bd0d33c1b28e.roa
File: e4a10700-a11a-3dd2-8947-bd0d33c1b28e.roa (raw, json)
Hash identifier: mTp/ZGXe8kXIwvF1bLTgX1ar/swNOJqeTbFPpvrvaWo=
Subject key identifier: 67:D0:0F:B7:DC:9B:EA:A1:A8:EE:47:5C:82:3E:A3:EF:01:E8:F5:73
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858432683AD8A7BBB229485978C00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e4a10700-a11a-3dd2-8947-bd0d33c1b28e.roa
Signing time: Fri 08 Sep 2023 03:18:14 +0000
ROA not before: Fri 08 Sep 2023 03:18:14 +0000
ROA not after: Thu 07 Dec 2023 04:18:14 +0000
asID: 49466
IP address blocks: 104.143.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:26:83:ad:8a:7b:bb:22:94:85:97:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Sep 8 03:18:14 2023 GMT
Not After : Dec 7 04:18:14 2023 GMT
Subject: CN=65b93674-177c-4aa5-8578-c4c01d7f3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:5d:c3:92:28:0c:fd:d4:6e:2d:26:3d:ff:
5c:f9:70:1a:ca:f4:29:ca:5f:32:24:f3:80:21:4a:
9c:24:4f:88:cc:6b:40:d4:c9:ff:96:f8:7e:0b:2b:
75:c7:ad:ee:c8:51:c5:53:c6:32:12:78:fb:91:18:
e2:a7:70:ea:e7:e8:ec:49:be:f8:12:68:f4:5d:b9:
79:49:cf:4f:fa:69:28:1d:04:98:28:50:2c:37:92:
da:39:b5:f0:db:13:e1:3d:99:f1:fd:c3:b7:fc:bb:
00:16:c2:45:95:6f:21:ff:0c:b8:5c:b3:58:11:b0:
3b:fd:0d:9f:b5:de:8e:ba:29:1b:92:04:b7:48:87:
f6:80:a5:26:f9:2d:5f:14:ae:78:80:83:ad:ef:4c:
d3:47:28:c6:c1:44:f1:4e:a1:42:ea:11:ce:8d:1f:
e0:fa:80:b7:4c:5e:e2:53:58:6d:fb:fc:26:34:4e:
69:c2:d0:02:4c:e9:b6:09:22:30:84:2b:19:64:6f:
d5:3a:30:63:97:62:46:74:4b:b5:c7:d8:15:f4:a3:
85:1b:df:0d:39:fe:24:aa:c5:1a:e4:c2:93:ad:25:
31:5b:e4:a2:93:47:61:2c:aa:61:0a:0f:52:bc:cd:
b9:31:e4:6a:47:c8:10:32:cb:4e:e9:85:13:28:d0:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:0F:B7:DC:9B:EA:A1:A8:EE:47:5C:82:3E:A3:EF:01:E8:F5:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e4a10700-a11a-3dd2-8947-bd0d33c1b28e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c7:ea:ae:cf:52:05:03:3d:81:60:c9:fc:e8:6f:b7:87:21:
54:51:70:d1:84:e7:19:e9:cd:05:fe:22:a8:3f:dc:ae:26:f2:
a0:24:8c:3d:4f:f7:ae:4c:d1:ff:96:90:ee:2d:36:72:8c:f3:
2c:5b:db:b7:8d:56:2e:fe:03:53:29:2c:d4:2f:4b:69:91:89:
a2:ba:c8:f8:2b:b4:6f:52:cc:a3:e2:61:fc:80:14:19:08:81:
7a:b8:d7:24:87:5d:c3:ef:17:91:a2:a4:f0:71:ed:5d:6f:39:
17:88:cb:4e:c8:b8:dd:0f:4c:3a:71:12:d6:3a:17:f0:89:d5:
ec:38:e2:a3:74:8b:fa:25:45:f8:5d:6a:21:3d:fd:14:2e:1f:
51:a7:ea:80:87:bb:da:1f:0b:d0:e0:bd:30:b7:41:d6:f2:28:
37:95:dd:53:48:20:5f:05:cb:0c:35:a9:ab:8d:e3:7e:70:17:
88:6d:88:2d:3a:d5:8a:97:f0:bc:b4:af:29:27:7b:6f:4d:85:
23:c8:fe:9f:2b:4c:0e:de:6c:32:27:30:48:e4:cd:ef:cc:e5:
7f:13:6b:e7:db:50:1e:b2:2a:49:c3:b2:55:62:f1:5a:42:b8:
18:cf:88:ce:86:b7:bd:c0:d0:2d:54:f0:f7:74:3d:36:1c:d1:
d3:10:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org