Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/2aef9a87-528f-3f02-9151-62060baa2ccf.roa
File: 2aef9a87-528f-3f02-9151-62060baa2ccf.roa (raw, json)
Hash identifier: XSAUE8wp1K/3VAzyrg9ofWxfKEnFqqVO5tyhO2EB2Hs=
Subject key identifier: D4:92:54:9D:64:6E:78:A5:68:5A:CA:11:CA:93:CE:8B:4E:C3:32:16
Certificate issuer: /CN=52ea6b76-dff6-436f-a12e-51baa3c3abdf
Certificate serial: 010D0C9F4328584288DEB234DDDA0D7672FE4C00
Authority key identifier: B3:58:FE:AF:CA:BD:9F:BA:5C:BB:1A:5F:03:8F:CE:BC:4C:47:13:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/2aef9a87-528f-3f02-9151-62060baa2ccf.roa
Signing time: Thu 13 Jul 2023 16:03:54 +0000
ROA not before: Thu 13 Jul 2023 16:03:54 +0000
ROA not after: Wed 11 Oct 2023 16:03:54 +0000
asID: 26801
IP address blocks: 74.81.96.0/19 maxlen: 24
173.246.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:88:de:b2:34:dd:da:0d:76:72:fe:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea6b76-dff6-436f-a12e-51baa3c3abdf
Validity
Not Before: Jul 13 16:03:54 2023 GMT
Not After : Oct 11 16:03:54 2023 GMT
Subject: CN=68dfc1d3-cbc6-4d8c-bd41-100fc86dd116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:ad:68:85:3b:b7:b8:3e:b9:06:39:08:80:
55:3b:29:58:de:ed:d8:65:9d:0a:b8:aa:b6:62:ef:
e2:77:45:9b:7d:23:5a:c1:26:c5:cd:5f:bd:a2:30:
0a:21:8e:37:e9:26:4f:5c:ad:1a:c0:9d:64:26:59:
f3:f0:b3:a6:e9:f6:31:c4:81:e0:a6:65:ce:be:cf:
d5:14:44:83:b1:37:7d:0d:c1:bc:38:59:fe:e9:c3:
17:5c:a5:27:3f:b8:60:3a:3f:23:ea:9f:3a:4c:55:
0d:79:86:11:c0:5b:da:98:28:6f:cb:89:b4:29:d2:
6e:9f:dc:80:59:d5:dd:77:28:ff:6b:f8:5c:1c:4a:
b1:38:7b:fc:90:33:8f:79:f4:c9:8d:bd:fe:28:91:
a4:33:e8:87:00:b2:b3:7c:22:8a:85:08:12:5e:04:
01:3b:9c:a8:31:e4:b0:1b:63:39:26:45:b2:a8:81:
71:c6:ec:e8:af:f4:18:fc:96:f8:a2:20:68:85:cf:
e6:0f:5f:bb:a2:1d:72:df:47:5c:ea:ea:e0:cc:3f:
6b:43:29:47:59:a6:ab:be:46:15:ab:9f:0d:05:27:
3d:a2:6d:f8:08:84:f9:b3:78:90:a9:39:56:24:ac:
4b:4e:7e:e8:bb:5a:fa:ea:09:d5:d9:ed:0f:bd:60:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:54:9D:64:6E:78:A5:68:5A:CA:11:CA:93:CE:8B:4E:C3:32:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/2aef9a87-528f-3f02-9151-62060baa2ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf/52ea6b76-dff6-436f-a12e-51baa3c3abdf.crl
X509v3 Authority Key Identifier:
keyid:B3:58:FE:AF:CA:BD:9F:BA:5C:BB:1A:5F:03:8F:CE:BC:4C:47:13:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ea6b76-dff6-436f-a12e-51baa3c3abdf.cer
sbgp-ipAddrBlock: critical
IPv4:
74.81.96.0/19
173.246.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4c:66:b6:0c:e9:65:7e:3c:e9:03:dd:91:0d:d6:e9:09:22:
95:fd:b8:5e:0a:c0:64:35:6b:c2:9f:22:f1:9f:e7:f7:48:94:
25:0c:ea:f3:19:16:ff:31:9c:fc:47:90:bf:e0:03:ea:f3:30:
35:57:4a:1e:a1:3f:72:b8:ba:09:7c:3f:ce:69:4f:ac:2e:59:
19:eb:80:35:39:5a:24:da:ec:ad:2f:61:dc:50:c1:5d:3c:75:
9e:09:00:d1:e1:17:0d:45:c6:c3:c8:19:53:63:45:93:3e:ed:
d1:1d:a1:20:ab:67:2d:9f:2b:c8:57:36:e7:c7:80:d1:c9:99:
3a:77:78:da:e3:70:86:b9:a6:92:b2:24:76:cf:ff:83:80:9e:
b3:f6:c8:86:d4:10:c2:4f:9f:9d:de:87:17:82:fa:eb:d2:7d:
05:da:95:ba:83:5f:61:87:bf:8f:5e:9e:fc:15:01:b1:fc:f7:
fd:a1:f1:17:7e:da:7c:df:66:67:84:e0:50:b3:7d:72:af:b2:
b4:6f:dc:d5:62:c6:6d:da:a8:8e:51:9e:84:92:f6:76:b5:5b:
b3:25:ee:e2:65:b1:16:b7:ae:5f:15:6f:d7:72:59:79:60:e6:
54:d2:68:98:66:40:e6:d7:49:c2:a5:59:61:ff:9a:c7:64:83:
24:ef:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org