Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c1491d0d-fb60-39eb-931e-fdc34ff4e662.roa
File: c1491d0d-fb60-39eb-931e-fdc34ff4e662.roa (raw, json)
Hash identifier: sh/IZ5FOMmWIQtcGZfgnFTzMZ6FL6bZtL3fQVkLvLg4=
Subject key identifier: B5:71:76:80:27:0E:FB:55:F6:29:F5:8B:13:B8:66:5D:CB:3E:F6:DA
Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial: 010D0C9F432858449C74D467E4BC6417EA646000
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c1491d0d-fb60-39eb-931e-fdc34ff4e662.roa
Signing time: Sat 20 Jan 2024 02:00:27 +0000
ROA not before: Sat 20 Jan 2024 02:00:27 +0000
ROA not after: Fri 19 Apr 2024 01:00:27 +0000
asID: 57974
IP address blocks: 23.160.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:9c:74:d4:67:e4:bc:64:17:ea:64:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
Validity
Not Before: Jan 20 02:00:27 2024 GMT
Not After : Apr 19 01:00:27 2024 GMT
Subject: CN=e623c173-eb79-4ac3-bc1f-5893a85f3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:97:ba:23:3a:f2:31:e0:6c:ca:2b:c9:70:
12:a8:35:93:f5:ef:e7:52:4f:6f:15:e9:0a:41:63:
41:7c:7b:3a:05:d9:2f:ef:d7:be:9c:9a:51:dc:28:
c5:f1:26:c4:84:d5:5b:64:e4:43:b7:54:84:4b:4d:
bf:0c:ec:23:e0:e3:7e:db:69:76:7a:59:8b:7c:cf:
e0:89:2d:99:d8:0d:2a:fe:74:e2:f9:dc:e3:dd:91:
e6:ca:b2:c1:42:82:c0:6a:4c:56:d6:31:2c:8f:4e:
d2:d8:1b:90:73:c1:b8:1c:dd:6f:7d:55:5e:34:fd:
df:b6:50:1a:d9:51:ac:ae:62:43:39:5f:c4:25:df:
7e:6a:6e:46:b2:bc:45:f3:2d:67:65:66:fe:29:00:
e3:c0:a5:85:38:8e:83:a6:20:bb:41:fe:80:01:96:
4d:19:4d:cb:89:5f:65:09:a8:bd:34:35:86:16:9a:
ab:da:8f:00:22:53:10:96:99:6c:26:c2:ee:0e:78:
1f:7a:a1:14:3f:93:be:e6:c4:c8:89:11:36:b1:15:
fb:02:fb:c1:7c:b6:2f:9f:3c:b1:2f:8d:96:f0:3e:
ea:b1:6b:57:70:ba:37:2e:53:62:59:95:78:14:cc:
77:a6:3d:a0:5a:6a:ec:bd:46:ce:03:2e:8d:9d:c4:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:76:80:27:0E:FB:55:F6:29:F5:8B:13:B8:66:5D:CB:3E:F6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c1491d0d-fb60-39eb-931e-fdc34ff4e662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
X509v3 Authority Key Identifier:
keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ab:d4:5f:da:5f:2d:ff:fb:97:db:82:22:5e:b3:23:84:ee:
8a:12:9c:88:f4:a4:3b:57:9e:40:37:e2:4b:c7:80:82:c0:35:
3c:ea:84:99:6c:7a:06:61:ab:6c:b1:97:26:1e:a1:ac:a9:03:
01:74:70:63:2d:88:79:d8:98:df:b7:2c:0d:be:c9:41:06:0a:
f3:16:40:9a:2c:cf:38:46:d3:a5:55:4f:df:46:9c:bb:35:58:
d2:e9:3b:47:40:31:32:ed:21:b9:f1:b7:c2:af:bf:15:61:ee:
ae:d2:a8:2a:4f:1a:eb:f3:74:f6:41:21:a9:b4:75:4d:e2:30:
d6:b3:8d:07:1c:3e:73:ce:7b:22:83:80:a5:be:12:26:c8:76:
cf:14:81:1c:db:d4:6d:79:94:a1:13:53:75:01:3d:b2:6e:da:
d0:c6:52:c5:46:b0:8a:90:b9:e3:71:b6:76:5b:77:43:47:12:
22:6c:06:ff:8e:90:8c:63:d7:8c:c2:47:27:be:e7:8a:80:d8:
89:9b:63:cc:2d:eb:37:fa:8f:c3:5b:96:9d:72:8b:e9:22:12:
41:09:18:a1:82:9b:fa:fa:aa:47:31:e9:0b:1d:fb:3d:96:ce:
8b:1d:0f:e9:db:09:a2:16:66:dc:d8:ca:c6:c4:c8:d9:79:98:
c4:33:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org