Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6eeece77-0a9f-31b4-96be-d3eea23d3042.roa
File: 6eeece77-0a9f-31b4-96be-d3eea23d3042.roa (raw, json)
Hash identifier: 3tvZEJIxvfnq2BgQdRZMIw9JZLrLCEN0eFt0vCr0t+w=
Subject key identifier: D8:91:D5:25:1C:08:51:A2:2D:CC:4A:F6:BF:6F:58:B1:3F:5A:3B:F9
Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial: 010D0C9F432858437E72A11841F159CC469A8540
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6eeece77-0a9f-31b4-96be-d3eea23d3042.roa
Signing time: Mon 09 Oct 2023 15:15:01 +0000
ROA not before: Mon 09 Oct 2023 15:15:01 +0000
ROA not after: Sun 07 Jan 2024 16:15:01 +0000
asID: 198100
IP address blocks: 23.156.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:7e:72:a1:18:41:f1:59:cc:46:9a:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Validity
Not Before: Oct 9 15:15:01 2023 GMT
Not After : Jan 7 16:15:01 2024 GMT
Subject: CN=fb702d45-0d04-444b-b779-f47ee2558f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:b8:f8:cb:2e:2a:98:44:0b:c1:1c:8d:1f:
0f:15:ae:58:81:21:e9:f9:7b:6d:aa:c2:e2:ed:f9:
e5:7d:b6:2a:29:43:87:70:5c:0e:32:c5:60:14:47:
3a:67:89:f9:bd:9d:79:76:84:4a:b1:80:a5:b5:57:
50:b8:d7:b4:91:9d:91:8b:39:98:3c:07:13:7c:88:
fc:bf:c5:67:d2:63:bd:86:60:31:32:88:75:0f:06:
99:d7:99:2c:21:04:9b:80:39:80:94:a8:87:0b:74:
55:2a:39:d0:3d:0d:b2:83:64:cd:db:84:a6:4b:da:
c0:ec:0d:62:ad:97:be:03:f9:6c:5b:66:b2:ab:a4:
1d:81:ec:b7:ef:b2:ec:da:1a:f3:0c:2e:f6:92:41:
df:d0:d5:27:02:88:d8:e5:c7:bb:a3:57:37:30:bb:
13:41:ab:af:f7:e9:dc:f8:47:e4:ed:df:b8:50:0b:
17:58:5c:8c:09:c9:c4:ed:0a:b7:f5:62:ab:8a:6c:
15:7f:ce:0c:b3:08:fc:60:5e:6f:76:05:06:f2:63:
02:26:b3:ab:b2:58:cf:3b:79:cb:11:59:20:6c:dd:
a9:de:b5:e9:38:e4:5e:c5:d7:49:2a:b1:e0:8d:37:
d0:3a:88:80:1d:c2:ab:9e:48:cf:e2:10:0c:0f:f5:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:91:D5:25:1C:08:51:A2:2D:CC:4A:F6:BF:6F:58:B1:3F:5A:3B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6eeece77-0a9f-31b4-96be-d3eea23d3042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
X509v3 Authority Key Identifier:
keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:0d:de:56:6b:9f:d7:41:25:75:4b:4e:a5:fd:bb:65:3a:65:
e2:9c:f3:23:8d:93:3e:20:98:44:13:17:82:be:91:52:04:f7:
9d:72:18:71:da:c3:2f:a6:8d:cb:66:fa:03:57:bc:d7:21:4e:
a7:71:cf:13:7e:1d:db:30:8f:f9:69:14:56:db:c8:3e:58:cf:
28:02:67:6d:56:29:c9:ac:44:95:e2:0b:f7:62:1c:86:36:f5:
10:fc:2d:b4:09:bc:2e:83:3d:cf:b6:f9:c4:a7:f9:dc:91:51:
06:ab:64:e1:39:0d:43:31:1a:1d:ee:a7:ed:68:62:2f:c2:94:
21:69:12:2e:1e:48:3d:aa:b2:62:c2:6d:f8:a0:eb:73:95:4c:
82:1c:e9:14:9a:5a:ce:f8:b0:6b:e1:f5:05:61:3f:cc:06:e9:
e9:d3:ff:1b:b2:df:10:1f:6d:99:f0:09:8b:3c:c7:3c:4c:f5:
37:60:aa:fa:96:bc:ef:6e:72:06:9a:5d:0b:04:1d:67:96:d7:
d5:b5:cb:c8:a4:17:b2:05:32:bc:13:17:db:8a:d6:d8:7b:9c:
03:ca:06:13:5e:05:d9:db:dc:f3:70:53:3a:5e:ac:61:42:d5:
2a:f8:86:a8:d6:77:e4:78:3e:63:ec:3d:7f:38:5e:be:76:7c:
c9:6d:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org