Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/272067ca-31c6-3305-ad68-97dfe8d5fe7e.roa
File: 272067ca-31c6-3305-ad68-97dfe8d5fe7e.roa (raw, json)
Hash identifier: FnltGFyt0pN6zW7XFmAOweP2+FdUg0Jk0MLwGzJNDf8=
Subject key identifier: FB:4C:2F:C1:2E:66:ED:22:6E:C1:34:C9:7E:A2:30:70:84:AA:A6:C9
Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial: 010D0C9F43285843693FAFEB23C16781E1675C80
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/272067ca-31c6-3305-ad68-97dfe8d5fe7e.roa
Signing time: Mon 02 Oct 2023 01:00:23 +0000
ROA not before: Mon 02 Oct 2023 01:00:23 +0000
ROA not after: Sun 31 Dec 2023 02:00:23 +0000
asID: 1239
IP address blocks: 170.205.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:69:3f:af:eb:23:c1:67:81:e1:67:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Validity
Not Before: Oct 2 01:00:23 2023 GMT
Not After : Dec 31 02:00:23 2023 GMT
Subject: CN=fa8d8dcb-0537-44f7-93d3-9803081aea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:c3:e4:ef:ee:e0:e6:44:23:27:95:60:59:
e9:a7:70:7c:ca:8f:6b:f1:63:29:47:c0:3f:af:39:
a9:c9:e2:97:c5:06:0f:dd:b4:c3:ea:3b:95:b7:cb:
fe:95:16:a8:8b:de:9d:47:d8:e3:d4:5c:11:04:0c:
48:4b:73:d8:1b:4a:e6:07:1d:db:b6:cf:cc:f5:86:
96:3b:90:ed:4a:be:e9:c3:31:eb:06:03:f9:3f:df:
5f:99:61:7b:97:53:ba:4c:11:2a:47:94:c4:ed:51:
d9:59:7f:2d:62:1b:75:d0:ce:6d:fb:6f:81:68:9a:
c4:e4:cc:33:af:b6:ab:f8:a2:d9:e1:3a:cf:07:1d:
bf:2c:8b:12:d7:72:58:68:9d:ad:17:76:1a:1f:64:
e6:e9:da:3f:4c:f2:10:0f:35:ef:ac:88:09:ee:60:
dd:40:a1:78:08:28:f0:59:a9:b1:6f:9f:69:df:b0:
e9:dc:97:e1:b5:c7:73:39:de:73:20:5b:c0:d4:43:
f5:83:45:a4:bd:0d:ff:9f:e3:c5:1c:b5:6a:60:48:
0f:ca:2a:72:a4:62:78:6d:47:f5:31:70:e9:2e:c9:
7e:17:11:b6:5d:3a:93:e1:0d:3a:43:5e:89:3d:11:
1a:2a:1e:ab:a2:f6:7d:22:71:e1:5a:7d:91:57:0d:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:2F:C1:2E:66:ED:22:6E:C1:34:C9:7E:A2:30:70:84:AA:A6:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/272067ca-31c6-3305-ad68-97dfe8d5fe7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
X509v3 Authority Key Identifier:
keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e5:29:f8:35:07:93:99:6f:b9:78:9b:7d:01:2f:e1:f8:ed:
f7:30:2c:93:f4:b3:68:16:4d:e7:cd:8d:5a:27:0a:88:6a:e4:
49:d1:7d:9c:87:47:8e:7a:02:4f:5e:0e:9f:a9:ed:3c:7f:d3:
dc:38:70:fe:c0:fd:50:28:2b:87:58:af:51:7f:84:09:10:6f:
a1:2e:b0:27:c2:db:68:42:2d:22:04:85:d2:69:59:8e:af:af:
66:f1:02:09:56:10:b9:d6:20:c5:c7:f6:f3:bf:41:3f:b6:24:
a4:d0:2f:88:4d:54:71:67:b8:50:ee:96:3c:6e:9b:31:01:62:
ed:63:f6:c7:b7:5b:95:51:fe:eb:fe:bf:51:49:15:b0:8e:8d:
53:d2:7d:b4:1c:55:4d:9e:d0:f8:84:80:8b:15:0c:ef:b8:9f:
e1:d9:30:ea:14:f6:5e:24:64:66:b5:24:5b:36:f6:72:1b:e3:
19:98:77:ff:1e:2b:7b:a7:41:ab:c2:e6:90:cb:af:af:6f:ed:
1c:ff:e5:42:f9:26:ae:fe:de:eb:07:7b:38:5d:cf:e6:2c:5c:
77:f5:03:01:14:33:a2:2b:8f:cd:13:2c:14:c2:fe:06:1d:11:
fc:a3:9e:ee:1c:37:71:d7:42:e0:e7:94:cc:66:cf:b5:35:c4:
f9:9c:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org