Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/2ab9501e-940f-3585-b598-5dd4938307ae.roa
File: 2ab9501e-940f-3585-b598-5dd4938307ae.roa (raw, json)
Hash identifier: 3YdYFD8pLFXx+57FnOJU31tIbNE+NGdJt4Ufos+EaMI=
Subject key identifier: 24:F0:41:01:6A:24:A4:27:F2:3B:C9:AD:57:A1:84:61:DA:2F:74:DD
Certificate issuer: /CN=f1a0a79d-3ae8-4653-88b5-bb348a028533
Certificate serial: 010D0C9F4328584309CD6361C4703DB185383BE0
Authority key identifier: AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/2ab9501e-940f-3585-b598-5dd4938307ae.roa
Signing time: Mon 28 Aug 2023 20:28:18 +0000
ROA not before: Mon 28 Aug 2023 20:28:18 +0000
ROA not after: Sun 26 Nov 2023 21:28:18 +0000
asID: 4261
IP address blocks: 199.89.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:cd:63:61:c4:70:3d:b1:85:38:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0a79d-3ae8-4653-88b5-bb348a028533
Validity
Not Before: Aug 28 20:28:18 2023 GMT
Not After : Nov 26 21:28:18 2023 GMT
Subject: CN=c91f9947-eeed-44a6-b3c9-3d951acf1534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:30:66:3b:7c:31:d8:b2:7e:2b:02:a9:8a:
6c:0b:63:a9:0f:ad:14:76:f2:47:5e:2d:d2:ef:09:
bb:ce:0a:8f:dc:da:18:92:98:e7:a1:03:2c:2c:39:
d1:28:08:a4:26:42:34:03:6a:ef:fd:94:96:98:dd:
99:44:6a:c4:02:37:81:0e:50:ca:0d:94:e7:87:97:
7a:6f:6a:88:26:25:90:60:e2:57:65:4c:20:83:5e:
2a:19:bd:ac:36:1f:ba:34:96:bf:05:ce:34:b2:ed:
58:0a:af:88:8e:46:66:29:8e:71:99:1b:68:0b:1f:
ce:5b:40:d0:1d:6b:41:45:e0:cb:a2:97:95:66:23:
98:3f:2c:d2:04:49:42:05:b1:67:97:22:df:80:7f:
7e:f5:c8:3b:80:da:37:71:73:92:d7:b0:4b:46:c7:
87:52:9f:35:c4:9f:b3:c3:7d:f7:98:e7:1e:b6:6c:
70:bb:fd:ed:f8:c5:26:7a:ea:a4:28:53:84:50:0f:
c5:02:72:e5:d6:c8:f1:6e:f8:80:23:f7:5b:49:62:
b0:2c:fa:06:fc:0c:58:96:22:a4:9e:90:06:5a:27:
65:eb:ff:3e:a4:d6:e7:be:42:2e:ea:12:32:6d:cb:
7f:38:66:a8:b9:3d:d3:05:b6:e5:03:2c:ea:42:ea:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:41:01:6A:24:A4:27:F2:3B:C9:AD:57:A1:84:61:DA:2F:74:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/2ab9501e-940f-3585-b598-5dd4938307ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/f1a0a79d-3ae8-4653-88b5-bb348a028533.crl
X509v3 Authority Key Identifier:
keyid:AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533.cer
sbgp-ipAddrBlock: critical
IPv4:
199.89.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a0:36:e9:3c:e7:a7:39:e0:61:0f:ec:78:df:fb:be:36:d8:
76:80:44:ee:fb:22:d6:23:06:64:42:26:91:ba:a5:a1:08:4c:
7a:7b:70:99:8a:56:ec:70:b1:4f:06:d6:89:c0:9f:21:e4:ae:
28:6d:c2:8b:69:65:91:79:cd:5d:48:5c:9e:47:2c:4b:22:00:
c1:95:59:c0:2d:7e:34:52:d7:5c:f7:04:d8:ac:d5:0a:9f:e1:
7f:86:02:75:68:c8:70:59:57:c4:dd:2f:4a:b2:52:03:4e:58:
a4:8f:76:1b:0b:66:fe:2a:3a:65:ee:13:32:15:57:7c:2e:07:
04:81:9b:2e:00:5e:96:bc:05:5a:0b:9e:17:8b:84:b1:c3:d9:
da:4b:65:6e:04:e7:39:78:da:cc:00:55:3b:94:19:09:62:ff:
64:54:45:04:38:c6:13:d6:ca:21:94:b0:7b:36:bc:61:16:7f:
66:6f:1d:fe:05:aa:d1:b1:17:69:44:42:69:00:2d:c0:bc:ae:
39:f6:e0:99:96:b9:82:2e:1b:1d:99:06:6c:a4:7c:a1:4a:7d:
36:87:04:50:51:07:0a:fa:b8:19:df:0b:91:f8:c5:38:54:3c:
ff:18:48:f9:c2:b3:13:3d:50:36:96:53:1b:b4:27:3c:ac:15:
1a:9f:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org