Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8cd52cb1-fb32-3f37-8069-4f6514c8d376.roa
File: 8cd52cb1-fb32-3f37-8069-4f6514c8d376.roa (raw, json)
Hash identifier: 5Ae5ykH13mS5cbAW4i9rl0BRJNFVSn1C7Iw7P9vCzlg=
Subject key identifier: 7D:1C:49:50:C2:7B:1C:76:A7:E8:6A:21:57:08:CE:05:8F:07:45:C6
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285844889E7C475C7ACA451280ACC0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8cd52cb1-fb32-3f37-8069-4f6514c8d376.roa
Signing time: Fri 12 Jan 2024 23:28:24 +0000
ROA not before: Fri 12 Jan 2024 23:28:24 +0000
ROA not after: Thu 11 Apr 2024 22:28:24 +0000
asID: 60841
IP address blocks: 208.52.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:88:9e:7c:47:5c:7a:ca:45:12:80:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Jan 12 23:28:24 2024 GMT
Not After : Apr 11 22:28:24 2024 GMT
Subject: CN=eb7fecb4-b63d-4d66-b3a5-a5c265034742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:c3:33:a1:c1:1e:da:ed:e1:21:cc:48:df:
0d:67:8a:a0:37:4e:0d:c4:ba:2a:84:c9:9f:9d:e7:
1a:35:6d:d7:70:fe:51:fb:b1:50:5a:a7:dc:5f:0d:
d3:27:46:07:04:1b:20:5e:5a:ef:88:35:b8:d3:73:
9d:45:f2:1b:eb:16:4c:30:a8:60:8e:80:8e:29:ad:
48:84:84:6f:07:ee:3e:56:b8:d6:36:5d:10:9f:40:
ab:05:c2:fc:07:12:05:c9:3d:2b:65:82:17:6a:de:
8e:85:bc:e0:31:3e:f0:8e:0b:0a:46:2d:42:eb:72:
e0:8a:d3:a2:47:69:26:10:1d:c0:dc:6e:d5:9b:00:
27:6b:62:7e:ad:7a:cf:f2:aa:c4:4d:35:43:46:dd:
48:db:8e:6c:08:9f:19:6b:a0:b3:5c:b8:0a:54:27:
17:2d:0e:07:8d:03:85:28:63:55:37:63:74:4c:3d:
3d:b0:42:2a:4e:05:97:c5:e0:4f:93:bc:a8:99:2f:
45:7a:71:9a:a7:8d:65:0d:91:7c:4d:63:40:4d:b1:
4b:d5:62:a9:d8:75:81:1f:68:27:d6:cf:83:ba:01:
7e:1b:da:74:ce:64:17:2c:d2:59:2b:8a:56:04:e0:
9d:b6:7c:62:82:fa:21:b2:f1:14:55:f0:17:99:04:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:49:50:C2:7B:1C:76:A7:E8:6A:21:57:08:CE:05:8F:07:45:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8cd52cb1-fb32-3f37-8069-4f6514c8d376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:bc:11:3a:bc:4f:6e:96:1d:8e:c6:58:2c:1f:d5:5b:e4:e3:
b0:20:04:08:2f:55:2e:9b:91:7f:f3:39:52:fb:8c:ea:ae:60:
b4:f3:c8:2a:b0:fb:07:8b:dd:a5:d4:94:05:37:6c:a9:cd:73:
ba:61:3e:93:ea:58:2a:a7:0d:83:48:9f:4d:9e:e6:f8:db:89:
b8:67:d4:8f:df:ba:c5:de:12:13:da:23:25:09:27:d4:c5:ce:
92:8a:87:2a:c6:8c:0c:cc:c2:a2:8a:17:49:cf:e4:b4:1a:0e:
9f:1f:bf:ea:de:8b:55:5c:ee:2b:4d:10:2d:45:42:3c:e8:30:
50:41:b1:d8:18:2e:34:b3:d0:3d:34:54:cf:db:ca:a1:f1:05:
42:a9:4c:3d:38:34:ba:0d:d7:7b:4c:04:b2:22:39:fc:b4:7f:
ad:9a:43:4b:9a:bd:81:20:4c:ae:9c:3e:ca:e3:5c:50:dc:a0:
d7:89:14:a6:9f:4e:78:23:ad:c2:1e:ea:3c:5f:26:a6:d4:8d:
9b:c2:f0:33:ed:07:0a:07:f0:88:f2:b2:4a:5a:c4:96:47:d7:
dc:2a:73:5f:f8:99:18:dc:40:73:0d:6d:fb:cf:e3:57:22:f5:
0e:98:51:bc:78:ae:bd:de:d0:84:3b:52:2c:8e:44:33:fd:df:
73:62:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org