Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/84237c44-efc9-3cf6-943c-507521abcf66.roa
File: 84237c44-efc9-3cf6-943c-507521abcf66.roa (raw, json)
Hash identifier: usbDoOYTCADCQZPpxBiwzkDjwbLl9Q7jqap97QZBIRA=
Subject key identifier: AC:09:C0:85:BB:34:10:B2:FE:EC:5B:61:80:68:EA:E1:A9:2D:DD:ED
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328576D51CC73C042CFC17219F48AD4
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/84237c44-efc9-3cf6-943c-507521abcf66.roa
Signing time: Fri 15 May 2020 20:09:16 +0000
ROA not before: Fri 15 May 2020 04:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 394437
IP address blocks: 66.249.100.0/23 maxlen: 24
66.249.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:19:f4:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: May 15 04:00:00 2020 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=50ae6d3e-6546-4b4f-b4a6-b7299f099671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:26:c8:8d:c9:f6:2a:a5:4f:03:7c:b4:ca:
1c:4f:61:a7:24:13:10:ce:fe:19:81:a2:3f:d4:92:
23:d3:7e:81:33:30:b4:71:0c:c8:b9:6c:8f:3f:fd:
8f:c1:52:39:fc:dd:64:65:c1:5e:96:61:d5:05:e4:
4e:db:19:e8:ad:4e:51:e1:65:3a:ac:69:ce:d3:51:
88:d0:40:c8:40:d9:77:44:bb:b2:23:60:05:df:84:
0a:1c:68:22:42:42:dd:90:4f:71:06:20:2e:67:9f:
ca:04:48:9f:ee:00:98:02:90:dc:a9:9f:fb:4a:ca:
fe:6f:bd:76:89:28:9c:cc:40:22:1a:61:13:04:c1:
47:ee:c0:7c:6e:bf:a6:67:64:30:4f:aa:24:d1:6c:
20:08:ff:02:aa:5a:c2:9e:b3:69:8e:e2:19:65:2d:
c6:34:3e:50:94:2f:5b:60:12:89:13:26:3a:0d:22:
57:de:45:2f:fc:69:ac:47:f0:4b:28:65:28:cd:fe:
e8:41:62:0a:ad:4e:5d:13:87:40:57:7b:97:86:5c:
af:b1:d5:1b:f7:6b:92:f9:f1:91:c1:eb:16:df:db:
17:0d:e3:80:58:ba:cc:cd:03:e0:09:51:a4:cd:56:
5d:f5:79:e5:b8:0b:f9:f8:27:7a:e1:e6:5d:ff:ec:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:C0:85:BB:34:10:B2:FE:EC:5B:61:80:68:EA:E1:A9:2D:DD:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/84237c44-efc9-3cf6-943c-507521abcf66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.99.0-66.249.101.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b4:de:24:c1:12:12:69:e3:f3:3f:5d:20:6f:5f:7b:a7:c5:
3f:48:a1:f6:e2:d6:89:e6:6b:87:91:bd:71:0d:f9:f9:6f:af:
b6:8c:2f:2a:66:df:38:ad:8d:5b:65:84:bd:d6:01:d5:2c:1b:
e6:cf:15:94:6d:84:91:07:e4:35:9c:48:73:b5:a1:88:df:70:
c3:9e:c0:ac:2f:96:eb:b5:7b:bc:6f:cf:cc:be:3e:3f:04:11:
03:f1:cc:36:13:3c:1c:44:db:19:b7:d4:c9:d0:d7:46:9b:d1:
8a:50:8f:e3:0c:28:ec:b0:26:f4:95:67:62:1e:b8:0b:a6:5e:
95:1d:82:96:b4:d4:d2:73:b0:b5:e9:fe:78:0a:52:fd:ff:7e:
4b:a8:75:e4:33:63:66:53:60:0a:06:7d:41:82:1f:20:90:12:
2f:f5:0d:2e:2e:44:a3:c6:0f:f8:cc:26:cc:76:ff:43:f1:b1:
5e:a4:09:4c:6c:2d:bb:75:d0:84:19:ee:b3:f7:59:c8:9c:78:
f7:31:18:c5:d2:b8:05:57:91:9e:52:cd:71:05:84:df:99:02:
ba:4c:6b:92:13:99:fb:ed:bd:ba:3f:18:fc:96:5d:fa:49:93:
0f:fe:88:69:c6:26:3f:e1:7f:64:0d:87:0e:2c:c9:62:b3:d5:
56:04:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:58 2023 by rpki-client on console-fra.rpki-client.org