Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/c5d5b171-06e0-34b9-83f7-d40f2595e954.roa
File: c5d5b171-06e0-34b9-83f7-d40f2595e954.roa (raw, json)
Hash identifier: Rmy+5Yc7c524Ua6IaurLisIOFVYiSyHnIwdNqYfZXlE=
Subject key identifier: B7:54:54:CB:3E:98:A5:DA:0A:70:9F:34:F5:BB:59:54:CF:9E:C1:A3
Certificate issuer: /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial: 010D0C9F43285838495B979A18DA33BE139DC480
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/c5d5b171-06e0-34b9-83f7-d40f2595e954.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Mon 20 Mar 2023 04:00:00 +0000
asID: 396045
IP address blocks: 142.202.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:49:5b:97:9a:18:da:33:be:13:9d:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 20 04:00:00 2023 GMT
Subject: CN=edbccfbe-6e81-41f0-a80a-5ff25a918e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:e4:7c:4e:f5:02:57:de:c5:5e:5e:82:f5:
d1:3f:6a:db:2d:e2:5f:18:04:76:d7:9a:19:67:ee:
b6:f6:80:96:24:ec:af:c9:e7:5c:05:bb:87:8e:b8:
2a:b8:bd:c7:97:fd:4c:78:ae:0c:a8:ac:d1:a1:05:
8c:e0:e3:3d:a3:23:b5:9c:07:0b:e2:57:16:71:dc:
8b:29:79:51:ed:70:f3:3a:22:9c:ed:fa:8f:09:af:
13:37:cb:04:1d:0c:94:d6:74:1a:a0:36:69:c9:0e:
02:d5:8b:19:53:fa:5b:7c:ec:42:44:ce:3d:46:a3:
8f:82:b6:c2:8e:e9:54:0f:4a:fc:3f:19:af:81:83:
c2:8f:e9:19:85:66:3d:cb:15:49:b0:6c:19:4c:a7:
0b:3d:15:ab:90:ca:d3:31:42:40:e6:68:b0:a3:c7:
f4:1b:54:1f:c0:ca:fc:db:c9:0b:c8:fd:70:12:57:
6c:21:e4:41:05:49:67:8b:2e:77:18:8b:7a:aa:37:
f1:d9:9f:03:17:e7:07:ee:d2:0c:11:c1:fb:ca:14:
d4:51:f6:ff:49:12:14:4c:be:46:59:13:c3:2d:48:
5b:6e:56:c8:26:10:e6:55:1b:2b:08:bc:37:a3:3d:
51:b6:e6:06:2a:dd:92:c7:67:33:88:9d:68:72:42:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:54:CB:3E:98:A5:DA:0A:70:9F:34:F5:BB:59:54:CF:9E:C1:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/c5d5b171-06e0-34b9-83f7-d40f2595e954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
X509v3 Authority Key Identifier:
keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:13:25:12:e5:74:c6:a3:54:96:76:48:cf:66:1f:5a:05:59:
c3:d8:8f:0b:b1:e5:94:3b:e4:e4:14:2e:3b:62:62:32:12:1f:
34:92:23:5c:ac:5b:5b:40:b9:63:0d:0d:6a:dc:db:8d:5b:f8:
5e:ae:65:ff:e8:b1:4c:fb:7f:7d:6b:c9:b2:ee:c7:68:9a:7f:
f0:a7:08:6d:c1:8a:ee:d4:08:86:85:b4:ce:30:dd:88:df:59:
d4:19:3c:2d:4c:aa:67:35:cf:f9:cf:a7:48:71:de:77:0d:2b:
e4:0f:c2:67:55:3e:19:67:24:26:c0:4f:d8:30:cc:78:7e:ce:
23:b5:0e:d5:a9:a5:eb:71:e0:ec:d1:35:22:20:f3:bf:ea:fe:
ce:ba:1d:e4:6d:16:fb:91:57:4d:99:18:b3:af:02:bf:40:a0:
ae:d4:13:63:57:3c:f3:10:1c:a8:04:f1:8c:5f:d8:cf:0f:20:
aa:4b:e2:32:3f:cb:8c:db:3e:f9:43:9f:31:d9:21:eb:89:08:
fd:63:e6:5a:16:79:eb:dd:94:2f:a0:d7:df:3c:79:f3:f1:24:
e3:e4:ad:e7:ab:fb:9a:87:e1:b0:58:7b:4b:58:f0:d9:00:3b:
2a:b2:e0:78:22:e9:0e:5f:cd:43:d4:22:21:d5:09:25:be:e2:
48:17:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-ams.rpki-client.org