Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d0810fc-3425-3392-ace7-0a488382c2e7.roa
File: 3d0810fc-3425-3392-ace7-0a488382c2e7.roa (raw, json)
Hash identifier: o8buaLkb9eE4Lq+WnOZVWcu7cBk8kJXBENtbyKQP/QM=
Subject key identifier: 17:EA:21:6C:E6:53:F4:ED:DE:E3:60:CC:F8:D9:5A:3A:A3:9F:A8:E7
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D7036231DDCEF79BA3D16980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d0810fc-3425-3392-ace7-0a488382c2e7.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 207.102.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d7:03:62:31:dd:ce:f7:9b:a3:d1:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=c2712b1a-e204-44cc-873c-d1c1d8b06821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:27:0d:6a:20:d4:18:45:49:e1:c5:8d:90:
92:aa:66:77:d4:09:f9:47:7d:58:fd:a5:02:96:9e:
ed:cc:6b:d7:1f:e2:30:3a:74:c8:13:ed:13:d8:76:
94:74:56:41:ad:db:84:88:8c:9f:77:48:8e:c3:e1:
6e:5c:5e:26:64:31:19:b8:2e:80:59:33:a3:9b:23:
29:3b:01:a2:42:7c:d4:28:12:18:af:b3:96:25:37:
09:f1:32:8e:34:00:cd:a4:06:d9:3a:79:5d:8e:5a:
85:5f:c6:84:f4:2f:87:77:0f:af:64:57:72:13:72:
a7:fd:8e:03:8f:76:26:3f:60:e3:4c:d4:68:4a:43:
d1:36:01:e9:af:66:65:87:e7:66:a8:a2:5f:c3:17:
b3:08:14:f5:18:b7:38:8a:33:35:58:d0:ef:e4:94:
7f:a3:e5:8a:f0:36:67:78:d4:fe:87:9f:ef:6f:2f:
11:5b:8b:49:c9:a1:5b:81:b6:d2:0d:c3:d3:23:e2:
2e:64:74:2e:46:3a:8b:49:05:ab:ce:51:73:d4:9a:
03:90:0d:21:51:c8:cb:b5:4d:da:8f:15:5a:dd:d1:
82:09:a9:38:ea:28:4d:26:aa:4f:50:df:e0:24:74:
ab:f9:28:ab:85:6c:3b:0b:0b:50:eb:32:0a:22:b9:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:21:6C:E6:53:F4:ED:DE:E3:60:CC:F8:D9:5A:3A:A3:9F:A8:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d0810fc-3425-3392-ace7-0a488382c2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.102.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:23:84:90:30:d0:9c:fe:50:6a:20:01:5f:8f:bc:70:89:18:
e1:13:77:d0:e8:a5:c3:16:e0:47:31:06:a5:7d:87:b5:12:3d:
50:bd:14:a7:ea:d4:48:18:c3:bd:f9:8a:b2:d0:c6:9a:25:6b:
51:e1:ed:f2:81:50:40:73:dd:44:3d:02:8d:69:19:66:00:e0:
6a:80:36:05:07:1a:ea:03:a8:7a:85:ec:86:fd:11:45:b3:c1:
a8:f9:b1:3e:01:4f:47:22:98:ce:2e:db:9b:df:60:f2:96:7d:
ce:00:4d:0f:59:cd:71:a9:1b:b9:40:aa:f0:c1:d9:1b:05:16:
eb:a6:02:d0:95:b5:6e:9c:43:16:32:f1:a5:77:fa:d2:d2:80:
01:4d:3c:ee:eb:1a:0e:0d:7e:0e:03:9e:3c:48:13:fb:5d:97:
7d:ff:b7:d4:36:2c:6e:ea:17:3a:e3:56:19:10:3b:a4:60:43:
80:d0:e5:a8:16:2b:af:44:f3:75:b4:81:ff:fa:7f:e8:7e:b1:
28:c0:71:36:54:b4:9b:ef:72:55:1e:80:ff:88:5d:91:fe:54:
a0:17:18:1b:a4:89:f1:6d:57:f8:54:3c:aa:23:e5:31:59:8b:
b4:a9:ea:fb:db:b6:5d:eb:fb:8a:b7:bb:e5:0d:3c:13:ca:16:
aa:f0:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:02 2023 by rpki-client on console-fra.rpki-client.org