Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/dc2efbec-a3a8-3649-a1a7-23f4e977e22a.roa
File: dc2efbec-a3a8-3649-a1a7-23f4e977e22a.roa (raw, json)
Hash identifier: 3OqYRG3ari9bhsq0RvwPBfPZS8D82DFmtsW540i0Mcc=
Subject key identifier: 91:2B:92:61:E0:11:61:5A:9D:5D:6A:D4:AE:5E:76:B6:11:40:2B:A7
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858433379C5A7EECBE386BCBD0100
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/dc2efbec-a3a8-3649-a1a7-23f4e977e22a.roa
Signing time: Tue 12 Sep 2023 18:43:47 +0000
ROA not before: Tue 12 Sep 2023 18:43:47 +0000
ROA not after: Mon 11 Dec 2023 19:43:47 +0000
asID: 216394
IP address blocks: 208.67.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:33:79:c5:a7:ee:cb:e3:86:bc:bd:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Sep 12 18:43:47 2023 GMT
Not After : Dec 11 19:43:47 2023 GMT
Subject: CN=460395c7-5cb8-4474-87db-8b4c2b4163fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:9b:52:78:41:82:69:08:95:19:52:a8:b9:
4e:63:56:f6:80:0e:87:a0:62:0f:e4:62:5c:9a:f8:
92:84:36:29:f6:35:e1:66:2f:32:07:8b:a1:62:bd:
45:63:82:e0:57:88:65:e6:40:e4:61:9e:18:be:8f:
0e:d8:3d:c0:8d:53:39:e0:26:2a:9d:5e:9c:0b:66:
4b:40:c5:3e:6f:b5:41:8f:7f:1d:4c:96:4a:e1:48:
95:06:87:72:97:05:c2:82:19:a8:da:2e:0f:2b:52:
e4:b3:64:cd:bc:84:a7:3a:07:16:46:3f:41:5d:9b:
16:78:64:8e:2a:53:69:c6:9a:b4:12:21:a7:47:14:
24:96:d0:91:ec:e1:40:97:56:03:03:15:d7:51:0a:
7e:07:ae:0f:1a:09:91:ac:d9:6b:5c:82:af:f2:a5:
5d:6f:65:62:55:47:43:97:79:b0:47:ca:76:5b:32:
71:6a:1a:4e:de:81:a7:cf:4a:b9:b3:15:9a:ec:12:
d7:3f:be:6b:d0:99:04:42:56:e4:26:a9:6c:54:5e:
47:82:a9:6c:94:a2:e5:a8:a7:fb:97:4c:b1:20:a5:
77:de:3a:bd:78:05:8c:74:2c:8b:9c:0b:5b:05:61:
42:45:e8:a4:3e:87:06:ba:b2:46:87:ef:19:13:a4:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:92:61:E0:11:61:5A:9D:5D:6A:D4:AE:5E:76:B6:11:40:2B:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/dc2efbec-a3a8-3649-a1a7-23f4e977e22a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:bc:55:db:8d:11:c0:7f:5f:49:3d:57:b0:9c:d6:1c:9a:5b:
bf:2f:7b:8a:f0:ed:37:9e:43:87:17:6e:5d:16:c1:b9:3f:e0:
a0:38:f1:2d:13:98:9a:d8:e7:fe:27:af:fd:77:93:96:8b:2f:
d1:0f:a7:fe:4c:a6:e1:ae:4d:f8:ef:a1:e8:d6:51:82:bf:de:
55:56:9a:8b:54:38:19:7f:2f:f4:b5:73:80:74:25:de:4b:19:
55:af:54:29:b1:e3:48:46:62:5a:20:36:fd:40:17:66:fa:e9:
c0:2c:b0:c1:c8:7e:43:3c:3d:de:2a:9f:39:90:ad:ba:41:80:
2b:dd:1e:5f:bd:6e:18:a3:6a:26:7e:56:5f:ab:ca:23:eb:b7:
24:c9:91:71:10:7b:67:ed:1e:cc:5d:9a:91:56:d9:1e:5c:e4:
ee:8f:a0:d0:be:73:97:d2:22:37:6d:3e:7c:9c:59:17:c6:4c:
76:ea:13:86:2a:04:b3:93:73:42:b6:5b:ae:39:64:43:e9:18:
5a:66:f3:1d:9e:5a:24:8b:17:b3:88:64:93:f6:60:3e:60:f4:
c9:cc:de:5b:e9:3d:da:aa:ae:ac:4d:50:21:c0:c1:8b:92:83:
1a:44:84:e0:bb:88:cb:a2:78:2a:04:46:da:ec:98:38:8a:42:
33:52:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:21 2024 by rpki-client on console-ams.rpki-client.org