Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/de2eb7c0-99df-3f48-9799-b9e1c15ac41f.roa
File: de2eb7c0-99df-3f48-9799-b9e1c15ac41f.roa (raw, json)
Hash identifier: fEyhckpiZuAbVAUrAbqH0GVXgsjib+3j0Wzm8XRnYmY=
Subject key identifier: 67:99:B2:13:7C:C5:25:72:EF:65:06:1E:2F:1C:BD:92:A4:F0:C0:6A
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F43285843AFC8FF50EE5A5E9EA0296FC0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/de2eb7c0-99df-3f48-9799-b9e1c15ac41f.roa
Signing time: Fri 27 Oct 2023 07:23:39 +0000
ROA not before: Fri 27 Oct 2023 07:23:39 +0000
ROA not after: Thu 25 Jan 2024 08:23:39 +0000
asID: 213035
IP address blocks: 208.67.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:af:c8:ff:50:ee:5a:5e:9e:a0:29:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Oct 27 07:23:39 2023 GMT
Not After : Jan 25 08:23:39 2024 GMT
Subject: CN=2e532790-be29-4d13-a841-c37d11f3764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:0a:a7:25:0f:b7:45:e1:28:ca:15:ea:3e:
39:ca:e8:7e:87:a8:31:20:c4:0c:90:81:bb:c0:70:
d4:67:5b:72:db:09:43:6c:54:38:72:c3:bc:c2:bf:
38:6c:53:2a:cb:0c:fa:88:7f:fe:d6:b5:20:cd:4a:
c5:0f:a4:c1:bf:87:59:43:26:09:18:41:2e:5d:0b:
c1:2a:fa:f8:8d:49:b1:99:77:d5:e4:1e:37:27:d8:
b9:16:98:c0:c2:4c:e8:95:2e:b5:0b:4e:26:13:89:
32:3f:0f:e6:a9:2e:c3:d3:ac:2f:19:21:1e:0a:97:
bc:9a:c2:2e:55:12:10:98:bb:41:59:25:45:80:7d:
a0:93:08:89:e5:10:c8:61:a6:c4:7d:5b:0f:44:45:
8b:cc:c5:78:ff:d9:d5:d8:91:5e:cd:d1:08:12:1d:
ac:a6:08:94:ba:3b:f4:cc:99:03:f4:47:0b:57:72:
9f:4f:c9:36:fd:f8:0f:4e:d1:88:33:96:76:da:e7:
16:b2:72:4b:c3:3b:fe:a0:0c:3e:9c:81:27:1f:3c:
f7:a5:9c:be:be:cc:f2:30:ab:c1:b5:30:e8:15:ee:
f9:42:f8:3e:79:96:19:38:1e:8d:74:c9:13:12:aa:
dd:89:5e:26:56:1c:01:29:7f:00:5b:de:09:df:65:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:B2:13:7C:C5:25:72:EF:65:06:1E:2F:1C:BD:92:A4:F0:C0:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/de2eb7c0-99df-3f48-9799-b9e1c15ac41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:48:14:c9:b1:b0:bc:fb:f3:ef:a5:55:32:6a:0e:4d:2f:47:
00:6a:b7:7f:3a:17:83:49:79:64:8a:9e:c1:a3:aa:bf:7d:a1:
b9:e4:be:64:4b:a9:88:68:f4:11:3a:3a:41:d4:49:70:02:1d:
7d:7d:42:c9:3d:87:19:fa:da:a2:fc:be:e4:4a:6c:83:83:cc:
b7:5f:e7:09:50:f9:f3:69:b9:b8:ee:f9:2d:f7:a6:f4:8a:6a:
1e:b0:c0:a0:29:ef:74:c7:58:8e:dd:80:63:dc:03:d4:51:4c:
4b:be:55:30:02:90:b8:74:e1:df:32:26:7e:b2:65:84:c2:9b:
fa:66:63:cc:c9:48:f4:a3:3d:62:ff:c5:96:5e:2c:ed:a3:9f:
7e:28:d2:df:8c:7e:ff:76:9f:ef:25:b2:ea:27:ac:cf:32:b7:
a0:55:77:8d:85:d9:7f:30:6c:ce:79:ad:cb:79:a7:2a:d6:cd:
2b:51:a2:f6:00:0b:f1:27:c7:53:c6:52:6b:8a:2c:2c:8c:29:
4f:dc:36:8b:45:7e:c9:d4:4e:75:c7:6d:a1:5c:89:0f:20:1a:
7b:24:a8:77:60:74:2c:80:7c:2d:c6:7a:14:d0:db:f1:7b:5a:
e6:8a:7e:f2:5a:83:20:9c:92:f1:72:ee:a9:db:b0:6e:24:7d:
29:31:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:46 2024 by rpki-client on console-fra.rpki-client.org