Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/423af63e-9f77-3f39-89c9-648947884473.roa
File: 423af63e-9f77-3f39-89c9-648947884473.roa (raw, json)
Hash identifier: 8cjTW8bFZWvT07Cm1JjqZI9yQ4zKXUSFcBhdr7ouC2w=
Subject key identifier: 13:16:99:56:23:1E:53:FA:6A:39:80:BE:85:BE:54:B0:0B:0E:AC:2E
Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial: 010D0C9F4328583845B76DB082844716D619B780
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/423af63e-9f77-3f39-89c9-648947884473.roa
Signing time: Mon 14 Dec 2020 05:00:00 +0000
ROA not before: Mon 14 Dec 2020 05:00:00 +0000
ROA not after: Sun 19 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 157.248.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:45:b7:6d:b0:82:84:47:16:d6:19:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
Validity
Not Before: Dec 14 05:00:00 2020 GMT
Not After : Mar 19 04:00:00 2023 GMT
Subject: CN=0a23eb13-edb5-4e4c-ad38-e7a37fcb5353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:51:d0:36:a2:f8:27:4e:d5:9d:95:17:dd:
9f:52:65:e9:3c:79:a9:7d:6b:29:5c:2e:e0:e6:38:
87:70:cf:d2:d1:6e:79:00:e3:68:ef:0c:f8:88:21:
73:17:f0:2a:da:e7:70:c2:2d:fc:3d:84:b0:91:e2:
01:fb:d9:14:fb:52:4f:8d:b4:bf:dc:96:bc:f8:99:
9c:61:fb:ee:61:60:69:bd:1b:47:d9:c0:b9:c0:d8:
ab:8c:50:c9:dd:94:ed:bc:fd:90:a9:3c:fe:dc:7f:
74:35:f2:89:d3:ee:dd:52:11:e6:d0:97:3f:d3:12:
c9:a1:97:8d:d2:78:c2:5a:c6:fb:27:e4:2a:8b:f0:
4c:19:0d:e4:99:32:81:6b:0c:57:cc:d6:b4:8a:1a:
fc:67:75:cc:c9:d5:4a:69:f6:dc:97:d1:e2:d8:6b:
af:ec:5a:ae:ff:26:59:cd:0c:f4:34:9d:6a:cc:f9:
5a:92:76:71:8f:e2:fb:2b:6c:26:bf:47:4f:98:e1:
2c:6e:37:ef:10:84:23:c3:48:46:19:d4:6c:c6:ed:
64:b9:e5:32:8a:97:a8:9d:c7:ee:68:80:ba:eb:f7:
bd:28:01:34:eb:f2:77:d7:21:c4:f6:9e:9c:f6:1a:
bb:7d:17:c9:1d:cf:bb:1f:00:82:86:ac:18:24:16:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:99:56:23:1E:53:FA:6A:39:80:BE:85:BE:54:B0:0B:0E:AC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/423af63e-9f77-3f39-89c9-648947884473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
X509v3 Authority Key Identifier:
keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
sbgp-ipAddrBlock: critical
IPv4:
157.248.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:2f:3c:98:18:23:da:b2:17:f6:39:76:96:14:54:1c:7b:f7:
f2:5a:2d:af:d1:1e:29:dc:2c:99:1a:2e:bf:63:5a:da:63:10:
73:af:7f:0a:fa:3d:1b:59:d3:00:6a:14:39:93:43:91:2d:af:
37:10:94:d8:5a:1c:91:82:99:24:2c:8e:04:46:55:c8:15:b3:
de:1f:83:f8:50:19:86:67:af:f4:dd:7b:20:0b:0c:fa:a6:79:
05:d8:eb:3e:08:c2:57:ac:5a:4d:d8:cc:6c:d7:99:5d:b3:e3:
42:17:71:5d:24:6b:3a:61:57:f9:99:bd:c4:2b:6d:5f:04:df:
9c:03:b6:97:1a:91:05:33:24:e4:f2:e2:4a:81:1c:23:86:13:
a0:c2:b4:ef:a5:01:d1:db:38:b1:3d:ba:74:ed:5f:99:5c:74:
51:53:0f:48:65:cb:0a:2d:f1:b4:99:bf:36:9a:3d:90:d4:aa:
b2:b9:3d:48:38:3b:61:e0:a6:a2:47:35:3f:7f:2c:28:99:1b:
84:05:70:23:d0:e3:17:33:c7:51:86:5e:b0:32:4a:89:08:84:
90:06:77:35:ad:4c:a5:24:63:31:50:e3:d8:41:fc:8e:fc:3b:
cf:76:6e:dd:6a:cc:1b:02:b9:fd:03:38:c0:fd:b0:11:93:ab:
9b:cc:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:52 2025 by rpki-client