Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fea9f316-9848-3a76-862c-acb2c32b9253.roa
File: fea9f316-9848-3a76-862c-acb2c32b9253.roa (raw, json)
Hash identifier: 02gdQFot/dvrdX8NL4Bd3HU/LB1UPNHQHekKRgonl4Y=
Subject key identifier: 27:EA:7D:9A:9D:87:46:4D:8E:02:B2:80:8E:D8:7C:AD:4E:11:E0:02
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328583C82DD194906B340FA40658B40
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fea9f316-9848-3a76-862c-acb2c32b9253.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Sun 07 Jan 2024 05:00:00 +0000
asID: 61317
IP address blocks: 104.167.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:82:dd:19:49:06:b3:40:fa:40:65:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Jan 7 05:00:00 2024 GMT
Subject: CN=b3987c07-c430-4d45-8306-8bbf3e4340c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:1e:5f:cb:3e:6b:c4:59:3b:d5:83:bb:d3:
22:1c:c6:3c:7e:4b:f9:9f:1c:97:1c:0f:dc:13:1c:
00:99:23:6a:54:a2:b2:25:f1:bb:bb:cf:40:9d:0c:
7b:98:37:36:e8:10:60:98:45:bb:13:6f:ef:bc:bb:
3b:33:bd:5e:4d:69:93:12:0a:c1:30:9e:86:6f:6a:
9d:4a:70:28:da:96:8d:91:55:b9:d5:ce:1f:3e:67:
f8:03:13:b9:1a:13:e3:80:30:2d:d4:47:38:2c:43:
56:a9:75:0b:5c:cd:1a:55:cb:ec:e4:d5:4f:99:60:
d5:e8:a7:2e:a1:e3:76:5f:54:40:09:55:cb:82:7b:
fb:2e:29:d2:d1:e4:5d:ff:ad:bb:4f:e7:75:e2:9c:
35:0d:72:1b:4c:91:c7:e7:66:f4:1d:c0:f4:8f:33:
18:b8:57:69:c7:4f:5a:78:2a:50:d2:66:78:3b:86:
61:5f:e3:60:d8:cd:3e:8e:df:2e:64:64:ad:70:7b:
f8:d0:05:54:5c:b9:4e:22:83:9f:5f:0e:93:22:6b:
35:51:ac:09:8d:04:76:50:95:e5:c0:9c:18:84:f3:
c3:5b:79:58:29:92:07:2a:72:46:ce:20:3f:34:43:
ee:6e:7b:da:c7:c1:2d:8e:ec:47:3f:d1:93:ad:42:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EA:7D:9A:9D:87:46:4D:8E:02:B2:80:8E:D8:7C:AD:4E:11:E0:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fea9f316-9848-3a76-862c-acb2c32b9253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7a:f4:0c:9b:8c:e7:6e:67:9c:f0:1e:84:b5:9d:cf:d2:14:
44:5a:33:52:a2:c0:b9:ec:4c:a1:dd:5f:68:4a:af:77:b7:6b:
74:33:24:34:e1:c4:40:21:50:d8:d4:6f:0c:60:58:45:a8:2f:
55:f5:83:d4:29:c0:49:50:c9:7f:1f:e3:96:cd:a8:7b:4d:df:
d4:3d:0d:13:a6:85:a9:f7:6c:78:5b:65:64:4c:8e:42:10:79:
11:fa:ce:af:86:16:fb:00:55:51:37:58:ca:ed:c3:33:31:ef:
95:86:7f:f4:91:3d:39:c5:20:f0:ce:90:b7:78:9b:f2:61:aa:
03:eb:ae:00:65:61:34:2b:2a:33:e0:c1:12:90:3b:4e:df:05:
44:64:2f:8c:f3:0a:c6:e3:75:00:a7:3e:15:47:02:bb:03:e9:
eb:a3:72:d2:46:0a:0b:a9:fa:dd:b1:48:34:94:a2:59:80:e2:
46:5f:ac:85:e5:55:ba:d0:20:12:5e:0c:4a:a9:4a:95:ef:4a:
60:9d:ed:70:dd:50:b4:6c:1f:e6:c7:c2:ba:4f:c4:80:b4:62:
d8:9a:29:1b:4a:27:c5:3b:37:a8:43:ec:b6:57:d9:29:f6:b0:
95:dc:84:85:3e:25:24:fc:b7:66:2d:d4:00:cf:1d:72:1d:87:
5f:46:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:21 2024 by rpki-client on console-ams.rpki-client.org