Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/38fa83a2-c36a-3348-89d2-24c4fa3202c7.roa
File: 38fa83a2-c36a-3348-89d2-24c4fa3202c7.roa (raw, json)
Hash identifier: hPNsEBqyJUSqYsbyb2MOa+svymzJw/d0j8aqhAkOzWI=
Subject key identifier: 34:D9:C5:A3:D6:2D:24:64:A5:A2:47:B2:2B:B7:DC:DD:A7:15:87:76
Certificate issuer: /CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
Certificate serial: 010D0C9F43285842D1DEC4BCED7E38E7F0185DC0
Authority key identifier: CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/38fa83a2-c36a-3348-89d2-24c4fa3202c7.roa
Signing time: Tue 08 Aug 2023 19:38:03 +0000
ROA not before: Tue 08 Aug 2023 19:38:03 +0000
ROA not after: Mon 06 Nov 2023 20:38:03 +0000
asID: 21681
IP address blocks: 198.145.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:de:c4:bc:ed:7e:38:e7:f0:18:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
Validity
Not Before: Aug 8 19:38:03 2023 GMT
Not After : Nov 6 20:38:03 2023 GMT
Subject: CN=7dd46f79-03fe-4f5d-beae-ee53bdc5c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:84:e2:9f:60:ad:59:3e:29:c4:5b:59:e8:
44:32:e4:ef:9a:b7:9b:72:d5:74:55:53:7a:7a:dc:
4a:2f:ce:93:a5:2f:5b:5f:f9:72:36:9d:4e:8a:78:
09:c9:9b:0a:6c:61:74:bf:89:66:52:eb:1d:74:1d:
ac:02:a0:1c:db:52:77:e4:10:1f:6b:15:5c:85:dc:
75:31:af:83:b7:ab:4d:ac:32:21:e9:34:57:ae:20:
00:62:e9:50:a3:45:a0:25:95:29:a0:43:85:ab:05:
40:46:a9:a0:d8:98:06:af:56:88:c2:3a:c3:12:30:
22:87:ee:a4:4b:df:26:4c:57:fc:33:ee:c3:c5:8e:
1d:97:b5:da:c2:dd:fd:49:65:41:b3:2d:1b:89:4e:
3b:62:75:d8:2e:84:fa:71:e5:d0:ce:87:71:85:f8:
81:3c:c1:27:13:f4:9b:7c:68:71:31:9a:75:5f:61:
30:a4:f1:bc:e5:08:c7:cb:6d:6f:31:43:54:14:f5:
c6:eb:9b:70:09:50:05:39:6d:c9:94:0b:c8:6d:bb:
35:55:a8:67:15:aa:d2:90:91:7d:b6:e5:60:f4:72:
dd:07:ef:71:84:ec:54:c7:3c:55:6e:59:0b:42:a1:
b3:39:d8:92:e7:d2:ab:02:50:c0:84:b0:1b:d1:73:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:C5:A3:D6:2D:24:64:A5:A2:47:B2:2B:B7:DC:DD:A7:15:87:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/38fa83a2-c36a-3348-89d2-24c4fa3202c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl
X509v3 Authority Key Identifier:
keyid:CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:f1:a6:a9:86:c9:48:1c:ab:31:ee:ad:54:4a:d3:4a:91:e2:
fb:08:1e:1d:46:b1:0a:51:ed:13:66:67:63:fe:e7:da:ba:31:
ec:f7:ac:dd:20:08:c5:6b:e2:0b:d7:9c:e2:cf:42:37:4f:60:
36:d6:7e:1d:48:0e:4f:da:50:f8:cd:41:49:db:5e:47:9c:bf:
05:36:6e:a6:b0:c7:f9:b0:fe:c9:d8:f2:7d:f2:33:f2:c4:ad:
fe:21:0f:4a:6a:da:78:c0:04:b7:72:6a:19:b1:ac:b2:bc:82:
42:b7:e8:a1:2e:8d:90:0f:2f:f3:af:2b:89:73:d9:e2:79:04:
7c:5a:92:c4:2d:a0:65:54:46:6e:05:29:1b:32:a1:84:8c:8d:
0a:ff:80:5f:4a:c3:b0:32:62:60:2b:4c:30:4f:1e:b4:c0:f8:
ac:95:f7:3a:b8:23:43:f5:73:1d:f2:41:2d:5f:b9:db:9d:be:
90:67:7f:b1:c7:58:91:6e:7a:02:25:15:b5:f3:e9:cc:0c:d4:
3f:ba:e5:46:16:e6:bd:d7:38:2c:b6:77:e0:db:5c:6f:98:58:
0c:68:b7:4f:d4:38:5d:1b:cd:fd:84:ac:86:3e:b4:e0:81:e3:
8e:cc:74:89:44:fd:a4:24:9d:88:bd:a9:ee:08:5d:e6:9b:bb:
5a:96:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:21 2024 by rpki-client on console-ams.rpki-client.org