Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/685441b0-2e01-3b24-8bba-1de232bb82bc.roa
File: 685441b0-2e01-3b24-8bba-1de232bb82bc.roa (raw, json)
Hash identifier: Ms+dB2kaZOI5GdpIGN+agFAUY/qxTbpemX64jEw+ipc=
Subject key identifier: 22:AD:24:6E:27:CB:4F:4E:70:76:C0:AA:CF:43:B1:86:DC:A7:2D:7F
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F43285842229DA3068A9F676A9BC43700
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/685441b0-2e01-3b24-8bba-1de232bb82bc.roa
Signing time: Wed 07 Jun 2023 01:00:16 +0000
ROA not before: Wed 07 Jun 2023 01:00:16 +0000
ROA not after: Tue 05 Sep 2023 01:00:16 +0000
asID: 399150
IP address blocks: 52.128.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:22:9d:a3:06:8a:9f:67:6a:9b:c4:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Jun 7 01:00:16 2023 GMT
Not After : Sep 5 01:00:16 2023 GMT
Subject: CN=0344334b-6ef0-476b-80a3-22c368284b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:f5:9f:33:10:4e:cc:a6:6f:c0:63:3e:25:
19:c4:4d:a6:f2:b5:aa:46:11:c3:da:c1:7f:5f:2d:
89:db:9e:f3:c5:6e:d2:ac:7f:bc:33:58:fd:c3:7f:
b2:0e:e3:52:5a:c3:bf:ef:6b:c1:8b:6e:58:1d:d1:
8b:d6:05:91:a9:14:ec:12:d0:0d:7e:7f:88:3f:07:
47:89:ad:f6:a2:72:70:4c:62:22:75:20:f5:9a:4a:
d3:09:d9:93:b1:1d:d5:f2:de:a3:7a:6d:a6:42:0c:
1c:b0:af:58:a5:91:79:e3:38:73:c8:ac:f2:eb:28:
c6:78:87:d1:a7:70:ab:bc:66:25:e2:41:29:86:74:
e9:1b:11:7a:52:76:e7:f4:dc:b1:80:29:8a:93:24:
37:a0:74:1a:9f:59:0b:5c:1a:11:1a:2d:9b:74:5a:
13:ae:ad:5a:86:74:ea:0a:f4:74:a2:36:d9:ff:be:
99:dc:64:17:e9:f3:f5:27:b2:59:61:7b:08:7f:ca:
78:47:86:01:f5:1c:80:6e:b2:f4:0f:53:20:a9:fa:
e9:ae:ee:3f:f0:5a:c1:79:15:97:07:db:35:b0:5f:
28:da:99:40:14:6d:80:59:51:5f:68:09:63:31:f1:
86:ce:ba:9e:f8:d0:f3:da:8d:07:cf:fc:4c:65:2f:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:24:6E:27:CB:4F:4E:70:76:C0:AA:CF:43:B1:86:DC:A7:2D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/685441b0-2e01-3b24-8bba-1de232bb82bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9f:63:ed:49:d1:3c:f0:fe:c4:44:28:1a:be:95:1f:45:2d:
cf:24:46:84:d2:8f:ef:33:51:bb:b1:79:a1:29:ef:bb:25:a0:
73:6e:18:3b:90:d8:fe:c0:77:4a:d9:19:40:89:79:25:87:57:
b5:e8:00:07:c6:1e:47:9f:70:e1:eb:07:3e:53:35:4e:74:1a:
b2:d5:0b:ed:fa:6f:61:19:37:23:84:fc:17:a2:fb:85:0f:a2:
db:ef:1c:8f:8c:d5:c9:4e:f7:db:8f:ae:d3:23:ba:43:eb:7c:
7b:6d:ad:a7:5b:88:29:98:43:48:01:17:c6:cf:af:11:7e:80:
c0:06:0a:ab:69:5e:f0:81:c3:46:1f:8b:b3:4b:6e:e6:27:a1:
2a:09:3f:d0:75:5c:e9:7e:0a:20:c8:9e:35:ec:ac:d0:62:17:
63:1c:a7:9e:ed:dc:c9:4e:db:1b:7a:92:5b:f5:6a:6f:fa:09:
07:bd:82:70:cb:39:50:ac:3c:2d:75:2b:4f:f1:b4:0f:76:43:
ef:a2:bb:52:f8:9a:96:eb:ca:e7:88:d4:d8:e9:4a:97:a7:f3:
e0:d5:64:91:49:31:cb:bf:c0:73:b3:a4:d9:17:c9:03:8e:6c:
ae:76:03:2d:96:0b:22:98:bc:ea:ff:17:b9:9b:d3:ce:b0:9a:
42:af:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:53 2024 by rpki-client on console-fra.rpki-client.org