Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/45dcb958-4113-33ab-9ee1-5ece2d2c4bab.roa
File: 45dcb958-4113-33ab-9ee1-5ece2d2c4bab.roa (raw, json)
Hash identifier: jlRq1WNSOd8/bf7xKGqlpw5m7GVoVt5s3qpN+osg+zE=
Subject key identifier: DB:28:F0:EC:C0:14:A1:58:8B:F6:9E:30:37:14:09:35:54:9F:38:88
Certificate issuer: /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial: 010D0C9F4328583ACDE4BDB143B530CA5FA7D8C0
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/45dcb958-4113-33ab-9ee1-5ece2d2c4bab.roa
Signing time: Mon 02 Aug 2021 04:00:00 +0000
ROA not before: Mon 02 Aug 2021 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 23.249.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:cd:e4:bd:b1:43:b5:30:ca:5f:a7:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
Validity
Not Before: Aug 2 04:00:00 2021 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=8941bdfb-454d-4d63-897c-bb31b4d0a08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:52:89:5c:42:f8:93:c6:05:9b:38:90:82:
95:37:a4:4c:2c:5e:e7:af:0a:60:7b:c5:85:94:cb:
45:7b:0e:af:cc:21:85:27:ea:e3:b8:8d:98:9a:3f:
f0:6e:70:12:49:cc:4d:3b:b6:48:f5:39:32:0e:29:
12:11:36:59:73:e1:e1:df:38:a8:88:e5:9d:76:10:
a7:be:4b:a7:e7:6b:f0:ff:83:35:20:47:72:97:9c:
c9:87:1f:1b:ac:7b:fd:ca:34:2f:57:d9:53:a1:16:
6c:87:16:8b:4f:b3:f7:4f:5f:6f:3d:c0:d5:e5:23:
96:1c:e8:bb:8d:94:a4:b3:0f:81:40:b2:f8:1b:30:
8c:a7:b5:88:b8:8f:be:ea:48:62:27:14:47:9d:ff:
3a:3d:2e:f9:ff:7c:7e:e5:d9:4c:32:cc:be:94:a7:
48:13:f0:d0:1b:8e:34:f8:6e:7b:ab:91:0c:89:28:
eb:53:ba:a0:fe:e0:bb:a8:70:ee:fe:c3:55:fe:ca:
d0:c2:a1:8e:42:07:f8:16:eb:68:24:52:2b:c1:06:
bd:26:7d:90:fb:0b:d1:dc:01:89:98:5a:f5:e7:57:
9f:b1:99:95:4b:58:54:d4:f3:34:26:79:e3:eb:d1:
49:b5:d0:ba:fa:25:6b:24:b7:a6:a7:f0:14:52:b4:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:F0:EC:C0:14:A1:58:8B:F6:9E:30:37:14:09:35:54:9F:38:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/45dcb958-4113-33ab-9ee1-5ece2d2c4bab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
X509v3 Authority Key Identifier:
keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:de:c9:54:a7:e1:d5:30:69:fc:37:00:7f:73:10:5b:d2:be:
98:5f:27:f3:0b:95:0d:df:66:b0:f2:30:ba:39:7f:6d:71:32:
3b:5c:40:4e:85:b7:84:2e:21:6d:8d:c2:c8:06:81:21:6e:95:
83:c6:cd:53:82:ff:df:1d:12:ea:e8:86:33:e9:53:e7:84:d9:
95:f0:f3:fc:f2:75:2b:59:56:a0:21:1f:9b:94:28:8b:76:a1:
be:1e:26:8c:99:18:16:bc:0c:a3:64:64:0a:ff:6d:dd:98:6a:
d9:9a:9e:6d:8d:9b:90:72:dc:fa:5d:ec:62:ff:6b:75:98:64:
20:3e:e6:3f:6d:8d:c3:6c:35:31:42:35:17:85:76:ed:5a:9b:
bd:70:16:8a:02:99:ac:97:30:30:5b:19:ec:e1:68:26:70:02:
74:40:f3:04:dd:a0:c9:48:47:47:9f:fa:06:f0:b2:ac:a8:3e:
ce:6a:c7:be:a0:ee:a5:18:8a:21:f3:2e:56:66:56:45:17:4d:
20:8d:3a:36:80:8f:39:59:e7:6a:a7:df:fa:f1:56:de:aa:b9:
a5:f5:c4:0a:cf:ba:33:ca:95:3c:fa:21:d6:a4:cb:57:32:3c:
fd:5d:e9:6e:57:5e:a7:fe:f9:0f:d8:66:bc:8b:1e:95:5d:1f:
6e:21:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:09 2023 by rpki-client on console-fra.rpki-client.org