Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/84e5e7b9-e03a-36db-a5e9-aed1c19f974d.roa
File: 84e5e7b9-e03a-36db-a5e9-aed1c19f974d.roa (raw, json)
Hash identifier: Fw8v/PJEW80mWEH1VgXb3IYk+IgLfwLsq7VwQ9sWydE=
Subject key identifier: 4E:81:F1:38:0C:3F:D3:CF:34:35:1C:62:00:FB:B3:FA:00:D6:28:5F
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7BC69B20FE88475BF6E0D80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/84e5e7b9-e03a-36db-a5e9-aed1c19f974d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 64.15.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:69:b2:0f:e8:84:75:bf:6e:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=338aad34-f2e4-4f6a-ba19-e2b76590adfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:e9:4f:0e:cf:4e:1a:f9:94:17:93:4e:f0:
51:00:8c:c3:30:23:53:85:d5:1c:f6:07:2a:fb:78:
05:79:e9:d8:b5:02:b6:04:34:ba:72:42:9f:5e:85:
c5:ce:45:27:2c:8f:e9:1a:bd:94:bf:99:bc:43:3b:
07:56:59:62:bf:bf:2e:27:33:fc:e5:a5:91:b2:0b:
6d:1a:3f:ec:f4:86:56:72:45:69:39:3a:11:11:c1:
a7:37:99:6b:0f:52:6a:80:4f:0d:1b:a9:af:e2:0f:
43:ba:16:4d:03:06:cf:f2:2c:f6:eb:51:39:6d:9a:
a7:5d:df:6d:75:29:0d:19:45:c9:1a:8f:b0:5b:9b:
23:7c:59:83:1a:21:e1:09:e0:6e:07:f1:6b:0c:44:
27:48:98:31:35:46:de:4e:30:84:4b:b5:39:65:31:
fb:dd:da:41:91:5a:21:4a:b7:97:36:e4:58:4c:f1:
83:5f:92:7c:df:0f:4f:a6:2e:d0:08:ff:ed:44:19:
e5:a3:16:52:66:e4:e4:02:03:b8:8f:75:ac:67:66:
ec:49:db:a6:e8:18:20:fc:22:4f:ce:8a:10:b0:ff:
57:0b:17:06:09:80:8b:60:e9:c7:97:36:e0:73:2a:
b8:21:de:4d:f5:02:2f:be:2d:f3:a1:ec:cd:06:49:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:F1:38:0C:3F:D3:CF:34:35:1C:62:00:FB:B3:FA:00:D6:28:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/84e5e7b9-e03a-36db-a5e9-aed1c19f974d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.15.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a7:26:a7:5b:8a:40:fe:20:f2:81:9c:a4:b2:e2:b1:23:69:
28:cd:32:e5:d1:dc:27:e6:f6:80:53:7c:49:4d:89:96:8e:6e:
7a:f9:15:59:a8:ee:4b:d2:82:0e:dc:e7:ba:68:44:0e:fb:35:
27:85:4b:c9:ef:ba:2a:4e:17:26:ba:d7:4f:a9:52:d3:1f:0d:
b6:6a:d3:71:0b:84:dd:11:18:d9:13:4c:f8:22:c9:a9:a6:2a:
a7:fc:46:5a:ad:b0:b5:e4:eb:7a:44:ee:47:35:f0:ef:33:46:
0d:61:93:83:e1:96:34:ae:d0:e5:dc:86:f6:1e:fa:26:cd:ca:
c4:24:8a:8f:f4:a0:a8:f9:db:0b:9d:09:3d:82:77:85:2c:82:
03:d6:82:78:c1:7b:41:aa:d6:b2:7c:63:3e:56:68:92:ba:97:
d1:3d:2c:01:e2:68:af:60:3b:1c:42:29:e3:e4:8c:5d:5c:9d:
3f:53:37:b8:4f:17:33:09:52:08:63:fb:42:d3:f9:00:30:25:
be:a2:5e:62:2e:7b:b3:89:aa:49:f5:97:7e:64:ab:c1:66:f2:
e8:c6:44:f2:f4:69:d6:26:d3:40:25:eb:7c:5b:65:ca:c3:f0:
2d:60:ba:2f:b6:ca:a4:c9:41:44:87:47:b1:d3:c2:cb:b7:b9:
93:4a:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org