Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ff0dea9a-7c2c-3178-8958-cd6ab6d57c79.roa
File: ff0dea9a-7c2c-3178-8958-cd6ab6d57c79.roa (raw, json)
Hash identifier: ZOC2+Rw0VlW1q/UWM8JsiqkJ3Nv/iYlGshZDpfzy/Kw=
Subject key identifier: DC:CD:00:F6:19:B1:5F:16:4E:5C:A1:38:BA:34:96:5B:3A:A6:4E:D5
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7A1F0A12BB983B7C9F4D480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ff0dea9a-7c2c-3178-8958-cd6ab6d57c79.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:f0:a1:2b:b9:83:b7:c9:f4:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=35f1b0d2-f9b6-45ff-8239-3b87e14756e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:91:67:f8:37:94:28:77:5e:5e:05:e0:9d:
0f:9b:12:51:1c:6f:d7:cb:ed:a7:e0:5f:62:61:3e:
7d:f1:4a:d3:70:b7:f5:fb:57:3a:38:a7:75:88:2a:
43:1b:9c:67:ff:37:7b:11:3b:2c:c3:f2:ae:f7:55:
b7:a8:de:3b:ab:d0:0b:8d:da:46:e2:58:5b:1a:0e:
a9:0f:db:78:b0:6d:39:ba:81:c6:9b:0b:ca:e6:20:
a3:24:38:ad:a5:56:44:7e:31:d8:a5:4b:66:d2:33:
38:76:5c:da:36:5a:d7:ea:ee:55:10:2f:e4:94:a6:
86:fd:f0:45:ee:29:a1:59:1a:f0:30:81:d0:cf:18:
05:60:84:3e:9a:21:31:06:2d:1c:06:d3:7c:d3:08:
14:d2:c7:e3:bc:cf:1e:f9:e6:39:2d:bc:4c:4a:57:
3e:9b:e2:02:28:e3:2e:59:ba:6f:3f:09:c2:21:f8:
b0:a2:4e:55:fb:81:cf:e2:c1:0c:52:50:7f:61:31:
19:52:cc:f6:9a:8e:bc:d9:74:f5:ad:2c:1d:04:36:
c6:0d:8c:27:12:55:d6:e7:d0:41:4c:d5:87:2e:70:
89:5d:5c:e2:66:80:9c:b5:22:4a:82:6a:79:fb:83:
cf:cf:6b:8b:cb:f7:c1:0c:0b:18:8d:9f:fa:90:bb:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:00:F6:19:B1:5F:16:4E:5C:A1:38:BA:34:96:5B:3A:A6:4E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ff0dea9a-7c2c-3178-8958-cd6ab6d57c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7b:7f:bb:26:4f:bc:bd:f2:bc:40:8d:53:b4:4a:3a:1b:22:
2c:7f:93:2d:f6:72:5f:9c:39:f7:6f:4d:5a:87:4d:37:b1:92:
41:05:20:b6:3f:f7:60:98:df:46:be:13:1d:95:dc:14:14:10:
d0:eb:8b:e5:9f:12:68:d3:ec:00:7d:bd:28:9f:26:06:fd:c0:
07:b6:a9:35:cb:29:fa:1f:f1:18:66:55:51:08:34:47:23:e8:
84:5b:6d:ab:f7:4a:7d:c2:e3:a4:bf:9c:84:50:38:74:4a:ef:
ae:75:cd:75:93:67:58:aa:ca:97:14:d0:9f:5d:39:bd:96:96:
10:a3:c3:a2:b4:f0:f5:6f:ef:06:f9:e0:66:59:21:97:b4:34:
e7:4b:61:af:8d:f3:a7:56:20:99:66:17:89:5c:45:40:93:56:
c3:9e:1d:32:c2:cd:09:2c:c4:dd:4b:46:6b:e7:8d:92:d2:85:
0a:c4:31:7a:58:75:03:09:a2:aa:62:cb:f4:71:d5:06:ff:fe:
12:e6:d7:f8:8c:ce:9e:83:46:99:be:5d:10:eb:f7:a2:b2:c5:
f8:72:4f:b5:4c:27:e8:fc:ea:17:77:aa:e2:d6:c7:1d:6c:bc:
10:1b:d1:2b:fc:f9:b2:d1:b8:b0:f6:8e:f0:d3:04:72:45:e8:
1e:4f:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org