Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b9a80d5e-c770-30ab-baca-900a4bd9764b.roa
File: b9a80d5e-c770-30ab-baca-900a4bd9764b.roa (raw, json)
Hash identifier: 1TpTQ5VeWfLEBgBKSfeedQQoFI1DaP7Ev+K6sDeHrIk=
Subject key identifier: 92:B7:37:98:03:9A:E2:08:DB:D0:60:9C:B0:AE:0A:85:90:7D:6F:F5
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F43285844A5C41A51FFC892259D15C680
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b9a80d5e-c770-30ab-baca-900a4bd9764b.roa
Signing time: Tue 23 Jan 2024 10:02:38 +0000
ROA not before: Tue 23 Jan 2024 10:02:38 +0000
ROA not after: Mon 22 Apr 2024 09:02:38 +0000
asID: 834
IP address blocks: 208.123.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a5:c4:1a:51:ff:c8:92:25:9d:15:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Jan 23 10:02:38 2024 GMT
Not After : Apr 22 09:02:38 2024 GMT
Subject: CN=0fc0bfa2-f171-4c47-b4b3-41e3ce0ec967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:88:c6:d0:85:b4:ff:40:05:93:c8:e2:e8:
f8:8b:54:5f:f0:7c:a2:9e:2f:48:7a:a7:56:bf:ec:
b0:2e:eb:2f:4d:aa:0f:f3:c7:ea:02:80:8a:0e:4b:
a9:a8:b8:69:fd:4b:ad:cd:69:b4:c2:4e:93:b5:f1:
d6:31:85:6c:a2:1a:7e:ba:b1:70:ea:1d:c6:e6:85:
74:1b:74:3b:68:ae:de:cc:7b:39:2b:56:0e:45:1b:
5b:b9:86:74:6f:17:6a:5e:bd:d1:c0:62:66:b0:b2:
7f:c6:6e:66:cc:a3:5c:c8:6d:da:de:b4:d6:dd:86:
31:5d:40:af:f2:47:d9:12:5c:64:4c:c7:da:d2:9e:
fc:36:b0:44:f6:26:dd:3d:49:4b:71:ff:d1:f9:3c:
ee:ed:e5:57:a1:03:1e:c7:e7:74:ab:51:32:08:65:
66:36:8b:fd:03:66:a9:c4:06:5b:37:24:1e:4c:b5:
ac:09:e8:ec:c8:9d:b0:33:19:b5:fe:3b:cc:c1:8b:
dd:54:93:48:43:1e:c0:e3:7a:13:4b:f6:cf:81:a6:
9a:56:f3:5f:e8:5f:40:c2:c8:59:d3:f4:bf:aa:d5:
5c:20:e4:20:28:96:16:24:cc:f0:da:b0:11:f2:d2:
65:05:6e:a8:54:0d:7f:7a:c1:99:00:97:26:e5:11:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:37:98:03:9A:E2:08:DB:D0:60:9C:B0:AE:0A:85:90:7D:6F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b9a80d5e-c770-30ab-baca-900a4bd9764b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c9:fd:ad:b3:e0:35:32:d4:35:d1:4c:07:ee:77:18:c0:e4:
b4:16:9b:c7:94:86:56:2c:a4:cf:b0:e6:31:81:75:aa:e0:88:
1f:04:3f:37:b3:fa:d4:38:6b:17:cf:eb:b2:da:59:be:06:06:
74:89:a3:39:20:b4:8b:41:f8:a2:47:bb:d0:c9:64:2d:0a:b5:
1f:7d:27:44:12:23:0e:31:78:c0:b7:5c:2e:39:0c:3b:75:69:
fa:fc:a8:41:b8:78:55:e3:5c:e9:ad:aa:d2:0e:af:57:2a:36:
c7:fd:36:b6:ab:9c:ba:3d:a7:7d:c8:1b:34:af:9d:7e:9c:93:
a5:09:ba:98:df:32:01:e3:7c:f7:44:71:63:63:7c:50:30:3c:
8d:23:a8:be:24:4d:4c:09:f9:0f:a5:3c:ba:8b:d4:0b:a3:04:
50:af:c7:b2:27:57:be:4a:12:1a:5e:fc:41:bf:af:2b:6b:13:
45:74:d9:99:10:3b:80:f0:99:aa:5a:db:f1:e2:30:5b:ed:6c:
8b:f8:40:03:2a:47:26:3d:be:c4:23:97:72:54:d2:e5:82:af:
5c:95:11:6d:aa:27:87:ad:6c:e4:32:a9:24:81:bb:21:fe:5b:
1f:e8:e9:49:5d:42:3b:16:c3:e1:ad:92:0c:0f:dc:f0:f7:bf:
a6:46:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org