Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa
File: ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa (raw, json)
Hash identifier: 8x13AiAbEIBreWZrgYTiUR3Mm/3WqHRdrIQsAfCnDqE=
Subject key identifier: E0:4E:D1:A1:D0:88:8F:B6:08:13:9C:9C:02:52:82:5F:8F:80:74:78
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F43285842655482BBD86B1CF4976444C0
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa
Signing time: Fri 30 Jun 2023 22:32:11 +0000
ROA not before: Fri 30 Jun 2023 22:32:11 +0000
ROA not after: Thu 28 Sep 2023 22:32:11 +0000
asID: 398646
IP address blocks: 45.41.214.0/24 maxlen: 24
162.253.214.0/24 maxlen: 24
162.253.215.0/24 maxlen: 24
209.160.97.0/24 maxlen: 24
209.160.99.0/24 maxlen: 24
2602:fe6b:1020::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:54:82:bb:d8:6b:1c:f4:97:64:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: Jun 30 22:32:11 2023 GMT
Not After : Sep 28 22:32:11 2023 GMT
Subject: CN=98d3e11b-382b-46f4-bc11-c9b30d3da077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:c5:4f:2e:2d:cc:e9:c0:d6:7c:3a:df:07:
46:76:8e:f8:80:cb:81:29:53:22:9f:df:6e:ef:f3:
25:fe:b4:6a:93:62:9d:03:82:1b:52:06:94:a8:d3:
28:3b:60:24:3b:56:1c:b1:85:1a:2d:67:f5:10:f4:
3e:31:27:52:4b:40:23:b8:a3:ce:7d:fd:c5:ba:11:
18:46:f3:a1:95:6e:be:a3:48:da:c2:85:62:bd:c0:
0e:c5:07:8c:b4:1a:6c:6f:36:1d:11:56:9a:62:d2:
a1:f4:31:ac:4f:b9:fa:c3:b7:7d:94:10:dd:d9:7f:
d6:9e:86:b9:17:4b:8d:b8:05:b3:0f:90:7e:47:e9:
d6:22:49:40:1e:f9:fd:9d:24:78:71:65:9a:db:19:
35:f8:4c:ed:0b:85:17:ea:6a:a4:31:0d:38:66:13:
d1:0c:06:b2:23:59:e3:d6:20:43:ee:ce:91:34:e3:
32:83:f0:58:44:1b:f8:75:73:be:24:ed:62:8c:fa:
34:ad:a0:2e:00:ba:ca:1f:c5:13:a5:99:db:c9:ce:
5f:c4:61:39:86:d7:6b:87:ae:fe:c0:72:ec:90:83:
dc:49:66:b3:f0:36:39:8d:f6:ea:04:b7:23:cd:4b:
dc:b5:0a:6a:e9:cd:2d:d5:c9:f7:68:d8:44:57:5f:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:D1:A1:D0:88:8F:B6:08:13:9C:9C:02:52:82:5F:8F:80:74:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.214.0/24
162.253.214.0/23
209.160.97.0/24
209.160.99.0/24
IPv6:
2602:fe6b:1020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:1a:2b:f9:a9:e1:b6:24:ed:57:5a:6c:8f:70:52:62:c9:34:
4f:1c:8d:ef:58:bf:cf:70:9f:80:fd:54:1e:c4:b9:0b:b2:0a:
bd:1c:8b:0d:c4:9f:e2:55:ea:f3:3c:e2:81:b9:8a:37:5b:12:
89:4c:31:4d:2a:dc:5c:a8:bd:db:75:d8:ff:45:8a:cc:f3:b0:
c1:40:60:62:46:03:45:d4:a2:31:0e:83:92:e0:3f:c9:6c:06:
37:c6:de:cc:c2:49:ec:96:88:e8:d7:db:ad:77:ea:72:45:d5:
16:73:6b:01:bb:64:0e:a8:d6:b4:58:44:27:90:16:1d:35:e0:
e0:d5:c6:5c:9f:70:c9:28:7a:3f:39:3a:b9:2c:90:98:87:2f:
6c:8d:25:40:7f:ec:7b:d8:e5:39:13:89:3c:a9:15:05:db:b2:
e0:9b:f2:d1:e0:6c:96:bf:cb:66:a1:7c:88:cc:99:21:1a:7e:
0e:a9:fb:58:94:f7:5e:3c:05:8d:4a:5b:0c:e8:43:9d:ea:90:
af:26:7f:7d:74:e4:30:1b:f2:66:45:63:ac:fa:24:08:57:e7:
b5:a4:8a:78:68:96:7e:ee:65:a4:e1:d6:7e:3d:f4:57:ee:c6:
99:c4:df:73:9c:a6:44:ac:9b:d1:a5:57:b7:f6:e9:a9:b3:1f:
b6:47:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:11:06 2024 by rpki-client on console-fra.rpki-client.org