Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/18534d5b-57e5-3e35-91ff-d9895cc5e387.roa
File: 18534d5b-57e5-3e35-91ff-d9895cc5e387.roa (raw, json)
Hash identifier: Xdr5j330HbRvlB3dugprbmDaRX3sBf59pliGb1gU9N0=
Subject key identifier: 14:48:39:5D:8A:5A:92:29:8C:B4:95:06:22:AE:3A:78:A0:8A:1B:E3
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285844C7BA6D7EDAB82FE92C6C0BC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/18534d5b-57e5-3e35-91ff-d9895cc5e387.roa
Signing time: Sun 04 Feb 2024 14:00:31 +0000
ROA not before: Sun 04 Feb 2024 14:00:31 +0000
ROA not after: Sat 04 May 2024 13:00:31 +0000
asID: 216414
IP address blocks: 217.20.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c7:ba:6d:7e:da:b8:2f:e9:2c:6c:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Feb 4 14:00:31 2024 GMT
Not After : May 4 13:00:31 2024 GMT
Subject: CN=c5dd77f8-533c-4b33-899b-45457856a3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:47:6c:2b:50:62:16:c9:65:ff:c7:75:07:
80:25:bb:9b:aa:73:43:50:b5:9c:49:14:65:a5:e9:
42:95:9f:aa:7a:41:1b:00:2c:45:7a:24:68:27:ed:
28:f0:95:92:ef:4e:88:d1:2b:50:43:26:24:a6:96:
f2:89:95:ff:42:fc:11:34:c5:23:fd:30:96:f5:e4:
4c:2d:55:e6:2c:55:7e:8f:f2:53:3c:74:b9:bb:7a:
bc:fd:e5:8d:16:43:84:ea:e9:86:45:d7:db:91:c6:
a6:c5:14:91:2d:19:2f:10:92:1c:59:3e:06:0f:9b:
51:fb:b1:63:7c:20:ab:1e:e9:9a:cc:9c:5a:de:c2:
1b:94:ce:19:60:f4:df:bb:2b:41:7f:74:d9:75:62:
8f:b2:fa:f6:6c:1a:37:fa:44:fb:21:98:b8:37:dc:
d8:4d:8d:64:b2:de:ca:ed:e2:ad:46:8f:65:dc:b5:
7a:81:dc:69:9e:43:14:57:26:ec:b5:e6:b2:5e:22:
0f:b4:5d:fc:99:e6:8b:68:05:cc:67:de:d2:06:63:
46:c0:9e:1f:af:1b:4d:d9:a1:90:e3:0d:a4:8e:27:
48:d6:a0:66:59:46:47:2b:2a:f5:d6:df:f8:05:a1:
3d:bc:ba:25:27:71:96:6c:fb:e2:ca:f5:cb:fe:56:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:39:5D:8A:5A:92:29:8C:B4:95:06:22:AE:3A:78:A0:8A:1B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/18534d5b-57e5-3e35-91ff-d9895cc5e387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
217.20.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:5b:65:b2:ae:ab:8b:e2:75:18:a5:fa:e2:3e:ce:45:49:92:
30:46:45:84:bd:1a:86:df:10:8f:eb:1c:89:81:21:46:14:5e:
ee:ca:be:20:cd:c1:01:50:5d:30:70:41:d0:78:82:7b:94:fd:
5a:f9:9d:d2:8f:3c:ab:45:e8:bb:3f:81:f6:e4:25:53:cf:87:
9d:88:8a:d9:0e:a5:ed:bc:44:d2:bb:d8:fe:34:d0:07:32:18:
34:5d:50:82:28:ac:8b:3f:57:df:10:ed:95:79:1b:f4:2f:00:
bd:1a:a0:70:8a:76:a4:01:fb:53:10:93:e9:48:80:a3:1c:10:
28:1e:ec:2b:a0:a0:8a:90:c6:fe:d7:b8:9a:63:08:d2:5b:0c:
f2:06:bb:02:fe:57:b7:d6:f0:76:55:b3:2c:5a:55:d0:fb:18:
ff:f5:7c:76:7d:4a:6d:5f:3b:23:53:cc:b7:a4:bd:a2:9b:57:
c8:1a:85:31:65:b8:e3:7b:10:32:8b:f5:e5:cc:80:a6:aa:e2:
7c:93:89:f0:51:e4:c4:8b:c0:dd:f1:1b:97:6a:18:3e:ac:d2:
44:e3:4b:91:b3:3b:af:3b:7c:d3:30:84:1f:37:16:0e:63:85:
4d:ca:74:52:b6:0a:33:74:8c:89:cf:73:f2:02:28:73:5e:ff:
99:45:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:07 2024 by rpki-client on console-ams.rpki-client.org