Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8e8593f1-b22d-37c1-9d02-1aed7bcf4079.roa
File: 8e8593f1-b22d-37c1-9d02-1aed7bcf4079.roa (raw, json)
Hash identifier: whRtrnzoB5mPo/lSrLu0Z9ibxdKqPg1Jtvv/6dSdreY=
Subject key identifier: 87:3A:1B:C6:4D:57:B1:A0:66:99:5E:F0:2C:44:0A:FD:79:A1:11:52
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285842E083DAC376C9B28F95937080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8e8593f1-b22d-37c1-9d02-1aed7bcf4079.roa
Signing time: Mon 14 Aug 2023 01:32:00 +0000
ROA not before: Mon 14 Aug 2023 01:32:00 +0000
ROA not after: Sun 12 Nov 2023 02:32:00 +0000
asID: 834
IP address blocks: 139.177.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e0:83:da:c3:76:c9:b2:8f:95:93:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Aug 14 01:32:00 2023 GMT
Not After : Nov 12 02:32:00 2023 GMT
Subject: CN=08975c3e-f46a-49f4-a139-fd3ad10d181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:ec:68:f1:4e:4e:25:75:dd:fb:dc:0b:95:
d4:eb:1f:a1:35:da:93:b2:44:24:95:96:7a:2f:4d:
72:9b:9c:f1:60:c0:b5:0b:7c:3b:14:40:69:a6:ef:
81:13:c7:83:24:4b:ba:ab:09:51:91:79:a0:a2:1a:
0f:72:ec:ef:af:d7:01:cb:29:88:9f:88:27:82:56:
ae:dc:8b:85:40:6b:55:fd:75:d7:33:43:e6:1a:0c:
0e:9b:36:2c:5a:7c:67:1a:d7:f7:6c:51:91:09:7c:
7c:da:0f:93:ee:23:aa:a3:40:56:c7:94:1d:f9:2e:
6e:4b:f8:81:5b:e5:ea:2f:93:92:d5:87:8f:06:81:
d3:49:1c:3f:f4:d7:8a:dd:7b:df:68:9d:a4:fa:b4:
49:f1:11:05:e1:46:80:52:64:28:ab:dc:f0:e6:94:
fd:ca:0e:02:71:6c:be:5c:94:34:3b:4a:44:cd:43:
f1:72:39:0c:37:57:b1:98:14:85:fb:d7:01:04:97:
35:6c:25:b5:dd:cc:0e:39:a7:61:a4:b7:6a:df:64:
7c:eb:32:98:43:61:bf:ee:d8:66:76:d5:ce:f6:c7:
94:df:9c:9c:55:68:97:7c:b5:4e:60:2f:83:97:d9:
b4:16:ed:6e:be:9a:7e:9a:79:6e:3f:72:c7:e0:63:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:1B:C6:4D:57:B1:A0:66:99:5E:F0:2C:44:0A:FD:79:A1:11:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8e8593f1-b22d-37c1-9d02-1aed7bcf4079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
139.177.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:76:23:4b:41:9b:f5:b4:32:9f:b4:10:e3:4d:d5:33:9f:04:
ed:a9:9d:96:f9:72:07:ef:55:40:7d:bb:97:d3:de:c0:f4:74:
ce:66:6f:b5:37:49:60:01:67:03:17:44:dc:0c:47:02:2a:ac:
1b:eb:4d:9d:29:7e:28:bb:d0:ee:1c:8b:aa:b5:03:6c:9b:5a:
4a:20:4c:6f:a0:32:d9:ff:ba:e1:73:05:25:a8:b0:3f:32:ad:
88:8b:85:4d:8c:b8:f2:b6:7c:19:7b:71:b0:6a:70:58:96:b4:
a9:38:11:ff:2f:63:f8:e1:fe:de:ad:00:9e:54:da:73:2f:5a:
1b:32:44:b4:42:d7:c2:79:e8:13:cc:08:da:1b:33:35:a0:5d:
3c:e6:ef:20:92:91:e1:fb:56:eb:eb:31:e6:c9:74:68:4c:90:
0e:e5:6a:18:82:72:df:65:4a:70:dd:9a:ac:d5:1d:e6:e4:82:
9c:7a:4f:d4:6c:5a:8d:97:5b:55:ab:5d:38:c9:d3:f8:a7:e3:
0d:91:39:87:a2:a9:7d:2f:86:47:17:bc:36:ee:74:e1:bb:65:
83:e2:bf:36:7d:bc:ea:d8:e3:0a:8a:a9:bd:36:5b:c6:ca:47:
e1:db:1b:46:37:34:67:77:e7:18:1f:9d:55:f5:69:7b:25:1b:
e7:b3:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:16 2025 by rpki-client