Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/b8a1b2b3-9c6d-3b2b-8e98-20fd6a04b81f.roa
File: b8a1b2b3-9c6d-3b2b-8e98-20fd6a04b81f.roa (raw, json)
Hash identifier: snV0nd5u5uq7MOk+R4fDTLdQGM6Zm6BJQjnk1gH3vZA=
Subject key identifier: 71:B9:B3:1B:BB:68:8A:70:05:2F:3E:56:EC:82:64:6E:BC:C4:B6:37
Certificate issuer: /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial: 010D0C9F4328576D51CC73C042CFC17407AEE095
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/b8a1b2b3-9c6d-3b2b-8e98-20fd6a04b81f.roa
Signing time: Fri 19 Jun 2020 04:00:00 +0000
ROA not before: Fri 19 Jun 2020 04:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 396982
IP address blocks: 144.49.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:07:ae:e0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Validity
Not Before: Jun 19 04:00:00 2020 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=1fc09ebb-fddf-416a-985a-f4b35cbc17b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:20:72:30:3f:31:22:95:91:b0:3b:b5:06:
82:b3:a8:b8:f4:3b:fa:26:59:72:75:29:07:0d:f4:
b7:62:aa:3b:09:d5:52:38:7c:1e:33:ea:68:f3:14:
c2:a4:26:15:29:c7:f7:34:82:b5:26:a1:b3:f6:19:
99:a2:a2:6c:90:ee:f3:3a:65:9d:a7:60:5b:31:b1:
04:8c:7a:65:ae:20:95:5d:b0:f9:f3:77:7c:99:d2:
2c:30:6b:55:78:54:dd:6d:47:42:43:23:2d:be:c7:
c6:f5:44:18:10:09:a0:26:f5:62:75:37:08:8d:26:
9a:65:54:26:cb:f8:90:55:02:2c:7b:c4:66:d8:ec:
02:be:76:44:f2:5f:88:0d:c6:8f:72:3f:ca:d3:c0:
91:04:ed:c5:7d:82:24:ef:cc:33:b2:89:96:cf:e9:
99:51:c3:ec:cd:0b:15:c2:bf:ce:a6:a8:1a:27:46:
c8:a4:cb:1d:36:1a:11:10:ad:77:33:4b:1e:84:9d:
68:d8:d1:0f:69:4b:f9:9c:3e:4f:a8:8e:f5:65:6e:
98:3f:89:e1:70:59:5d:b6:05:7e:1c:2a:d4:11:c1:
32:26:09:3e:dd:f0:bf:c8:6c:74:0e:f1:3f:27:73:
11:5f:6d:df:65:65:c6:c8:bf:65:c5:69:8d:08:1b:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:B3:1B:BB:68:8A:70:05:2F:3E:56:EC:82:64:6E:BC:C4:B6:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/b8a1b2b3-9c6d-3b2b-8e98-20fd6a04b81f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl
X509v3 Authority Key Identifier:
keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
sbgp-ipAddrBlock: critical
IPv4:
144.49.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8b:ad:4b:85:b2:da:a2:26:06:f4:56:d8:4c:90:bb:4e:a7:
a7:e9:61:ae:c4:46:d0:77:8a:25:b6:32:86:c6:aa:80:50:2c:
5a:0b:e4:0e:e3:1e:9c:07:b3:5d:1c:20:45:96:bc:19:0c:f4:
5f:b3:ca:da:75:b0:ce:26:80:04:88:5f:43:9c:e2:6c:e6:ca:
39:12:67:6b:59:66:f9:a3:80:ab:1d:16:58:7c:59:83:47:83:
38:81:d8:2f:d5:20:fb:6c:55:55:1d:a2:2e:63:39:79:d7:7b:
bf:ab:dd:e7:a1:41:8e:2c:9e:e7:0c:6e:91:c0:00:d3:68:86:
21:59:34:22:36:67:78:1c:61:d5:d2:43:be:e4:71:25:2a:b9:
d0:9c:aa:44:73:81:c4:00:ce:9a:20:59:ca:b7:be:38:8b:eb:
be:92:8c:dd:f1:c5:67:c3:2a:7b:fe:5b:a7:62:de:e2:c7:59:
94:10:bf:54:07:5a:79:da:d8:df:fc:46:65:c0:17:b0:e1:1b:
e4:5a:70:d7:44:f5:e9:55:8f:97:e0:5c:2e:00:90:a3:29:7a:
96:b4:4b:87:4d:af:a6:30:74:d5:ad:2c:9f:dc:3f:f5:1e:ad:
68:05:de:13:c5:65:23:ee:ec:80:d6:50:41:1f:5c:76:9c:65:
cd:1a:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org