Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a5552f7d-1851-3149-adde-5f2c50cbfa72.roa
File: a5552f7d-1851-3149-adde-5f2c50cbfa72.roa (raw, json)
Hash identifier: nJnJXZtuHVPkFIKL6UTX95dIzX9cFKy0hQ/P7PC6dOM=
Subject key identifier: 72:76:9B:31:BC:21:BE:46:9D:7C:9E:DE:5D:86:A7:EF:AB:FD:22:36
Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial: 010D0C9F43285838258ABC6CACD36A451B653000
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a5552f7d-1851-3149-adde-5f2c50cbfa72.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 22552
IP address blocks: 104.232.128.0/19 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:25:8a:bc:6c:ac:d3:6a:45:1b:65:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=b66df878-027c-489b-a6d0-3b7406593cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:a1:a8:9b:d4:b9:b0:19:eb:81:0b:d8:5a:
11:b4:06:39:85:97:b6:6b:e7:15:c9:10:7f:06:d3:
8c:51:8c:0c:00:cf:11:1c:50:3e:9c:c1:18:2b:3d:
d9:fb:59:e4:7e:72:6c:50:6d:1a:ed:4d:48:27:10:
68:89:93:67:fa:37:7f:d4:34:19:aa:ed:e2:d7:49:
ba:7a:7a:f5:d3:63:54:d1:e8:19:23:00:38:82:4d:
cc:4b:22:2e:d4:ee:4b:35:38:15:25:9f:53:ae:9b:
0e:d7:8f:a8:eb:c8:df:44:09:ff:11:0c:72:bb:31:
a2:95:2a:ad:5e:9a:ad:3a:27:78:f7:54:16:e8:95:
90:76:2b:54:20:a2:f7:85:25:09:74:4a:22:58:2f:
d6:3b:ce:09:29:d9:42:c6:dd:2d:7a:c3:3c:0b:14:
11:81:cf:b5:96:e9:c4:73:dc:21:da:a1:8d:33:35:
39:a4:56:28:bf:56:d9:f9:32:72:d4:ae:da:ac:70:
e7:c8:0d:80:b0:51:2c:a4:49:c4:b5:4c:09:81:c7:
66:bb:70:23:a0:0c:b4:85:de:13:71:48:49:eb:62:
70:e7:8f:ac:27:de:a4:ac:ff:28:4e:78:18:77:c7:
61:00:1c:26:7c:d0:1d:f1:32:bf:b2:10:ba:9b:f2:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:9B:31:BC:21:BE:46:9D:7C:9E:DE:5D:86:A7:EF:AB:FD:22:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a5552f7d-1851-3149-adde-5f2c50cbfa72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
X509v3 Authority Key Identifier:
keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:4f:04:14:fd:6f:22:56:ba:62:e8:5d:da:20:8d:0f:e0:12:
69:c2:2f:4a:5f:c7:5c:d8:67:ec:56:bd:e2:f9:4e:b6:e1:72:
82:c0:8c:c8:af:aa:6f:8e:53:c9:d2:41:a6:de:c6:a2:8b:9d:
4f:65:33:e4:13:dc:b0:f1:73:2b:51:77:4e:fc:cb:d3:dc:5b:
7f:5a:51:03:b9:5e:e0:12:d0:ae:88:60:d5:1a:d4:ca:5d:93:
73:eb:1c:20:41:37:97:46:62:d5:72:0e:38:bd:71:aa:4b:24:
9e:ea:e2:9a:e4:c3:7b:fe:9a:32:17:45:fb:db:7b:5e:dd:6f:
92:da:b2:24:32:b8:ea:bd:c0:6a:31:33:32:5a:1c:17:d6:33:
30:8e:12:37:22:b7:12:a8:20:2d:39:a5:26:05:4b:b5:06:4b:
42:c2:8a:cc:43:90:7b:30:d4:8f:80:4a:45:a7:0e:89:46:3c:
18:06:11:18:68:0f:bd:cd:a6:10:51:c1:af:e2:14:79:b7:e0:
19:59:6a:0b:ec:83:80:de:eb:ef:f0:66:c7:48:0d:20:0e:40:
a2:38:0e:e2:d2:88:10:c7:2f:e1:13:50:7c:89:69:29:c1:d7:
13:1c:48:42:d6:9c:32:8b:7e:15:09:a8:66:97:6e:bc:d4:cb:
ea:b5:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org