Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1c85474a-76fb-3f39-9ad3-595c76cecac8.roa
File: 1c85474a-76fb-3f39-9ad3-595c76cecac8.roa (raw, json)
Hash identifier: e64g4xv3j7lrqbEkz75nbf1LUbz4gNnFjWEMhQbiQDc=
Subject key identifier: AC:CC:7B:74:BB:7A:C8:04:64:1E:48:6B:21:DA:11:B6:E8:33:3E:A9
Certificate issuer: /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial: 010D0C9F4328583834E0530DDDFE569A776ECF00
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1c85474a-76fb-3f39-9ad3-595c76cecac8.roa
Signing time: Thu 14 May 2020 04:00:00 +0000
ROA not before: Thu 14 May 2020 04:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 7040
IP address blocks: 199.68.216.0/24 maxlen: 24
199.68.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:34:e0:53:0d:dd:fe:56:9a:77:6e:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
Validity
Not Before: May 14 04:00:00 2020 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=13cc8b26-ee01-43cf-b49d-d2d31bd1224d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:3c:63:6c:d9:8e:51:57:42:0d:c2:07:4b:
7b:f2:53:fe:8d:2d:92:19:3a:f6:7a:22:89:16:b5:
80:02:73:60:75:c7:49:06:bd:77:b0:62:c9:47:9a:
db:b9:e0:8d:cb:eb:03:53:94:6f:bb:3d:38:ba:06:
66:d2:c7:4c:4f:b1:0c:ab:47:63:b5:a1:fc:40:a8:
63:ac:4e:39:19:b6:4f:a0:98:d4:fb:59:9b:87:d2:
af:0d:17:83:27:ea:d7:35:04:15:e5:58:bb:22:c3:
9a:70:ae:b4:fa:73:8a:6c:e9:58:0f:f1:25:bc:23:
8c:aa:e6:5c:49:53:62:9e:54:1a:5f:7b:26:35:9f:
06:64:fb:75:38:42:97:bd:9d:4a:4d:b6:84:4b:03:
6c:32:ad:16:93:d9:c6:f1:00:cc:e8:05:27:4f:27:
93:d2:3d:4c:03:ef:83:54:cb:fd:4b:ff:7c:cb:de:
9a:4d:c1:40:c6:12:77:e0:b7:c7:3a:7f:a6:bd:e8:
65:6d:2a:c1:83:49:00:96:0b:66:2a:c0:2f:34:d4:
8f:55:d6:fb:98:9c:fa:df:dd:6f:6f:0b:41:2b:e6:
00:25:07:67:61:10:6d:ad:46:8d:8e:21:af:1b:bf:
1b:6d:97:c2:48:e5:19:7f:dc:05:a5:28:8b:83:ab:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:7B:74:BB:7A:C8:04:64:1E:48:6B:21:DA:11:B6:E8:33:3E:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1c85474a-76fb-3f39-9ad3-595c76cecac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl
X509v3 Authority Key Identifier:
keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.216.0/24
199.68.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:df:2c:e3:a8:cf:71:1a:32:7f:9a:81:b5:65:52:bb:5b:51:
2e:b8:8d:ff:c0:63:70:36:ec:89:89:a9:b6:82:d1:af:de:35:
b1:1e:52:24:e1:d7:32:50:8d:5f:e2:57:5b:3a:98:ad:b5:84:
3c:59:03:9c:5f:5a:19:1b:f2:bb:88:b4:c1:0f:bc:f7:ea:c6:
79:e5:6e:48:0e:45:3d:93:bb:9a:f5:63:56:25:0b:33:69:50:
a8:be:2b:2b:50:5b:d8:7d:08:5e:c3:47:f1:f0:f4:cd:8d:cb:
94:17:1e:45:c8:bb:53:a8:e6:58:b4:03:a8:a3:3c:8a:75:cc:
84:f4:1c:2c:16:d5:b0:0c:55:99:1b:f6:d0:92:fd:17:cb:b7:
7d:bc:9c:f5:bc:ec:4a:af:3b:75:96:bd:bf:7a:48:a0:ec:f6:
9e:26:33:fa:1a:dc:6c:de:a2:5c:00:ba:1f:17:07:b0:d4:a6:
a1:ba:b4:1d:9d:cd:05:d5:94:56:e6:e6:e9:a2:6f:5a:03:f4:
d4:a9:33:a6:69:e1:cd:dd:5e:fc:7a:0e:4e:7c:e2:e8:b2:51:
3d:6f:87:a2:12:4d:ef:3b:72:f7:2b:cc:e9:73:85:3c:ab:ed:
41:f4:79:1d:b8:43:0e:e0:e4:a3:9f:d4:63:00:11:97:be:86:
c5:85:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org