Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/4b12e9c5-caeb-3825-ad66-83dbc2b3cc2b.roa
File: 4b12e9c5-caeb-3825-ad66-83dbc2b3cc2b.roa (raw, json)
Hash identifier: tLG6E/796sag8LHr9QQOTvB5XcPFif/l0pID4yksCGI=
Subject key identifier: 67:68:41:59:3D:42:DF:FC:CF:5F:DC:3B:9C:72:B6:50:4A:DA:65:14
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F4328583C099131D85FD64949441A4E00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/4b12e9c5-caeb-3825-ad66-83dbc2b3cc2b.roa
Signing time: Wed 24 Nov 2021 05:00:00 +0000
ROA not before: Wed 24 Nov 2021 05:00:00 +0000
ROA not after: Mon 26 Feb 2024 05:00:00 +0000
asID: 15169
IP address blocks: 207.126.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:09:91:31:d8:5f:d6:49:49:44:1a:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Nov 24 05:00:00 2021 GMT
Not After : Feb 26 05:00:00 2024 GMT
Subject: CN=fad2e4d3-f16e-4550-bb7c-225d17465cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:0c:a6:9c:08:fc:57:75:17:de:a3:38:78:
dd:df:2a:2a:ee:9c:12:6e:b9:6c:0d:99:63:d2:73:
f1:e5:35:f1:42:01:fb:89:b3:7e:b6:b2:14:c2:de:
77:09:ef:c9:0f:7c:5b:98:80:7d:f9:54:78:4e:81:
f1:56:3f:6b:af:ac:1a:23:5e:a2:ac:37:12:72:3a:
49:f9:62:ff:dd:67:e6:6c:42:6e:1c:9b:fc:85:4b:
0f:c5:75:a1:06:01:8e:a9:e3:7d:d9:6b:c3:a1:3d:
31:41:a4:2c:01:c5:a4:e0:c5:7b:f9:aa:fe:d2:1a:
53:f3:1d:69:a6:8e:33:d0:85:ed:06:f1:0b:04:46:
0d:e8:0b:16:f7:82:4b:a4:86:13:1c:ec:5a:35:6a:
ab:90:85:7d:6a:fd:23:9c:3b:28:ec:a9:04:5b:0f:
90:94:fa:65:10:95:bf:f7:37:bf:21:57:aa:bc:f0:
b2:f7:83:f4:00:e7:64:0d:4a:61:9d:ba:e6:74:20:
2c:e8:a5:d2:23:f7:6c:a5:43:f5:14:48:7e:8a:75:
99:20:62:33:2e:a3:3c:81:4f:1d:89:a9:0e:0f:da:
33:69:4d:1d:4f:88:5e:8d:67:dc:a7:ca:24:04:dc:
97:d3:97:ab:f7:9f:8f:0f:ad:fc:9f:d3:a7:37:91:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:41:59:3D:42:DF:FC:CF:5F:DC:3B:9C:72:B6:50:4A:DA:65:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/4b12e9c5-caeb-3825-ad66-83dbc2b3cc2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:09:86:3a:f9:f2:4f:f0:a4:a4:70:58:0d:d6:52:62:ee:8f:
d0:e2:da:f7:b2:65:fd:e7:67:4a:99:ee:ff:55:43:b2:97:24:
e9:95:c9:f3:f5:3d:8e:ad:57:5a:e5:4e:7f:fd:b2:8f:42:c2:
b9:b1:7e:19:c9:db:ad:b1:fa:4b:90:8c:02:98:cf:7e:e0:81:
74:8a:ac:9a:da:23:d1:3c:ab:c1:17:d3:e3:04:0d:e5:41:24:
eb:7c:3a:15:b8:78:de:d3:e9:d4:35:e7:8b:27:6e:1d:c7:c8:
f3:84:5c:e9:86:37:3d:10:23:ac:fc:4f:85:b3:05:e3:ba:4d:
91:69:9c:0f:4e:46:00:36:09:3c:10:9e:af:d0:fc:69:e9:ac:
6a:bd:5d:b1:79:8b:2f:95:2f:fa:b9:d5:46:37:5b:e6:1b:2b:
77:15:a7:f8:26:18:d1:cc:03:dc:7b:4f:c8:8a:ac:fc:d7:f7:
62:27:5c:35:18:72:23:cb:2e:86:12:3d:ba:c5:1f:bf:88:8f:
ba:2c:06:d3:23:45:f8:5a:16:9f:0e:61:0e:31:0a:27:8b:50:
cc:2f:d6:9d:c1:20:a7:a2:18:43:a1:c7:9c:3d:47:b6:6b:b9:
c6:4a:b2:f2:6d:85:31:3d:4d:de:cf:ee:4c:80:1f:33:1f:64:
da:50:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 05:45:18 2024 by rpki-client on console-fra.rpki-client.org