Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/793039a9-7af7-3c17-b952-62eebda84fc3.roa
File: 793039a9-7af7-3c17-b952-62eebda84fc3.roa (raw, json)
Hash identifier: +dM0dzPP7ZgRkxumyUHEV9QmrV2qIxR7fzPqlJxHZcQ=
Subject key identifier: 7A:C3:D4:85:DE:FA:3C:8C:30:42:8A:16:78:8B:4B:18:8C:0F:5F:68
Certificate issuer: /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial: 010D0C9F4328583FD7D9AD59104FA7A3ED739780
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/793039a9-7af7-3c17-b952-62eebda84fc3.roa
Signing time: Tue 08 Nov 2022 16:24:57 +0000
ROA not before: Tue 08 Nov 2022 16:24:57 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 7118
IP address blocks: 216.252.144.0/24 maxlen: 24
216.252.145.0/24 maxlen: 24
216.252.146.0/24 maxlen: 24
216.252.147.0/24 maxlen: 24
216.252.148.0/24 maxlen: 24
216.252.149.0/24 maxlen: 24
216.252.150.0/24 maxlen: 24
216.252.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d7:d9:ad:59:10:4f:a7:a3:ed:73:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Validity
Not Before: Nov 8 16:24:57 2022 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=da025b35-24a2-4c06-9f17-82290fb475e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:74:0a:11:f5:26:49:6b:a4:cf:2c:98:ef:
48:b6:39:b8:ea:11:3d:f9:fc:08:91:42:c2:ae:7b:
24:08:b3:5d:1e:d7:bb:43:cd:5d:f4:bd:07:85:78:
dd:2b:f8:d7:b0:1b:f7:1c:94:21:70:36:35:c1:3c:
6a:67:98:67:58:65:0d:5c:43:be:ed:c4:e3:1f:c4:
73:24:d2:e4:fa:93:aa:ad:fd:dd:4c:9e:44:4a:b8:
79:22:b1:3b:df:65:58:f4:e4:76:fe:66:50:1e:16:
33:97:8d:86:25:9f:54:a4:2a:c8:55:0d:e7:e7:94:
bb:a3:41:9c:4a:4c:0f:69:d0:62:bd:ca:8c:94:b4:
e8:5e:28:4d:cc:ad:38:44:fc:08:5f:8a:8d:35:44:
bb:ed:15:62:ef:71:bc:41:fa:be:41:0d:d7:26:c9:
95:6d:7d:ab:8c:67:c4:2a:9b:01:cf:6d:3e:cb:86:
5c:1b:19:74:fa:36:b7:e6:c9:f9:7e:c2:86:50:46:
0e:48:0b:e1:d0:93:af:59:c8:c3:97:de:05:ae:b2:
68:7b:12:cc:60:84:9b:62:92:cb:ad:61:31:f8:bd:
43:a8:a1:c1:05:0f:f1:a1:1a:86:9e:c4:77:21:ad:
73:05:f7:15:12:97:5f:ee:22:08:7f:30:c3:3e:78:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:D4:85:DE:FA:3C:8C:30:42:8A:16:78:8B:4B:18:8C:0F:5F:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/793039a9-7af7-3c17-b952-62eebda84fc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
X509v3 Authority Key Identifier:
keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:1d:ba:ff:7e:68:34:da:b6:35:ed:58:19:50:41:d9:a3:28:
14:24:43:82:d2:bd:b4:17:8e:c8:c8:e5:2f:8e:1f:ff:88:b0:
12:a9:ba:e6:8b:48:3a:44:cf:27:30:ac:62:bc:5f:c6:c2:fd:
38:42:70:9e:08:f6:20:32:77:7f:6e:ca:4e:51:bd:be:ae:17:
9f:ed:25:b9:c9:b2:ec:9e:5e:5e:f1:fa:52:f5:69:b1:08:3e:
00:be:72:33:27:a9:53:a2:03:1d:39:14:21:1b:36:4f:ab:81:
f5:9c:99:fd:e6:b8:01:4c:9e:6c:5d:ed:75:8a:9a:ab:27:ff:
f1:4f:ca:c3:17:91:31:8e:2a:68:42:9d:01:84:83:3b:e6:9c:
7d:c1:79:80:fc:8f:d5:29:fa:0f:1d:ea:3a:96:f2:36:48:f3:
c4:7d:6a:96:8b:8f:ab:fe:85:62:66:e7:c0:81:4d:f3:59:5d:
68:67:a5:1f:62:29:94:cd:3b:13:a8:5f:25:0b:35:24:0e:05:
32:cb:c9:c1:75:33:18:21:20:ac:f8:b6:c4:be:6c:df:60:10:
a8:4a:87:f5:f5:e7:4c:ee:90:33:27:77:50:bd:96:f6:e1:7b:
4a:4a:e2:33:19:61:99:7b:e7:44:8c:3e:b4:ad:a7:61:e5:75:
59:68:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:22 2023 by rpki-client on console-fra.rpki-client.org