Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/f233a255-5421-306d-a639-1e36b243fe07.roa
File: f233a255-5421-306d-a639-1e36b243fe07.roa (raw, json)
Hash identifier: x0nNKFHaody+Djoz1dMpEAt5G69alMQO2KDZCDQsimo=
Subject key identifier: E7:D4:1D:35:B0:25:A5:36:76:BA:FB:A3:58:68:9E:69:59:30:0B:0F
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F43285843EB2E463B015E08412BCBA600
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/f233a255-5421-306d-a639-1e36b243fe07.roa
Signing time: Fri 17 Nov 2023 14:00:20 +0000
ROA not before: Fri 17 Nov 2023 14:00:20 +0000
ROA not after: Thu 15 Feb 2024 14:00:20 +0000
asID: 40676
IP address blocks: 192.101.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:eb:2e:46:3b:01:5e:08:41:2b:cb:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Nov 17 14:00:20 2023 GMT
Not After : Feb 15 14:00:20 2024 GMT
Subject: CN=8e437df1-0726-4886-bbcd-76b3f5e5ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:74:7d:7b:63:7a:19:30:1e:75:fc:05:f8:
6f:63:8d:9d:eb:a9:e4:2b:f6:ef:ca:75:b1:97:97:
4d:ce:fe:3a:03:2d:c8:54:59:3c:bb:3d:88:58:6b:
49:58:d0:db:71:65:5d:3d:7f:5f:e8:5e:f8:d0:e5:
80:3e:fb:b4:60:99:f2:fd:48:e9:d3:9f:98:2c:71:
f3:8a:3c:1d:51:cd:82:ba:05:65:4f:7a:dc:07:b4:
23:01:c2:72:e1:75:07:3c:2b:b2:dd:a1:26:68:0e:
39:1e:c6:cb:fe:7f:cc:f6:f3:21:57:4b:a7:0d:34:
e9:f9:48:6b:9b:d9:12:f2:3a:83:0f:70:23:d2:1d:
f7:3a:fa:c6:02:f1:2e:64:c5:ef:be:ce:f2:41:fc:
ea:59:5a:89:5e:5a:83:a6:0c:b8:1e:43:e6:3c:69:
34:86:9e:bc:d9:e5:fc:78:60:a5:b7:3f:fd:0e:fd:
0a:be:71:d4:12:94:d4:d5:b7:14:c9:b0:03:cb:f0:
3b:1f:7c:b1:c3:62:e5:11:31:5e:0a:ff:d1:98:de:
77:9d:bc:88:c8:c2:72:4a:36:ab:1f:4f:8b:96:83:
50:53:d8:14:76:ed:20:57:93:ad:84:32:2c:03:d8:
4e:9f:38:de:9b:90:24:b4:7f:ad:c4:b0:1f:ea:6a:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:1D:35:B0:25:A5:36:76:BA:FB:A3:58:68:9E:69:59:30:0B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/f233a255-5421-306d-a639-1e36b243fe07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a2:fc:37:59:b8:b0:58:70:1e:18:54:6e:42:a6:6f:d0:4f:
84:62:10:9f:57:cc:0b:44:b3:ff:97:43:a9:47:68:85:9e:f4:
65:52:97:7b:1a:ed:da:0b:8c:f0:9d:b8:c8:e6:cb:c1:72:d9:
c6:01:1a:7d:4e:6a:99:5e:bf:71:3e:14:41:30:14:55:6a:70:
91:0c:4f:10:9a:2c:c4:dd:cf:da:1c:ca:1d:52:a7:67:7b:ea:
c8:5d:47:23:15:cc:7d:15:ad:93:4f:60:2b:23:3b:58:5e:52:
b1:a5:da:65:0e:fa:be:dd:a3:8b:d6:9c:41:cf:d9:96:80:fd:
c7:af:70:47:64:23:d7:1d:bb:cb:55:ac:d3:d0:fd:e9:a9:87:
ec:26:20:3a:f1:2a:82:5e:b0:71:8f:36:88:d8:1b:bf:fb:51:
41:fc:2a:ed:61:e1:ce:c2:ef:d8:69:72:c8:0c:81:d3:53:9d:
4c:9d:40:22:4b:a8:7f:97:69:7e:84:f1:4b:4f:af:2e:8e:e6:
e6:4c:55:c6:1b:eb:ce:41:3b:06:ec:bb:df:8b:a2:56:4b:92:
bf:67:88:68:fe:a1:ec:40:07:8a:71:a6:7f:f7:ed:e2:d5:a4:
ce:03:1d:db:9e:95:8d:9d:68:67:5d:cf:37:35:d8:e7:10:db:
b4:71:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:11 2024 by rpki-client on console-ams.rpki-client.org