Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3c0344f-8875-336e-ac60-0717f1f9f52c.roa
File: a3c0344f-8875-336e-ac60-0717f1f9f52c.roa (raw, json)
Hash identifier: Wmbcop7dhIziXSL/HRd/cBY0ZmDJxblEi896ubZSHGY=
Subject key identifier: B4:D2:14:00:75:03:C8:F5:30:DF:B8:41:BD:43:E1:DA:B0:86:26:E7
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858451A1A5D67C559F73704B1AE00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3c0344f-8875-336e-ac60-0717f1f9f52c.roa
Signing time: Tue 05 Mar 2024 02:10:13 +0000
ROA not before: Tue 05 Mar 2024 02:10:13 +0000
ROA not after: Mon 03 Jun 2024 01:10:13 +0000
asID: 834
IP address blocks: 173.211.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1a:1a:5d:67:c5:59:f7:37:04:b1:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 5 02:10:13 2024 GMT
Not After : Jun 3 01:10:13 2024 GMT
Subject: CN=3178b4c0-fc96-4f0a-87ed-5705d6f5ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:a5:14:db:c2:9e:ac:51:4a:5f:3f:a7:e5:
b1:db:2e:01:b3:ca:38:42:3c:62:d3:e1:06:0b:1d:
13:d3:7f:3d:b3:eb:0b:d7:bf:ad:59:6c:ad:13:9e:
7a:a9:93:dd:00:57:bd:f0:0e:91:06:9b:ea:8f:6c:
6a:d7:16:b5:1f:f1:c0:61:f1:36:27:f9:c5:2c:8b:
26:0b:5f:08:4c:b8:f0:b0:f4:7c:a7:5c:99:49:52:
5f:8c:4e:08:b4:35:f9:07:7b:30:d7:49:37:01:d7:
f6:4e:33:ee:21:54:1f:e6:03:10:9d:59:81:b7:99:
ce:a5:55:be:4f:7c:df:7a:43:e7:24:43:3d:c8:12:
a6:b2:72:3a:31:ac:80:36:22:cc:3e:50:f4:61:be:
5c:5d:ca:f8:cd:7a:a8:e8:43:27:f1:e9:20:eb:ca:
62:fa:bb:5d:d3:e4:dc:19:8b:95:39:82:d4:ac:7b:
a0:aa:44:3e:2f:ea:a6:9c:5b:5c:19:59:1f:56:c1:
c9:f8:f5:65:f8:df:9f:bd:aa:2f:f1:34:e9:43:81:
d8:9b:67:ea:54:dc:f8:e1:90:11:f7:16:63:27:80:
99:f3:f7:27:b4:1d:81:db:34:29:7a:11:34:0e:df:
1a:de:9e:6e:06:48:60:54:15:9c:cb:89:ee:98:41:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:14:00:75:03:C8:F5:30:DF:B8:41:BD:43:E1:DA:B0:86:26:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3c0344f-8875-336e-ac60-0717f1f9f52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:7e:d1:60:5b:a4:93:93:5c:6b:01:3b:d5:b5:56:52:78:a9:
53:34:26:97:19:c1:40:e3:06:e8:14:1a:fb:6f:23:4e:1b:77:
65:90:a0:bf:89:66:30:c0:e5:7b:51:bd:78:98:05:93:3d:41:
d2:21:7f:34:e8:87:9a:81:fb:4c:64:31:bb:65:8a:c2:75:0e:
73:85:98:1a:2d:e0:1d:2f:b6:17:51:dd:c1:95:a6:7b:1c:45:
21:54:0e:48:7d:8e:6a:b1:2d:5d:10:e8:90:4f:15:4a:fa:8a:
39:0b:08:d7:29:b8:72:4b:cc:a9:8b:1c:f9:26:89:f0:52:44:
74:c0:f8:c1:c8:67:77:6a:20:a6:62:00:b2:57:74:3b:26:82:
38:89:ce:c3:7b:8a:e4:c1:a5:65:33:ea:82:19:15:f7:94:41:
01:c5:ad:8e:44:44:2e:52:34:2a:21:a9:f6:17:d7:4c:ce:e2:
c7:d0:90:92:b6:81:99:55:40:3b:60:54:17:c1:00:6d:4c:2b:
2e:59:00:6e:ac:cb:fb:76:35:d0:59:fd:54:a7:5f:f6:56:00:
d3:10:b7:ac:66:95:25:3a:69:d5:aa:de:53:bc:dc:4e:e9:21:
06:12:13:85:fc:3a:7b:32:97:67:aa:21:d1:ce:59:04:e1:90:
00:99:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:19 2024 by rpki-client on console-ams.rpki-client.org