Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf1afbf5-6c95-3894-9f40-a45724914455.roa
File: bf1afbf5-6c95-3894-9f40-a45724914455.roa (raw, json)
Hash identifier: GII1SU1qO0goF3+Li8et5Ov9Hk0TmZAv1xbS4eFbBIg=
Subject key identifier: 7F:D6:27:3F:1F:E1:D5:14:38:42:2D:6E:66:42:5F:6D:3D:38:37:D6
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285844BE6343AA7BAE10E596557080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf1afbf5-6c95-3894-9f40-a45724914455.roa
Signing time: Thu 01 Feb 2024 05:42:44 +0000
ROA not before: Thu 01 Feb 2024 05:42:44 +0000
ROA not after: Wed 01 May 2024 04:42:44 +0000
asID: 53356
IP address blocks: 173.211.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:be:63:43:aa:7b:ae:10:e5:96:55:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 1 05:42:44 2024 GMT
Not After : May 1 04:42:44 2024 GMT
Subject: CN=7bae5e13-7e70-4898-a33d-eca525c74ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:10:ca:76:cb:e1:d1:09:3a:b7:2e:a3:99:
9c:be:f0:fe:7e:5e:da:ca:1b:ed:fb:96:29:de:5e:
73:f1:9e:91:2b:7b:79:02:7c:fc:28:66:cc:75:ee:
85:d0:b7:7b:38:58:ff:06:10:d0:91:87:6d:82:18:
4b:a4:ff:dc:b6:2e:b6:b5:bb:17:b9:46:1c:75:95:
7b:07:61:42:9c:35:c1:c8:7a:87:de:ad:d9:09:d8:
eb:52:08:de:69:e9:bc:ee:73:91:44:1b:4d:77:dd:
0b:5b:26:c6:62:cb:09:d6:9f:3d:73:40:cc:55:8b:
0c:1b:c6:89:86:20:2f:e0:93:2d:b2:1c:33:a9:af:
07:4b:dc:b3:e7:7e:72:c1:4e:04:5d:1a:af:6f:b1:
55:e2:d2:17:c2:fd:6d:c8:82:fd:22:ef:d7:b8:bd:
a7:cb:bc:e8:26:91:ab:26:2d:5d:cf:4c:1c:14:86:
fc:36:41:ba:e6:48:47:ee:68:76:03:7b:89:e2:22:
cb:b3:b1:36:d1:44:d8:10:03:43:26:02:30:77:0f:
47:58:dc:04:f4:b2:ae:7d:3f:59:98:68:85:a3:74:
6b:ec:19:c9:fc:e6:65:39:85:a9:f6:fa:e1:36:2f:
bb:24:b7:7c:2d:7f:67:80:64:1d:74:98:2c:b1:c0:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:27:3F:1F:E1:D5:14:38:42:2D:6E:66:42:5F:6D:3D:38:37:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf1afbf5-6c95-3894-9f40-a45724914455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:25:8c:5e:41:5c:4f:13:f7:bb:ac:11:ab:15:54:45:91:74:
76:9b:19:fe:13:8a:02:48:59:32:e7:ab:13:7b:ad:05:33:1c:
0a:93:df:cb:97:86:44:ce:40:36:de:74:a6:35:21:73:32:d4:
4b:9c:99:7f:a3:d4:b4:14:34:5a:cc:64:fa:9a:19:f1:62:4f:
f5:91:e3:1e:a3:06:8c:4f:52:27:77:90:92:e8:48:ec:32:63:
fc:2f:bc:cf:1d:19:eb:3c:51:87:dd:59:55:37:f0:f6:2d:3e:
fc:26:07:14:a7:61:4a:0e:f8:dc:95:fb:ce:25:d5:4d:37:e6:
08:e0:74:82:ad:1d:0e:6c:8a:99:e4:26:e1:13:8b:69:85:4d:
40:dd:3c:1e:9b:a4:9e:05:ee:97:26:98:0c:1a:79:7f:8e:86:
d1:c7:ba:5e:e9:e7:ef:45:e1:e2:03:04:1e:cc:0f:9c:85:49:
ad:37:d0:bf:c9:9c:7d:9b:6e:95:4f:0a:f4:20:54:ed:ef:a5:
af:7c:83:14:17:b5:c4:49:7a:51:9c:69:ef:88:79:39:32:95:
7e:51:83:4f:7b:be:d7:c0:3d:b8:94:ef:3d:dc:bd:97:2c:7a:
77:e1:73:8e:e4:de:cb:16:6c:18:a2:12:a1:de:ee:a1:4e:46:
41:ae:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:19 2024 by rpki-client on console-ams.rpki-client.org