Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8ad6655e-d5ef-3f1e-a523-34c66f4e61ad.roa
File: 8ad6655e-d5ef-3f1e-a523-34c66f4e61ad.roa (raw, json)
Hash identifier: 4KkwIjjfRIUFQqDrKr8NXsc2Z+pFX5K4wjq5xYB91Y8=
Subject key identifier: D8:1F:4C:DC:CD:4C:FE:CC:76:B0:44:F0:A8:7B:AE:E7:FF:30:E1:7F
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7A0B255F08CA0172EB30580
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8ad6655e-d5ef-3f1e-a523-34c66f4e61ad.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 172.102.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:b2:55:f0:8c:a0:17:2e:b3:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1d0d55d4-8207-4671-9f4d-7ec9005d3298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:bd:b1:60:87:10:31:2b:e4:b7:29:2a:9d:
33:fb:80:e7:71:bf:d0:1c:37:e2:3f:d3:f6:e8:ad:
78:95:57:d3:1d:49:2f:cc:6e:25:91:4d:71:96:99:
51:0b:2e:72:71:79:3a:d4:60:12:7b:ad:8b:e3:8f:
19:5e:c0:fa:e9:31:ef:5d:b9:01:90:bf:d2:63:23:
21:3b:75:51:56:43:83:e2:74:36:10:d2:48:92:49:
c0:e2:71:10:f3:b6:bc:60:07:12:ce:46:37:26:75:
25:a8:58:c2:0c:2d:6d:27:38:7c:05:71:92:55:ce:
54:b4:53:0d:6b:6d:31:69:05:e4:81:9c:b6:a4:d1:
74:41:83:c0:c9:18:93:a9:49:08:02:b2:a1:2d:c9:
e4:d7:4b:69:ff:08:7a:77:0d:bd:7c:c0:a3:7a:99:
f3:a6:79:1d:12:3b:76:81:1e:4a:76:98:62:b6:64:
44:da:25:9f:2c:04:f6:32:9b:87:d5:c3:a4:30:bb:
6c:8c:df:11:3f:d5:eb:bf:5b:fe:1e:0d:93:66:06:
01:ce:b8:39:5e:57:f9:bc:8f:ae:7d:57:18:f5:c1:
cb:f3:9f:c0:df:5a:eb:19:94:48:24:ab:35:c7:bc:
14:28:27:43:52:12:13:c2:77:05:5a:b8:c7:9a:dc:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1F:4C:DC:CD:4C:FE:CC:76:B0:44:F0:A8:7B:AE:E7:FF:30:E1:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8ad6655e-d5ef-3f1e-a523-34c66f4e61ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:6d:36:27:ed:25:79:08:05:89:f3:9e:d7:1e:e1:e2:67:41:
d6:94:10:47:67:e1:4a:07:ef:73:1a:f6:50:ab:a0:17:67:e5:
09:71:b3:01:61:29:b9:02:53:c8:ad:d5:ed:c1:f4:e9:bd:81:
50:71:97:f2:e8:20:b8:65:85:c0:e9:fc:30:2b:ec:50:f5:7a:
1d:76:ac:bc:97:9e:32:57:39:5a:3d:91:10:2e:a7:4b:34:c1:
24:61:ab:db:07:27:5d:2d:25:ba:c7:93:3a:64:6e:f8:48:fb:
50:3c:fc:50:27:42:26:dd:1b:ef:bc:08:4c:97:1b:07:a4:bf:
fc:6b:b6:c7:29:49:89:38:5b:8d:25:a2:97:33:ae:57:19:19:
19:f7:02:72:99:4b:e1:2e:3e:95:da:e9:0b:99:13:ee:16:ce:
05:bc:ec:a8:2d:55:8a:12:20:12:cb:d0:a8:eb:7e:31:ed:cb:
88:d8:aa:08:05:7a:e6:09:ec:77:8c:c5:96:73:7a:da:99:81:
1c:07:28:db:79:01:f5:d1:e6:83:5e:3c:d5:62:c8:11:26:97:
c4:a8:60:14:2d:b4:12:f7:3c:2f:c4:52:30:0b:24:a0:8d:8c:
08:3b:14:8c:cc:49:1c:be:51:94:51:41:85:d4:00:bb:d8:72:
29:40:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org