Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8af2ab9f-44a6-31fb-a960-ae8bf1e10aaa.roa
File: 8af2ab9f-44a6-31fb-a960-ae8bf1e10aaa.roa (raw, json)
Hash identifier: 3GGfzwKg+sPdobnc2GLa2e5rIcm9HtiiDACHGkEvH7M=
Subject key identifier: 19:75:42:CB:42:8D:C6:C1:75:23:21:B6:DF:1C:9F:AE:90:D3:AD:B6
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7BA3FE48C1906696BA82080
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8af2ab9f-44a6-31fb-a960-ae8bf1e10aaa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 216.252.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:3f:e4:8c:19:06:69:6b:a8:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2d33501b-eb42-4a0d-a52d-bdf6f4887fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:d8:8a:5e:1d:c1:73:f0:11:52:c4:72:50:
1f:75:72:79:dc:a3:a9:3b:1e:21:6c:10:67:27:13:
2b:b9:ac:32:de:d3:91:0f:ba:e4:78:c1:19:ca:c1:
59:cd:74:2d:63:86:d2:c3:0f:61:4f:da:82:92:a1:
64:a8:e7:e7:c8:56:15:9f:14:76:25:49:58:d7:9a:
93:40:c6:e4:0c:02:18:27:32:28:fe:92:61:40:3e:
0d:78:ac:1c:12:a9:55:b2:0a:b6:9c:0a:03:91:16:
a1:ba:bf:30:37:1b:8e:c3:bd:01:83:0f:f8:49:2a:
04:2f:a7:ee:34:ab:55:24:5b:71:b7:06:57:ee:0e:
5d:33:e7:14:5c:6b:81:e9:d9:bc:81:6d:ca:d8:c4:
5f:20:83:79:27:43:72:8b:fb:48:c4:99:ce:57:99:
f0:90:80:f8:8f:30:c7:0d:f9:49:5d:d1:b2:66:49:
85:55:35:04:71:bf:43:9b:b7:fb:da:57:20:f6:0e:
07:19:ca:43:63:a0:7b:e2:c2:83:24:fb:20:8b:8c:
f3:85:2b:62:50:dc:98:a9:35:02:4e:92:3c:2d:e5:
3d:9d:45:b1:b5:88:75:ae:4a:50:1e:c6:f0:f4:5b:
a0:64:9b:f7:34:da:02:31:4f:17:d2:39:2a:5c:db:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:75:42:CB:42:8D:C6:C1:75:23:21:B6:DF:1C:9F:AE:90:D3:AD:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8af2ab9f-44a6-31fb-a960-ae8bf1e10aaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:05:f6:08:f9:27:83:38:34:ad:93:3e:79:a8:d6:a5:40:f7:
e2:a5:ff:58:73:d1:df:6f:ac:55:6d:b1:94:36:37:2c:63:fc:
a8:84:1e:22:8b:58:e4:01:55:d2:2e:ea:f3:23:76:f2:b7:da:
f3:f6:51:10:cc:1d:54:30:78:3d:75:e6:99:98:88:89:9b:f8:
cc:33:86:22:74:4f:8e:31:4b:7a:d1:c0:de:6c:ca:12:08:24:
8e:2f:1b:37:f6:91:87:49:fc:a8:3b:58:65:08:d5:8d:39:90:
18:c1:5e:3b:44:d1:dc:44:d7:2f:5a:ac:49:10:3f:c2:7c:a9:
27:d9:14:6e:78:8e:8c:6e:03:fa:63:bf:a3:19:75:c0:3f:d3:
b9:2d:cb:b5:c3:7f:09:3e:12:ec:50:39:96:3f:bb:44:bf:5c:
4b:cd:9a:31:bc:47:e6:56:60:81:c8:46:2a:b2:5b:00:11:f5:
3a:12:d3:83:a9:00:87:ab:66:2e:6c:c7:ac:fa:b2:05:35:de:
76:02:7f:f0:46:58:25:20:50:88:23:98:71:4b:11:0d:1a:52:
ab:28:cb:2c:9e:7f:5a:b8:0c:b6:f4:9f:5c:6d:1e:aa:c9:44:
fe:3c:34:bc:64:46:e0:c7:c1:bf:9d:a8:ed:08:56:0f:51:be:
94:dd:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org