Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33/25a19891-8b61-3810-aa05-b5ae7c8a0719.roa
File: 25a19891-8b61-3810-aa05-b5ae7c8a0719.roa (raw, json)
Hash identifier: tFYwg3al4INMIR5BM182v9+V7TkRDD5M8QRFfyjmB7M=
Subject key identifier: 89:77:31:03:3D:3F:69:4D:CE:6A:8C:3E:FF:CF:F9:C9:BA:8F:C8:27
Certificate issuer: /CN=0832bab4-c829-4994-aabf-5d785006db33
Certificate serial: 010D0C9F432858430A54731DD908EAA017CADC00
Authority key identifier: 9C:00:4B:E0:69:28:68:3B:46:C4:B9:F1:6F:BB:70:3A:53:9C:1B:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33/25a19891-8b61-3810-aa05-b5ae7c8a0719.roa
Signing time: Tue 29 Aug 2023 01:00:24 +0000
ROA not before: Tue 29 Aug 2023 01:00:24 +0000
ROA not after: Mon 27 Nov 2023 02:00:24 +0000
asID: 6939
IP address blocks: 155.254.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:54:73:1d:d9:08:ea:a0:17:ca:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0832bab4-c829-4994-aabf-5d785006db33
Validity
Not Before: Aug 29 01:00:24 2023 GMT
Not After : Nov 27 02:00:24 2023 GMT
Subject: CN=78f936e2-e7a4-4d66-814b-85811c0c192b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:f5:77:66:2f:fc:48:65:12:9d:e0:ce:64:
1b:bb:01:20:3c:98:99:b9:a0:80:17:7d:a4:10:94:
fa:7c:ea:ab:dd:53:0b:9b:10:88:c0:a1:2d:c5:61:
59:7a:4e:d3:d3:f0:d8:aa:84:98:b9:b7:ac:87:a4:
c5:2a:ef:06:13:0d:3e:be:90:56:f1:dc:1a:b9:ab:
8d:94:c7:45:3e:b0:3d:18:b7:40:df:32:34:93:dc:
00:18:ae:87:60:0d:f1:18:2a:6c:d8:9c:08:a6:07:
e9:cb:31:64:37:e7:33:cb:30:f7:49:59:89:92:a9:
08:16:fa:9d:5e:af:86:5f:e7:a7:57:e0:cb:60:45:
7c:e1:f0:cc:cd:30:11:91:ea:21:28:8e:31:8b:32:
6d:7c:78:a1:3e:77:99:81:92:79:34:df:b9:33:14:
49:ff:34:d8:1b:2e:9a:e0:f2:5d:a3:dc:fb:fa:4f:
8d:14:10:0d:a6:d0:e8:40:37:7f:8e:22:8a:ab:cd:
0c:d6:d0:3f:09:47:38:c6:2b:c7:ef:d7:ac:54:47:
97:ff:e4:ec:08:11:39:53:fc:f9:5d:3f:f8:44:9b:
55:9e:ea:0d:9e:91:1c:0a:8c:21:c2:d4:c9:41:f9:
1e:52:db:1f:50:3e:0b:81:98:de:4d:07:9b:4a:40:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:31:03:3D:3F:69:4D:CE:6A:8C:3E:FF:CF:F9:C9:BA:8F:C8:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33/25a19891-8b61-3810-aa05-b5ae7c8a0719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33/0832bab4-c829-4994-aabf-5d785006db33.crl
X509v3 Authority Key Identifier:
keyid:9C:00:4B:E0:69:28:68:3B:46:C4:B9:F1:6F:BB:70:3A:53:9C:1B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0832bab4-c829-4994-aabf-5d785006db33.cer
sbgp-ipAddrBlock: critical
IPv4:
155.254.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a5:f2:34:45:29:72:77:13:42:8a:66:30:4d:87:48:e6:9d:
14:4e:86:72:fc:e1:26:63:a2:98:dd:90:8d:a3:32:5b:d0:99:
54:ea:fc:7f:9f:c8:d0:a1:cd:90:54:7f:57:8d:49:4a:5c:ed:
10:fe:16:72:9a:23:25:30:e3:28:fa:49:28:21:d9:92:a3:7b:
70:cc:89:88:04:10:33:a9:8f:ab:53:c5:c4:f0:f7:ec:43:1c:
86:44:14:b9:4b:6e:dd:56:b7:1c:fa:93:1f:a5:1d:73:62:a1:
10:38:cc:90:bf:85:f7:86:0c:b6:a9:1d:7c:89:a8:62:e2:72:
98:70:0b:1c:c7:2b:fc:36:27:ae:d3:7d:3c:49:be:68:b4:a4:
93:44:19:36:97:45:c8:55:28:63:ed:b1:5a:ed:06:3a:82:cd:
82:97:ef:a3:13:e0:2f:4d:1c:68:58:f9:01:4f:8e:3d:b9:c8:
8e:7a:4d:ea:0f:3a:3c:33:bb:09:7c:f7:ec:be:6d:28:03:c9:
82:7f:b6:1c:67:a4:3b:bc:34:00:db:2f:1d:62:f5:dd:d1:5d:
50:eb:90:a1:73:02:a2:6c:45:e8:d8:0d:85:40:d8:27:f0:c9:
99:1d:6f:69:3d:a3:18:9d:39:da:04:4e:be:7f:18:4c:bf:e9:
75:4f:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:22 2024 by rpki-client on console-ams.rpki-client.org