Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/d859b0be-52f1-3b32-90f5-35bcef59777d.roa
File: d859b0be-52f1-3b32-90f5-35bcef59777d.roa (raw, json)
Hash identifier: ZNfi7UmqZwQd66r20PriZ7J01prcsXPlY5u4im+a/L4=
Subject key identifier: 15:98:67:58:D5:48:79:B6:71:D7:3E:3E:82:56:7A:95:41:29:37:0F
Certificate issuer: /CN=1644c04f-894c-44d1-90ce-41d05dc9483e
Certificate serial: 010D0C9F4328583A0F6169A875B2D84E2709F4C0
Authority key identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/d859b0be-52f1-3b32-90f5-35bcef59777d.roa
Signing time: Wed 26 May 2021 04:00:00 +0000
ROA not before: Wed 26 May 2021 04:00:00 +0000
ROA not after: Wed 30 Aug 2023 04:00:00 +0000
asID: 25885
IP address blocks: 208.85.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:0f:61:69:a8:75:b2:d8:4e:27:09:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644c04f-894c-44d1-90ce-41d05dc9483e
Validity
Not Before: May 26 04:00:00 2021 GMT
Not After : Aug 30 04:00:00 2023 GMT
Subject: CN=1e51a824-c2dc-4238-9d8d-4298be9f5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:6b:20:6c:42:89:f5:42:13:5b:47:30:f9:
15:f3:a9:ae:3c:7c:da:ad:c4:86:f5:2f:26:95:b0:
aa:f4:e2:11:c6:61:a2:c0:c3:68:67:01:84:4d:c7:
69:7a:ce:ee:d2:d6:d4:77:90:cd:bf:57:e1:77:61:
78:9a:ec:7d:2a:cc:a4:ef:03:a8:fd:1e:0c:7b:4b:
5a:2b:7f:f2:01:5f:da:1c:b0:55:23:fd:d4:e4:25:
8b:cc:bd:e8:f8:b8:ef:20:b0:17:76:4b:cd:ba:0a:
95:c0:02:48:c6:38:eb:0a:f6:e6:41:32:3a:8b:90:
e4:17:74:0b:e7:1f:78:31:c3:10:bc:bc:24:2c:6d:
65:6c:21:59:eb:4c:6a:ef:fb:db:43:40:50:a2:33:
0c:83:f7:04:70:40:74:6b:d7:2e:eb:c8:c5:6f:b6:
b6:f7:85:eb:e0:22:13:da:08:d7:1c:0a:a0:d9:c3:
d8:79:a2:ac:5a:5b:fa:70:7e:ac:e2:7f:6b:4f:49:
c5:5c:da:62:af:91:91:f1:4d:a5:87:2c:70:c2:2d:
e3:df:46:79:70:a0:ea:57:2f:9a:45:8c:d4:8f:8c:
f6:c8:b0:d2:f7:1d:27:66:6e:48:57:3f:2d:bf:3f:
62:c5:75:c9:25:91:41:b0:b3:cd:9d:4b:5b:06:bf:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:67:58:D5:48:79:B6:71:D7:3E:3E:82:56:7A:95:41:29:37:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/d859b0be-52f1-3b32-90f5-35bcef59777d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.crl
X509v3 Authority Key Identifier:
keyid:5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:05:6e:6f:78:42:28:db:b1:e3:5e:48:b7:76:67:04:53:08:
de:3c:5f:d3:e4:6d:c8:bf:9f:4b:0a:40:20:b4:13:c9:ae:d7:
be:54:c1:9d:3b:bc:04:c1:78:6c:3f:b2:fd:e3:62:db:fd:73:
fc:23:f2:45:a0:70:86:1e:61:d8:86:45:4b:8b:82:41:e7:61:
06:03:dc:08:e4:e0:40:29:18:1a:54:5e:e4:ad:5b:08:35:88:
87:1e:ff:b7:61:08:82:56:6b:be:d9:41:24:4f:97:92:0b:4c:
ac:17:ff:e9:ea:53:31:66:10:a5:9d:46:36:f1:fd:28:01:15:
b4:34:4e:bd:6f:35:d7:c2:14:04:14:75:9d:c5:fb:47:df:16:
65:b7:ff:87:04:f3:99:e1:7c:29:1a:1f:ac:29:c8:67:17:a8:
3c:0b:03:8a:37:a6:a0:75:08:c8:58:40:28:69:67:a1:4b:d2:
4a:93:d1:4b:56:3f:6c:e7:6b:96:41:8e:e3:de:34:8b:e8:05:
81:f9:52:e5:b1:d8:89:9c:a7:21:7e:71:09:db:aa:d5:b4:23:
a9:4f:49:d7:02:00:21:b9:7a:6d:1f:b1:67:03:58:0d:c8:f2:
6b:a0:1a:2f:6d:08:cf:ba:c5:1d:5b:d5:af:68:60:3d:45:86:
85:f6:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:23 2024 by rpki-client on console-ams.rpki-client.org