Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b8e70e8d-a54e-3278-b01e-53bf10b41e57.roa
File: b8e70e8d-a54e-3278-b01e-53bf10b41e57.roa (raw, json)
Hash identifier: XL7O3bM+gVwf8uJ9EPFBTjaLOaCgLSXNWxZ5LR93iGs=
Subject key identifier: C7:98:21:1F:E4:8E:53:E0:F4:F6:D5:EC:C4:05:57:E8:6F:A7:3D:38
Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial: 010D0C9F432858442424F87E9AA6EB25566B3800
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b8e70e8d-a54e-3278-b01e-53bf10b41e57.roa
Signing time: Thu 07 Dec 2023 23:42:44 +0000
ROA not before: Thu 07 Dec 2023 23:42:44 +0000
ROA not after: Wed 06 Mar 2024 23:42:44 +0000
asID: 14618
IP address blocks: 170.200.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:24:f8:7e:9a:a6:eb:25:56:6b:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Validity
Not Before: Dec 7 23:42:44 2023 GMT
Not After : Mar 6 23:42:44 2024 GMT
Subject: CN=456dc0f9-5118-4f0e-9ed1-ae7de7f2bf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:d1:36:5e:f1:d3:8c:ca:43:59:e2:9f:34:
77:1a:0e:d6:93:42:a7:1e:dd:07:05:73:eb:f8:44:
1b:b5:bd:e3:25:78:fe:03:c1:d2:66:78:f0:c9:c1:
91:1b:bb:7d:d7:b4:96:a6:93:46:e6:ce:75:9d:67:
17:01:e9:95:d2:2d:48:22:d1:54:9f:06:3b:41:66:
c6:6e:79:90:c7:41:b9:b3:64:6d:07:0c:5a:ea:6b:
3e:16:8d:c1:b2:56:c5:9c:fc:e4:ed:cf:1f:b4:66:
ac:46:0c:fd:f8:d1:23:0f:71:4b:b8:47:b0:dc:36:
7b:5e:d5:d4:7d:eb:11:05:48:c7:59:25:24:5e:c8:
70:0e:ee:30:5f:f7:83:30:47:aa:ad:1e:85:2d:72:
9c:55:f5:e1:d8:40:2b:9e:f0:4c:c3:54:3d:f8:0c:
b2:91:69:a6:7b:6f:6c:0d:93:44:f8:d7:52:68:35:
a6:e6:c1:56:46:f1:41:17:a7:29:04:0d:12:05:93:
de:77:f8:27:57:24:96:cc:be:f8:0c:fa:1a:bc:5e:
92:5a:69:83:14:08:f8:1a:54:cc:1b:a1:a2:ab:ff:
8a:a5:71:cf:2c:8c:49:fd:7d:07:62:e2:8c:bb:79:
29:be:94:5f:7e:97:27:98:55:bd:22:35:54:db:c4:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:21:1F:E4:8E:53:E0:F4:F6:D5:EC:C4:05:57:E8:6F:A7:3D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b8e70e8d-a54e-3278-b01e-53bf10b41e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
X509v3 Authority Key Identifier:
keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
sbgp-ipAddrBlock: critical
IPv4:
170.200.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b7:6a:58:21:49:6c:b0:77:ea:42:e5:bc:ae:c9:e0:a0:09:
90:02:92:6b:5e:47:ed:55:92:43:ab:05:0b:08:f1:23:89:23:
23:05:bf:8b:92:89:52:5f:4e:6e:02:53:5e:2a:0d:cb:ab:42:
34:5e:fa:ed:d6:64:e2:5a:d9:4d:f4:47:2d:c5:71:e9:9b:0c:
2d:9d:07:61:c3:1d:27:90:3f:28:dd:64:51:24:b8:b1:10:26:
d4:bc:9a:31:88:39:a5:10:c5:4e:47:3a:52:59:22:75:30:b4:
f0:4e:1f:9f:07:32:19:dc:17:67:d5:7a:27:0c:5a:ba:98:4f:
62:53:8c:d6:43:93:15:e8:9a:ab:5b:e2:89:ac:26:bf:ee:eb:
70:e3:6b:ae:a7:09:e1:67:c8:94:0e:d2:be:18:f3:c2:b4:b5:
e5:17:d5:48:52:e9:15:62:18:07:80:a5:1b:07:44:94:61:cf:
1f:f8:14:bf:8e:1e:43:15:8e:89:f1:9c:d5:d3:c8:d3:dd:49:
bc:46:56:45:b9:0d:8d:c0:56:af:e6:00:d3:e4:be:ad:53:1a:
85:f5:43:9f:b8:50:a5:89:8a:c9:fb:6b:c7:02:32:7e:9f:e7:
93:70:7b:ef:5d:79:72:88:0c:a7:3a:cc:fe:70:65:f9:40:dc:
05:ee:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org