Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d4d7f71a-a4af-33bf-86eb-53bd9943159f.roa
File: d4d7f71a-a4af-33bf-86eb-53bd9943159f.roa (raw, json)
Hash identifier: Jzr27lLtxaVLZNnZy8RDgK6lKvne+yhlBzW6rRU3oUU=
Subject key identifier: 1A:B2:AD:9D:69:90:92:8A:B9:DC:F2:8B:5B:77:65:7D:EA:89:C0:C0
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858451BAEEFF82647E8AA7424F400
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d4d7f71a-a4af-33bf-86eb-53bd9943159f.roa
Signing time: Tue 05 Mar 2024 15:45:23 +0000
ROA not before: Tue 05 Mar 2024 15:45:23 +0000
ROA not after: Mon 03 Jun 2024 14:45:23 +0000
asID: 56555
IP address blocks: 199.119.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1b:ae:ef:f8:26:47:e8:aa:74:24:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Mar 5 15:45:23 2024 GMT
Not After : Jun 3 14:45:23 2024 GMT
Subject: CN=7218275d-21d7-4e4c-afa9-1f5352728100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:66:f2:61:0b:5d:63:df:aa:a0:84:cd:d3:
2e:68:6d:ea:c0:f0:62:c5:e9:36:94:fe:96:53:02:
c8:9b:50:54:df:ba:fb:b3:12:c5:d6:97:60:ab:e6:
f7:b5:a6:a5:e2:11:77:8d:00:cd:12:ae:2d:83:29:
78:05:49:b9:82:d0:bc:b7:92:22:69:b5:e4:2a:ed:
2e:32:8b:d9:06:9e:1a:27:39:a5:d6:6f:62:04:3e:
d2:62:09:08:a1:76:ba:e0:39:5b:51:4f:3d:fb:05:
1f:e5:5f:0e:da:c8:5f:52:20:82:b6:97:5d:ab:a6:
0e:db:fa:d3:97:55:d5:d3:6e:34:70:5c:38:f9:b3:
5c:4b:4e:2a:c5:3b:36:45:4b:97:cf:cf:fc:ed:14:
c0:af:43:16:d9:40:8a:c4:ce:7d:fd:5b:59:39:80:
f4:b8:8b:1b:64:66:7b:cb:16:54:c2:8f:42:d4:22:
a2:2f:5d:59:60:22:35:80:34:48:16:77:2f:3b:54:
d0:7c:0d:4c:c8:47:bd:9f:e9:be:09:f6:ae:94:29:
5b:3c:3d:3e:cb:bc:7e:13:e1:fe:b1:b1:fd:89:75:
9b:ae:9d:b7:55:c3:44:5e:f6:d7:4e:e7:e6:59:01:
d6:29:56:43:c4:53:f5:9b:14:09:fa:f5:59:92:b3:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:AD:9D:69:90:92:8A:B9:DC:F2:8B:5B:77:65:7D:EA:89:C0:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d4d7f71a-a4af-33bf-86eb-53bd9943159f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:12:ee:8f:42:d0:a1:94:ec:6e:34:e7:ac:a5:ce:65:5d:f2:
0b:4f:6b:c3:24:4e:da:64:24:d1:63:81:cc:c8:e8:d3:b8:72:
0a:2b:27:f7:a3:2f:b6:9f:57:59:76:a6:a7:b4:48:0f:77:d4:
5d:36:d9:7c:dc:76:f0:d4:10:59:5e:55:a3:83:7c:0d:8e:63:
19:2e:59:83:64:8b:55:25:b9:a3:b5:39:41:c2:6d:cb:5f:ba:
c7:f8:13:27:fe:06:40:9a:37:f5:f2:8e:a3:a2:82:ed:68:18:
76:b0:49:b2:e3:73:e9:78:ce:bf:ba:50:50:7d:f1:84:b3:b0:
d8:14:cb:a7:89:d7:d2:01:f9:66:42:f6:ba:c8:cd:a4:03:94:
4b:bd:db:9f:da:bc:ad:72:8c:48:88:8f:5d:7f:f3:a0:65:c8:
c3:de:f4:a6:60:42:01:d2:6e:b5:eb:46:b4:b7:3d:8d:77:f3:
dd:65:82:3d:0a:37:4a:b5:10:71:42:f4:2c:65:42:4f:e4:6d:
94:59:69:f4:54:da:82:92:67:0b:a7:1d:36:ba:cb:8b:d1:cd:
21:1b:21:b6:93:73:df:d3:c3:c7:ed:85:96:48:67:ca:6f:d4:
b5:5c:8f:7e:2a:c5:83:41:aa:c0:48:a4:7e:12:60:2e:43:fe:
a4:cd:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org