Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/bf3abd18-fb33-3314-8855-b60106b5cf93.roa
File: bf3abd18-fb33-3314-8855-b60106b5cf93.roa (raw, json)
Hash identifier: ciBQHcwU3dBHLcJQyox/q6DYjh17kFSCVT7ZC0wFo5o=
Subject key identifier: 7F:42:E1:F0:AE:0C:5C:76:29:2F:2A:68:2B:3E:24:99:10:82:09:D3
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844755F1EAA5B37CE285E4C6000
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/bf3abd18-fb33-3314-8855-b60106b5cf93.roa
Signing time: Sat 06 Jan 2024 02:00:16 +0000
ROA not before: Sat 06 Jan 2024 02:00:16 +0000
ROA not after: Fri 05 Apr 2024 01:00:16 +0000
asID: 55154
IP address blocks: 67.215.248.0/24 maxlen: 24
104.223.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:75:5f:1e:aa:5b:37:ce:28:5e:4c:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 6 02:00:16 2024 GMT
Not After : Apr 5 01:00:16 2024 GMT
Subject: CN=2c519530-868a-4979-84ec-57d0a650dae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:5f:d1:b2:cc:5d:61:df:df:02:5b:7e:b3:
0b:59:09:b8:04:eb:d7:68:38:1c:d7:69:d2:25:4a:
66:20:38:a6:b7:be:f8:9b:24:15:cf:5c:5d:6f:f3:
ab:36:e3:98:da:d3:aa:92:a9:99:ae:1b:35:a1:ca:
22:c2:8a:5d:0d:40:22:ec:d9:48:77:04:58:5b:b1:
39:51:d5:de:a8:d7:65:5b:ba:d7:ad:76:ee:39:1d:
0e:70:61:b9:17:c1:f0:0b:ef:06:74:96:d5:d2:fc:
79:de:aa:7f:a3:a2:0f:67:83:ad:73:01:01:db:5d:
ce:58:1a:8a:33:15:e3:2e:c1:da:cf:ca:f3:3c:ed:
d3:a9:3d:8d:5f:17:4b:e3:c3:bb:b9:b2:80:59:29:
46:a1:25:00:f4:fc:ca:9e:df:4d:18:2b:42:95:13:
af:47:d2:48:da:30:a2:d4:20:b9:ba:e3:02:da:6e:
60:19:e2:40:97:86:0f:23:9f:98:07:db:80:7a:a7:
78:10:83:80:13:2c:45:a2:70:df:11:e7:04:b6:66:
ac:7b:f1:12:8d:3e:72:dc:23:1a:00:61:e2:ab:7e:
f1:47:e3:88:6b:b9:71:ca:12:45:36:bb:6d:85:ae:
8f:13:e4:8c:93:8b:b1:70:ce:fb:4b:9a:b4:c1:78:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:E1:F0:AE:0C:5C:76:29:2F:2A:68:2B:3E:24:99:10:82:09:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/bf3abd18-fb33-3314-8855-b60106b5cf93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.248.0/24
104.223.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:0a:1e:d3:6f:ef:f5:f7:ce:a6:82:2c:d3:d8:64:8a:ca:13:
aa:22:d5:c0:77:76:83:ce:1e:e0:09:f4:7e:e0:96:75:25:f9:
2f:cf:21:30:39:35:ef:3e:97:d6:8b:45:4d:d0:ac:89:e2:ed:
00:04:e2:ce:e8:22:cc:ca:d2:64:34:3e:48:aa:68:ed:51:75:
58:56:ba:eb:f0:97:43:3b:9f:42:d2:c8:0e:67:8b:e5:bf:db:
e5:53:3c:f2:c3:e8:f6:c1:d4:d5:c3:c8:b8:9e:08:87:87:30:
4c:05:54:92:dc:78:e3:04:5f:8e:0f:64:70:87:44:fc:cb:84:
15:45:4f:ad:b4:ba:3e:f9:5e:a9:e7:85:45:56:22:b3:94:e5:
ce:19:62:c5:72:2b:4d:3b:78:3d:ab:ba:2e:3d:ba:b1:1e:0b:
72:af:89:68:b8:ad:1e:21:97:8b:08:cf:38:37:33:c6:ec:aa:
de:70:7b:e5:41:dd:5b:e9:99:3a:a9:c2:4e:2a:d3:ce:14:b7:
c6:59:e9:fd:42:6d:03:32:52:ac:71:bf:5b:01:00:ca:8e:54:
2b:bf:4a:d4:8c:15:17:fb:ca:af:be:74:a5:b2:b9:83:39:e5:
bd:6c:a9:7c:e2:90:60:25:8b:32:ce:c9:8a:0f:14:34:33:2b:
45:df:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org