Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e2e77717-f6f7-3dc6-a3d6-2c4f691da863.roa
File: e2e77717-f6f7-3dc6-a3d6-2c4f691da863.roa (raw, json)
Hash identifier: DaJleiLcM+uD7xU/7epwalY/BtPXSJYBsuUasEuMNf8=
Subject key identifier: C1:D6:BE:C8:1F:EE:42:AB:B9:B6:A8:CE:BC:C6:34:29:E4:52:58:22
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328583AA33DE3A0B9D6B1263A2B5F00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e2e77717-f6f7-3dc6-a3d6-2c4f691da863.roa
Signing time: Thu 07 Jan 2021 05:00:00 +0000
ROA not before: Thu 07 Jan 2021 05:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 1239
IP address blocks: 172.111.57.0/24 maxlen: 24
172.111.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a3:3d:e3:a0:b9:d6:b1:26:3a:2b:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Jan 7 05:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d9b68b73-6d8f-48ee-8342-0cfb41664a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:3f:95:61:9d:d8:31:ba:09:2b:f7:47:b9:
2a:6c:4f:c3:f1:ef:9d:69:b7:d9:61:c1:27:24:19:
2b:17:82:66:17:06:e2:96:6a:ca:25:de:ff:16:4d:
ca:6a:ae:53:a2:47:f2:fc:bb:47:9e:a0:60:42:09:
ea:d2:d7:5c:03:84:ed:28:53:23:7b:9b:09:d7:15:
9b:13:e3:63:e2:79:cb:6f:f3:dd:2c:86:60:84:8c:
c8:a7:6b:28:6f:47:9e:5a:10:22:ac:5b:ac:e4:7c:
d6:e0:78:5c:0d:d4:8a:8b:76:9c:80:19:55:02:b9:
20:ae:0d:1a:8d:da:60:b4:c5:2d:84:24:ea:db:34:
d6:be:70:47:ca:50:57:41:63:97:09:57:86:3c:04:
6f:c4:64:b6:55:b4:be:20:da:5f:79:81:f9:87:83:
53:3b:05:ba:06:94:3a:a2:94:5b:e0:e4:26:4c:93:
bb:e8:40:7b:d5:66:c7:43:31:5f:5e:72:d3:0e:78:
1e:09:28:c1:03:cb:b0:15:29:56:9d:44:2a:13:9d:
d9:60:58:88:2c:c7:33:74:03:a3:f6:c5:ac:15:37:
95:14:0b:a1:58:64:28:04:35:ec:b0:34:0f:b0:89:
3c:0a:a0:7a:8a:cd:b1:8f:67:e2:74:fc:f0:13:66:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:BE:C8:1F:EE:42:AB:B9:B6:A8:CE:BC:C6:34:29:E4:52:58:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e2e77717-f6f7-3dc6-a3d6-2c4f691da863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.57.0-172.111.58.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ec:37:ae:6f:57:98:2b:2c:ad:1f:c2:5c:94:ae:be:5f:10:
df:e1:c9:95:65:21:55:b7:fc:fc:b9:c3:8f:15:54:22:19:19:
82:df:66:89:96:b2:e1:8e:1f:74:26:67:e3:71:ef:88:b2:f3:
a2:09:a8:ed:5c:93:e2:00:00:b6:3e:52:0d:89:e5:cd:49:c3:
bf:f3:14:60:fc:9c:eb:22:9a:aa:f3:b5:41:11:78:70:5c:bc:
99:e2:a0:5f:2e:7c:8c:0e:08:72:3b:65:c0:b6:dc:8f:9a:8c:
27:78:71:28:bf:e4:d2:1b:12:7f:f9:40:73:ea:22:cf:c9:e0:
10:2f:86:1c:2d:94:e0:14:13:d2:95:4b:ab:a6:7f:a3:97:d1:
c8:d6:8d:8f:ac:ff:cf:a2:5e:ab:22:df:76:02:35:0f:b2:c5:
b1:05:1f:af:dd:96:4f:01:00:97:8d:04:a4:e7:33:32:f0:b8:
d0:ef:30:ce:1b:a5:fc:e7:5f:5c:d5:a8:e8:13:fc:47:b4:41:
87:0a:6f:6f:29:57:f2:d0:1a:18:4f:ef:79:1c:f3:ad:3e:a6:
9d:8d:1a:e1:14:05:c3:50:b7:d7:76:05:89:56:bc:24:85:a8:
6b:2b:87:f9:45:8c:22:b0:c3:a2:07:04:58:50:e1:60:b2:af:
98:18:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:07 2024 by rpki-client on console-fra.rpki-client.org