Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f6378424-095a-3c8a-9ad6-447aa212dd00.roa
File: f6378424-095a-3c8a-9ad6-447aa212dd00.roa (raw, json)
Hash identifier: 3wmHceRulrbY/Xo4i8/JQiIWzgxUqz0dgTfj6dZcwxs=
Subject key identifier: 7E:02:48:E5:1A:36:50:BF:8A:80:B8:42:BA:9A:2E:FB:16:E6:2A:C1
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F432858432A6F57848C14C607522C6280
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f6378424-095a-3c8a-9ad6-447aa212dd00.roa
Signing time: Sat 09 Sep 2023 13:00:25 +0000
ROA not before: Sat 09 Sep 2023 13:00:25 +0000
ROA not after: Fri 08 Dec 2023 14:00:25 +0000
asID: 61317
IP address blocks: 104.156.150.0/24 maxlen: 24
172.111.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2a:6f:57:84:8c:14:c6:07:52:2c:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Sep 9 13:00:25 2023 GMT
Not After : Dec 8 14:00:25 2023 GMT
Subject: CN=a0b0a17b-bb30-42a3-a7f2-b2c540312833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:82:57:d8:71:f8:90:53:6a:66:0b:ec:92:
36:01:2a:f9:17:35:e3:af:af:05:f7:8f:a4:2c:bc:
64:62:20:b5:47:23:10:cb:36:4a:80:1e:2e:9d:66:
31:60:11:c9:1c:2d:42:c9:9c:8c:2a:fa:be:76:04:
7f:5e:dd:93:3e:13:9a:5a:1e:7d:ce:b7:37:98:8d:
2e:e2:9d:e2:8f:eb:51:51:97:62:af:5e:47:45:96:
98:84:03:52:40:d2:ca:f8:27:cd:19:61:c9:37:e2:
7f:08:16:ff:cb:0c:76:66:5e:7f:c6:d6:de:5a:3a:
37:45:58:97:05:99:8b:66:96:b1:2f:85:11:50:c9:
01:9c:58:d0:14:dc:9a:e5:9e:d6:bf:1b:a0:5e:0e:
4f:13:13:99:7a:8f:66:9f:99:c0:8a:eb:a4:44:6e:
e9:3d:ff:ca:42:42:2c:fa:0a:c9:7a:e1:5a:bc:e1:
cf:55:14:05:29:63:9c:db:a8:f3:e8:f1:5a:56:48:
1a:93:41:77:ad:c9:27:00:c3:dd:4b:b9:99:dc:fd:
87:fe:da:b4:a9:8f:ae:9a:aa:ca:33:dd:c1:2d:80:
05:9b:b8:51:ec:b2:75:aa:a8:1e:36:26:97:69:d4:
38:7a:be:de:a5:5b:86:85:1d:e6:b2:94:a6:51:82:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:48:E5:1A:36:50:BF:8A:80:B8:42:BA:9A:2E:FB:16:E6:2A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f6378424-095a-3c8a-9ad6-447aa212dd00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.150.0/24
172.111.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:99:a8:4b:30:35:e8:be:af:ec:67:e4:52:aa:8e:f5:86:be:
db:d6:97:1f:fd:37:10:2e:a2:b7:1d:c7:78:6a:45:a1:a7:11:
5b:75:84:ea:38:25:ca:df:d1:c9:b4:c3:f2:f9:06:29:df:c8:
32:92:76:9e:00:3e:5c:16:f0:e8:bd:e4:8e:c8:29:4a:52:9a:
1c:88:80:fc:4e:b1:ca:3f:e0:88:67:fa:62:cc:c7:ba:3e:60:
34:a9:78:65:b5:f3:cf:f9:07:f4:eb:69:b9:a1:55:2a:8e:18:
ed:a2:90:63:9b:bc:bd:19:8b:70:2a:b8:4b:1b:35:c6:c0:ba:
fc:59:a5:a6:74:b1:51:c4:f1:f0:cc:a0:3a:4e:ad:b5:79:23:
a4:c2:5b:65:5e:af:16:89:6e:09:da:6c:50:4c:61:72:6b:53:
c8:66:be:85:20:02:4a:88:9a:0e:4c:42:77:78:ae:4e:af:92:
e7:34:53:9b:82:0d:1c:bb:a6:f6:09:45:94:ca:c4:37:29:5c:
d5:d0:49:74:70:17:8f:04:00:94:67:03:81:55:f0:f2:59:3d:
d1:45:72:35:40:08:da:af:9d:1a:78:5c:12:db:8a:d7:67:3d:
73:2d:1d:69:6f:4f:03:39:d7:75:63:03:f1:54:70:ee:20:31:
1d:08:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:31 2024 by rpki-client on console-ams.rpki-client.org