Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/3d38ebbc-b8b9-3600-9e5c-64ce6053efea.roa
File: 3d38ebbc-b8b9-3600-9e5c-64ce6053efea.roa (raw, json)
Hash identifier: R1dAH8sBVMJRbhKdTuz81dGmFBaonNvFVNyMnm9eQHA=
Subject key identifier: F6:58:85:FA:B1:BA:C5:2C:B5:36:F8:30:4C:C9:3A:FD:47:02:05:34
Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial: 010D0C9F432858427928D968937C60C045961E00
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/3d38ebbc-b8b9-3600-9e5c-64ce6053efea.roa
Signing time: Sat 08 Jul 2023 01:00:17 +0000
ROA not before: Sat 08 Jul 2023 01:00:17 +0000
ROA not after: Fri 06 Oct 2023 01:00:17 +0000
asID: 36369
IP address blocks: 172.98.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:79:28:d9:68:93:7c:60:c0:45:96:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Validity
Not Before: Jul 8 01:00:17 2023 GMT
Not After : Oct 6 01:00:17 2023 GMT
Subject: CN=9705d0f1-f24a-400d-9226-b88f7c22338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:e4:b8:f2:df:c0:39:0c:47:3f:11:d7:06:
dc:29:bc:bb:45:0c:72:64:5f:87:fd:81:68:f5:79:
a0:04:c7:0d:76:33:d4:14:c7:ff:20:75:bf:d4:83:
90:27:17:91:4f:82:05:8b:fb:c3:0a:a7:63:7e:b3:
d8:3f:57:dd:be:5f:17:e1:7f:b5:b8:4e:10:a0:46:
21:b8:ef:65:d5:52:0b:f6:7d:93:fa:b4:8f:5b:48:
1b:1a:99:71:9d:b2:b8:3d:be:46:cc:3d:31:22:a7:
ec:34:ab:ea:fb:fb:28:18:6e:4c:b4:f2:2b:3b:33:
85:58:27:38:22:02:e1:3f:67:72:6e:f9:60:21:80:
e0:2c:b0:47:ff:e8:ff:bb:b5:66:20:d5:fb:19:17:
a4:9c:d5:5f:09:d7:46:ea:9f:6f:c6:8f:b7:34:23:
fd:5c:49:91:b8:54:bb:dc:6f:17:6e:96:04:5a:09:
8e:f5:24:06:f0:55:5d:76:5a:50:d2:38:be:bd:da:
43:29:31:aa:9d:5f:e9:cd:96:13:2d:9b:88:03:b5:
15:47:d3:1a:30:74:95:9f:52:b8:05:94:c1:55:68:
94:fd:b1:dd:d1:32:1d:ee:31:38:74:a2:af:bf:6c:
be:46:78:a3:0f:a0:f3:30:cf:c9:48:0f:36:38:80:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:85:FA:B1:BA:C5:2C:B5:36:F8:30:4C:C9:3A:FD:47:02:05:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/3d38ebbc-b8b9-3600-9e5c-64ce6053efea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
X509v3 Authority Key Identifier:
keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:7c:9a:6c:a0:ed:44:0b:c9:5b:6a:ee:9e:10:6f:43:ec:4b:
45:ef:41:96:22:c4:3e:09:cd:0d:52:da:96:62:47:92:8b:9d:
74:c4:5b:cd:29:02:fd:5a:a7:e3:e8:96:c4:28:c8:46:e2:33:
21:01:61:cd:a4:10:8a:c9:b6:1f:20:ce:17:e5:1b:a2:d4:94:
51:b4:b8:f9:54:59:da:78:06:00:b0:d8:34:dd:d0:99:df:5b:
5f:50:0f:99:c9:81:52:09:57:05:f6:be:79:3a:83:9f:b0:31:
76:04:f3:69:48:fa:c9:9f:f8:9c:20:98:df:80:a5:5e:8a:fc:
08:69:9e:20:7c:c0:7f:f4:b2:50:45:84:03:c7:e9:5b:f7:93:
48:92:0e:b9:d9:32:ea:42:59:49:4a:87:ba:46:a1:ea:32:33:
ac:0b:4a:64:9b:d6:b9:2e:c7:fe:3c:8e:49:63:48:f1:c2:cd:
1f:14:78:cd:ee:cb:a5:f9:1e:aa:7f:83:9f:9a:00:c2:cb:d2:
ee:c6:71:f2:b4:eb:4b:ef:66:0e:42:6e:05:41:e1:b6:55:46:
7d:24:cb:07:ba:6e:79:09:a9:3f:73:dc:8b:a8:c1:7f:d9:45:
3e:3b:98:3f:2d:8b:bc:e8:40:66:14:71:38:06:90:2c:7a:c2:
f5:d9:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:32 2024 by rpki-client on console-ams.rpki-client.org