Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/249838c5-e806-36d6-b6a2-61d5953083e4.roa
File: 249838c5-e806-36d6-b6a2-61d5953083e4.roa (raw, json)
Hash identifier: StT9XuFUuqrwuqSPwFfruvMTTRRhB8shcLbFGlpOBCs=
Subject key identifier: 57:3F:E1:84:15:5D:AF:57:2A:0D:FE:66:08:D4:97:AA:07:F4:67:65
Certificate issuer: /CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
Certificate serial: 010D0C9F43285839E090D8CF4132A489B6BC6E80
Authority key identifier: 1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/249838c5-e806-36d6-b6a2-61d5953083e4.roa
Signing time: Mon 10 May 2021 04:00:00 +0000
ROA not before: Mon 10 May 2021 04:00:00 +0000
ROA not after: Sun 13 Aug 2023 04:00:00 +0000
asID: 3549
IP address blocks: 134.195.104.0/22 maxlen: 22
23.143.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:e0:90:d8:cf:41:32:a4:89:b6:bc:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
Validity
Not Before: May 10 04:00:00 2021 GMT
Not After : Aug 13 04:00:00 2023 GMT
Subject: CN=a730496c-9dcd-4fbf-881d-5a5179f49d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:8b:2c:28:95:24:10:77:d9:69:e0:30:82:
6e:70:f9:c0:7c:f6:d4:39:45:df:ff:6b:e4:44:31:
da:94:42:4c:08:59:86:98:40:29:1b:e7:65:99:8c:
74:f4:bd:66:95:9a:74:c4:8a:a8:65:bd:b9:fc:65:
a8:be:4c:15:4a:c4:25:db:87:a7:95:21:6b:a2:2a:
33:b3:61:65:7d:9b:da:c1:aa:64:aa:d9:98:ab:49:
ce:f2:a5:dd:58:4a:71:26:65:7e:a5:a0:48:8a:f8:
5d:3e:5a:30:13:ac:24:a7:9d:1d:10:06:98:7f:49:
14:56:ef:c9:fd:26:67:48:b0:f7:57:48:68:85:9f:
02:f3:e9:24:f5:70:bb:48:2a:30:8a:93:6c:53:dc:
20:59:65:6e:49:2d:24:d7:0b:a7:d8:14:df:68:a4:
11:77:19:a6:d1:10:54:85:02:ba:2b:83:e9:7b:f1:
f4:59:ed:21:50:ab:3f:d4:4a:db:bf:55:10:f4:86:
bc:17:30:c1:71:d6:b8:d2:18:fb:59:f6:14:b8:44:
1a:7b:04:df:92:d2:4a:e1:d2:9b:04:77:19:6a:44:
87:e3:f0:93:f7:fe:fa:ea:39:32:a7:63:db:d8:34:
58:bf:f7:61:c6:d7:d9:69:93:01:cb:6c:fc:c1:50:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:E1:84:15:5D:AF:57:2A:0D:FE:66:08:D4:97:AA:07:F4:67:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/249838c5-e806-36d6-b6a2-61d5953083e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/b9fd36f9-97b3-4d67-9844-6c32258695b0.crl
X509v3 Authority Key Identifier:
keyid:1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.16.0/24
134.195.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:1e:3f:aa:c9:5d:ce:a1:d8:5d:62:9a:84:eb:16:2c:19:bf:
f7:3f:fe:d0:ea:c8:67:3c:bc:09:67:da:f3:c3:3f:fc:f3:5b:
c4:9a:a8:82:65:a5:a4:ae:73:b3:b2:28:14:d0:40:0e:d5:43:
91:50:2d:51:23:cd:ea:02:17:56:1a:0b:d8:d6:a7:54:30:23:
f5:57:7b:9b:a5:60:ae:39:5a:f9:71:34:18:11:e8:16:2c:67:
6b:2e:e0:3e:b8:05:62:fe:f9:74:69:6a:7b:c9:d8:60:92:fd:
d3:a8:8f:c5:5b:69:4a:12:75:b3:01:1c:48:4f:b3:f3:c1:1e:
3c:42:2c:18:6d:01:5c:cd:69:eb:b0:11:91:16:d4:63:c9:b9:
4f:58:91:51:83:34:20:11:e5:8e:c6:b8:15:f7:9a:78:42:05:
9a:ff:fd:c2:d4:43:41:ac:c5:bd:37:8b:0e:c8:a9:1a:1a:10:
0f:36:50:f2:c4:57:99:d8:04:59:d5:66:1e:94:bd:e1:17:91:
ee:91:5f:28:05:3e:9d:0a:f0:a6:61:69:14:51:63:25:b3:55:
22:af:68:ee:50:f5:4d:d2:3c:34:25:63:83:53:62:ce:0a:e1:
1e:58:59:8b:99:87:de:c5:1b:a1:70:ad:4e:98:73:6d:90:9d:
2e:e7:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org