Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/3c8af0fa-1bba-35a6-872b-4ad86d970abc.roa
File: 3c8af0fa-1bba-35a6-872b-4ad86d970abc.roa (raw, json)
Hash identifier: GPKdNNvjxdFR5mkQo/YKCOAw1c/0WclOlevHm6aJ/Dg=
Subject key identifier: 5E:60:EA:41:5B:74:7B:77:2B:2F:D6:0C:BA:F2:0C:08:5C:03:3E:8D
Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
Certificate serial: 010D0C9F43285841E44781034026AA126B628120
Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/3c8af0fa-1bba-35a6-872b-4ad86d970abc.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sun 04 Jun 2023 01:50:24 +0000
asID: 33359
IP address blocks: 208.89.31.0/24 maxlen: 24
208.89.30.0/24 maxlen: 24
208.89.29.0/24 maxlen: 24
208.89.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:81:03:40:26:aa:12:6b:62:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jun 4 01:50:24 2023 GMT
Subject: CN=a8fa164f-e197-44ab-a74a-e2f06b8e57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:f3:e7:33:e4:5d:37:c6:57:2b:c6:48:86:
bb:14:ef:50:bb:19:72:e6:de:84:fc:3b:48:64:40:
cf:10:9e:fe:81:bd:a9:7e:d0:e7:ed:2a:55:e3:da:
38:c1:b8:b5:b4:ac:71:ac:fd:92:c0:c6:72:f3:b8:
ef:d0:45:08:07:7b:eb:bf:a3:3e:55:28:aa:1b:f1:
12:f7:ac:3f:9f:94:72:48:dd:0e:1e:27:40:29:e6:
64:8f:c4:d2:96:11:f4:88:a0:02:3c:b8:88:19:b0:
c1:e9:c0:c1:7f:da:8b:53:ac:05:c8:f2:aa:ac:0e:
60:d0:eb:18:1a:20:4b:37:08:79:79:8a:a9:57:48:
dd:6d:f7:c1:0a:46:6c:1e:95:8b:e9:79:91:fb:bf:
c9:da:ba:4b:cc:d5:ec:2b:d4:d1:68:6f:db:9c:1b:
55:5b:55:8d:17:33:34:08:8e:47:38:41:2f:7b:fa:
f3:a0:6d:7b:7a:4e:0e:90:d7:38:34:6b:94:1b:ec:
f0:cd:c4:7d:21:9a:39:ec:42:39:a1:b9:da:c5:17:
a0:bb:78:b7:99:58:d8:ad:64:24:0c:b6:f7:cc:d0:
b6:f7:4c:ab:4c:7d:06:bd:0f:9f:be:3f:d3:03:90:
fa:b6:9d:54:f8:99:a4:30:0e:d9:26:d8:95:7f:b3:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:EA:41:5B:74:7B:77:2B:2F:D6:0C:BA:F2:0C:08:5C:03:3E:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/3c8af0fa-1bba-35a6-872b-4ad86d970abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl
X509v3 Authority Key Identifier:
keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b3:f7:c6:7c:ae:62:53:16:df:7a:b0:40:a8:85:b9:86:f8:
d5:e8:00:fb:1b:ce:51:c7:cd:39:81:6e:2f:46:52:62:92:0c:
e6:c7:c8:c4:0f:60:15:b0:68:72:7c:ff:b0:e2:2b:bc:c9:22:
92:7a:64:6c:cb:f8:53:cd:c1:2e:89:03:4a:fe:cf:4f:ab:00:
17:17:ba:c0:55:84:9b:e3:c5:cd:af:5c:b8:76:85:b2:94:69:
02:aa:4a:f1:4a:48:04:4d:f9:d8:8d:d0:46:a0:1f:90:17:e9:
bb:14:8f:0f:01:9e:47:e2:bf:cb:53:49:29:f1:71:fe:38:e0:
97:2c:f2:a7:c8:bb:cf:bb:c0:d5:d6:35:f4:03:05:ab:76:4f:
04:10:01:3a:79:95:fa:32:72:ad:e0:fe:6f:dc:35:98:8e:92:
65:86:fb:44:09:40:07:e8:bd:dd:8f:0e:f4:81:c6:31:e2:84:
8c:45:28:20:e0:4f:b9:68:73:c9:47:7e:64:8b:a0:06:c8:80:
34:48:40:47:84:73:4c:08:bf:b2:2c:36:42:99:b5:27:7d:e4:
07:aa:87:57:f5:15:8d:1a:b6:35:37:e7:aa:bc:d7:0c:b3:2a:
e9:0d:13:8c:b8:bd:a5:49:1a:52:53:92:b0:8a:65:39:64:eb:
1e:2c:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:44 2023 by rpki-client on console-fra.rpki-client.org