Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e9839600-34c2-3b9d-9d28-a3b923fd7d05.roa
File: e9839600-34c2-3b9d-9d28-a3b923fd7d05.roa (raw, json)
Hash identifier: 1Ze9DiTD5QcAW2BFQPkaFBQ0ErORRpOq4oz10gOk4/g=
Subject key identifier: AE:AA:09:D7:C1:3C:C3:0A:CB:B9:7D:3B:20:C7:E1:64:42:6E:E4:0C
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843CDDE166A5DDD959BD693E200
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e9839600-34c2-3b9d-9d28-a3b923fd7d05.roa
Signing time: Tue 07 Nov 2023 02:00:16 +0000
ROA not before: Tue 07 Nov 2023 02:00:16 +0000
ROA not after: Mon 05 Feb 2024 02:00:16 +0000
asID: 55293
IP address blocks: 162.254.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:cd:de:16:6a:5d:dd:95:9b:d6:93:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 7 02:00:16 2023 GMT
Not After : Feb 5 02:00:16 2024 GMT
Subject: CN=dd69ef97-8751-46f9-8ca0-3ec3f72e3f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:41:f1:94:66:8c:58:84:9d:c4:ad:28:d6:
fe:11:b6:3e:8b:59:12:e2:f4:26:f6:a0:d4:ba:3f:
5d:ae:37:31:17:55:97:f1:34:16:05:77:a1:b5:51:
bc:c4:92:ff:5f:49:9b:eb:67:ac:4d:bf:ae:97:3a:
eb:91:e7:f8:59:87:20:04:24:7c:9b:e4:f0:d8:ad:
c3:ec:c3:f2:a3:c4:9e:b2:95:b1:16:f3:4f:7a:15:
9b:eb:e4:63:c2:db:31:01:6e:39:eb:90:ad:bb:91:
b6:75:77:99:57:d9:bd:1b:42:70:b7:67:32:24:75:
83:44:ba:f1:0c:f3:a0:4b:6e:52:dc:39:4e:a5:ea:
05:cb:ce:ee:b9:34:cb:f7:ca:f1:f9:57:b1:64:d9:
32:dc:f3:c6:6d:d5:21:57:fa:59:f0:4d:60:00:d0:
8c:3a:a9:fd:b8:83:9e:9c:a5:fe:5e:99:eb:a9:52:
fe:38:79:a9:a6:a0:e0:9f:b7:b7:78:0e:05:c8:58:
13:88:20:46:11:27:7f:6b:e7:07:31:f4:3a:95:5d:
cd:53:0c:47:61:bb:5f:49:82:4c:d7:fb:4d:4f:f4:
96:45:b8:f6:a0:45:67:f3:75:97:e5:eb:ab:f3:a3:
80:15:2b:44:b8:c0:8c:c0:e2:73:c0:cc:f0:59:50:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:09:D7:C1:3C:C3:0A:CB:B9:7D:3B:20:C7:E1:64:42:6E:E4:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e9839600-34c2-3b9d-9d28-a3b923fd7d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1d:79:6b:2b:d7:8a:53:25:cc:e6:8c:15:6e:2b:0e:e4:30:
f9:4b:70:fe:59:78:e2:a6:d4:8b:bf:6a:4f:6f:6e:f8:0f:23:
d2:65:e9:7c:40:be:f5:be:2c:ae:e5:0e:05:57:55:72:8a:09:
41:de:b0:3f:db:19:df:1e:35:26:11:02:a1:22:cb:da:18:bf:
bb:8a:30:28:0e:c6:99:cd:0b:0c:97:f2:2e:15:d4:8c:bd:78:
3d:34:76:da:12:59:2f:6f:29:a2:09:27:77:01:2f:e5:03:1b:
97:9a:89:28:66:94:ed:9b:95:e0:d3:cc:57:5c:b2:d0:69:8c:
5a:9e:69:02:fe:c1:b7:e8:d1:47:ad:fd:d1:aa:70:37:cf:6d:
2f:7c:1a:71:31:97:b0:26:6f:e5:75:f7:d3:1a:c8:02:81:4b:
e4:c2:80:9d:1d:7a:5a:55:7c:ff:e1:a4:2d:63:ca:03:2a:d8:
30:d6:68:27:83:be:e3:a4:9a:24:5b:c3:a1:ee:b5:89:d5:d7:
f6:40:cd:fa:66:97:f4:ec:9c:e5:cd:4f:74:8c:96:cc:5d:15:
72:68:de:e9:ca:ea:49:6c:bf:7e:ec:b5:fc:9a:d2:fc:0c:22:
1a:40:54:00:a9:f9:4e:32:5c:9d:73:98:a0:05:66:d1:7c:78:
26:de:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:35 2024 by rpki-client on console-ams.rpki-client.org