Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2d894563-deff-392f-9142-c5fbfbf7ca28.roa
File: 2d894563-deff-392f-9142-c5fbfbf7ca28.roa (raw, json)
Hash identifier: isXwdjnv94VzTCz3WdwhGC3BaGczpFjM2VBCvFjh+dI=
Subject key identifier: BD:6B:1A:F4:7E:3A:B3:69:99:1E:9F:2E:62:B5:CD:B7:7D:12:D2:ED
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285844FD64287CDF4A2E1358F55200
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2d894563-deff-392f-9142-c5fbfbf7ca28.roa
Signing time: Fri 23 Feb 2024 19:20:27 +0000
ROA not before: Fri 23 Feb 2024 19:20:27 +0000
ROA not after: Thu 23 May 2024 18:20:27 +0000
asID: 2914
IP address blocks: 130.254.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:fd:64:28:7c:df:4a:2e:13:58:f5:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Feb 23 19:20:27 2024 GMT
Not After : May 23 18:20:27 2024 GMT
Subject: CN=a42757fc-5c48-4381-bceb-96f7ac298194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:9a:db:6b:41:d9:73:4c:6a:a0:ae:6d:26:
27:de:4b:14:64:7c:e4:3e:31:0c:32:5a:f3:ce:f5:
54:4e:ca:b6:63:63:f0:7f:27:e8:01:83:db:12:0e:
81:07:11:a5:48:f5:d9:d1:41:a5:85:53:bb:35:83:
6f:2d:65:c2:6c:8c:a6:b6:27:8b:75:d6:23:e2:a0:
c6:a3:c1:8d:17:d1:ee:6b:fa:0e:df:0c:eb:21:bb:
d9:e0:f6:b6:6c:56:e2:8a:7b:a4:3f:5f:c7:25:ed:
2f:24:03:d4:63:57:4e:ae:4c:fd:f8:5d:63:a0:48:
b5:dc:4a:34:ae:59:ca:83:29:09:3f:d4:65:dd:32:
35:a7:85:70:05:ae:7b:18:78:6b:0a:06:b0:65:74:
f4:df:2f:13:46:58:8e:a5:ba:61:73:cd:4c:0b:c2:
7c:68:3c:a4:22:79:8b:d1:ea:38:9d:54:85:7d:69:
e8:b8:cd:1f:04:4f:20:7a:10:91:39:92:ec:69:2d:
34:cb:a7:29:40:a6:17:86:6c:5b:b0:73:11:ef:a5:
22:aa:84:52:1a:9f:c5:29:e4:b5:b8:19:89:23:e6:
f4:b8:26:75:e3:7e:44:01:0b:2d:4e:95:06:59:d9:
a7:8c:0d:7c:b0:8e:19:5a:4b:35:25:1e:f0:38:41:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:1A:F4:7E:3A:B3:69:99:1E:9F:2E:62:B5:CD:B7:7D:12:D2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2d894563-deff-392f-9142-c5fbfbf7ca28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:2f:f1:0f:1b:8d:2c:33:66:ed:77:f7:24:a5:53:72:dc:87:
e0:2e:fa:45:b6:40:a7:86:6a:01:ec:9d:2e:7f:47:02:ab:24:
13:1e:cb:ed:05:2f:ae:2d:eb:c4:11:1e:b0:82:d4:54:2f:5c:
db:e6:56:13:4a:df:99:a9:53:b7:84:7c:96:2c:2c:fd:29:b2:
4a:e3:48:10:73:82:2e:76:76:fb:e4:b2:96:67:5d:19:35:ca:
97:f7:0d:10:53:16:14:d1:81:3a:c3:17:fa:62:e4:79:1c:6e:
2d:b4:bc:12:f9:1c:f8:5d:7c:19:55:23:8b:9c:ed:74:24:3b:
fb:b9:78:f5:4d:72:2f:14:13:08:c6:0c:f7:49:60:51:7f:d9:
6f:95:17:92:22:a4:a0:ca:c0:d2:e6:66:5f:96:c4:f9:f5:08:
27:c7:67:81:6c:7e:f0:c4:8f:74:ba:82:54:85:c9:7d:cc:c9:
52:f3:ff:45:44:33:96:9f:8e:4b:af:42:d3:72:a4:01:3a:0d:
93:96:3e:f5:38:99:a6:93:e0:6b:44:82:ba:dd:1e:6a:09:b7:
fd:5d:40:be:ba:20:42:1c:62:7e:d2:2d:c0:dd:ec:8d:f7:18:
b9:70:98:e8:74:60:b1:59:3a:9e:09:d4:7a:b9:c2:d0:d7:94:
43:eb:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:35 2024 by rpki-client on console-ams.rpki-client.org