Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa
File: b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa (raw, json)
Hash identifier: 3Mmn4T3VkKbPjodifrQNy2g6/h3QURIwcG74/YNv7kI=
Subject key identifier: 20:06:77:6B:F6:11:B1:60:86:E7:34:5F:10:21:4B:BD:8E:D2:7F:31
Certificate issuer: /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
Certificate serial: 010D0C9F43285843949B5252F11DD4F696ED9800
Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa
Signing time: Tue 17 Oct 2023 13:44:47 +0000
ROA not before: Tue 17 Oct 2023 13:44:47 +0000
ROA not after: Mon 15 Jan 2024 14:44:47 +0000
asID: 13652
IP address blocks: 162.212.48.0/21 maxlen: 21
2620:12c:7000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:94:9b:52:52:f1:1d:d4:f6:96:ed:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
Validity
Not Before: Oct 17 13:44:47 2023 GMT
Not After : Jan 15 14:44:47 2024 GMT
Subject: CN=a1acb99f-1a4e-4010-9f31-494a3a76b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:c1:76:93:03:b4:0b:67:79:e3:69:40:b5:
72:39:c5:ab:2c:3e:82:77:e1:e3:0b:fb:70:4c:b1:
e7:d1:e3:6b:37:dc:20:46:5c:e9:c3:48:f4:0c:15:
3c:83:2a:55:ca:f2:62:08:23:e5:ee:3d:0f:4e:02:
64:28:c1:2c:fb:03:cd:87:f4:78:19:d0:d6:64:2e:
5d:3e:b6:7d:2c:88:3e:98:cf:63:ac:5b:63:02:98:
32:fa:19:57:c4:3a:86:4f:7f:fc:38:af:24:c6:57:
42:4f:e7:16:02:db:ab:07:5e:36:67:ed:78:d3:39:
32:60:82:a1:8b:ef:67:f9:dd:bc:bf:d2:df:c0:00:
99:f1:f8:c9:45:c7:74:85:db:78:40:32:9e:8f:c3:
99:c8:6f:2e:b9:79:90:ad:c5:d9:94:2d:96:39:28:
cc:84:6e:ab:c9:6c:ef:b3:52:a0:a4:69:6b:66:21:
d6:fd:75:56:b0:20:e4:60:8f:9c:62:fa:9f:17:72:
96:cc:01:a3:91:02:b1:be:45:20:7f:cd:32:6f:5d:
b9:f6:7a:34:5b:2f:42:c9:1e:37:8e:c0:39:d2:46:
5a:7e:b7:7e:9e:18:e3:51:ae:3b:44:f5:e8:28:34:
43:b9:a5:1a:ec:c7:b6:21:06:4c:ce:ac:94:b7:7e:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:77:6B:F6:11:B1:60:86:E7:34:5F:10:21:4B:BD:8E:D2:7F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/b53d081c-ddf2-36b1-a141-9f6c8a91760b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl
X509v3 Authority Key Identifier:
keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.48.0/21
IPv6:
2620:12c:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:7a:a6:d5:03:27:4e:b3:27:95:f5:e0:35:88:70:4c:7c:f7:
ac:40:f5:22:32:b8:33:c3:27:b0:bf:6c:a2:47:65:d2:07:c9:
b1:80:e5:c9:ef:e8:94:9d:0d:b4:6b:94:3e:12:51:c6:23:4d:
c1:f4:71:2b:69:82:07:48:9b:f4:cf:05:46:27:29:0a:70:96:
38:ca:d2:ae:47:5c:9a:7d:38:86:70:82:2e:3f:61:b5:bf:04:
f8:1f:20:01:62:4c:f1:0c:66:47:e8:9f:89:93:00:c8:31:12:
09:24:69:a1:68:d5:bc:ce:c9:55:fc:f0:d8:32:e5:a6:54:b7:
f3:11:91:33:f6:a6:26:55:70:e5:bf:d2:08:91:ed:fe:67:9d:
fd:5b:2f:d8:d7:87:3c:ff:30:38:62:68:2a:09:b6:12:87:d8:
69:59:d5:cf:cb:6b:f0:ba:99:6d:05:a7:5e:16:ff:98:33:e9:
1e:b8:d8:4c:41:5f:78:53:ed:98:4c:ac:a3:67:94:a5:78:1d:
48:37:2f:c6:1a:6e:4e:07:2a:e9:45:b5:22:87:f0:f1:0d:bd:
6e:a7:e4:ea:8c:c8:ea:98:cc:1e:6d:d6:bd:53:53:ff:11:db:
c8:09:f4:2c:f4:b5:3c:25:85:f9:ce:12:1f:fb:cf:03:38:4b:
67:0a:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org