Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/20210a5c-21a1-38f1-9fef-68be3555a81e.roa
File: 20210a5c-21a1-38f1-9fef-68be3555a81e.roa (raw, json)
Hash identifier: MVvI2O2hJID699eqyj+Rrx4V3PuHW8kgPpuEWq6wYWU=
Subject key identifier: 77:B2:74:4E:4C:81:C5:19:47:0D:AC:67:6C:50:00:4F:30:58:B3:33
Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Certificate serial: 010D0C9F43285843BEC4749A6291F65579CCF6A0
Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/20210a5c-21a1-38f1-9fef-68be3555a81e.roa
Signing time: Wed 01 Nov 2023 16:11:37 +0000
ROA not before: Wed 01 Nov 2023 16:11:37 +0000
ROA not after: Tue 30 Jan 2024 17:11:37 +0000
asID: 8075
IP address blocks: 209.143.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:be:c4:74:9a:62:91:f6:55:79:cc:f6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Validity
Not Before: Nov 1 16:11:37 2023 GMT
Not After : Jan 30 17:11:37 2024 GMT
Subject: CN=3f7acfca-772d-4253-b652-463cebb72751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:49:ba:bb:53:cd:bf:df:da:bd:37:06:7d:
06:52:05:ca:75:d1:9a:3e:08:ce:ee:6c:9f:24:be:
3b:51:70:d3:f6:cf:b8:c7:de:47:b0:bf:04:49:0e:
a5:f3:3a:ef:7e:4c:21:9d:e0:6e:8a:dc:03:47:0d:
b2:ed:85:06:38:ed:9b:6e:dd:18:55:8e:35:5a:b9:
c5:90:83:9f:9b:7a:60:c1:89:e4:b4:8e:cd:26:df:
c7:ee:3a:9b:36:24:f0:76:51:9e:47:6b:b5:7b:c5:
73:cd:fc:e1:9c:ac:04:90:6c:1e:25:99:74:4d:fc:
ed:d2:c7:08:ea:55:2e:41:5e:b2:e2:6a:63:d6:ac:
d4:66:4e:66:70:92:7a:1d:17:cf:da:06:c8:b6:c5:
b6:0d:ec:3b:e6:c6:06:45:92:80:11:81:89:e6:91:
c8:30:41:da:8e:29:ef:6f:02:eb:47:d3:c4:e4:0a:
d1:0a:18:27:ea:f3:27:68:9a:43:bc:6b:fc:e7:06:
61:94:a9:03:a0:15:35:27:41:45:02:9a:53:9a:b5:
61:18:d1:4c:83:ee:0e:34:4f:9d:55:3b:84:ea:73:
f5:62:da:8c:96:01:36:3a:80:e8:50:e0:7a:30:71:
2c:eb:1d:a8:1e:75:44:5a:62:7b:44:92:fe:50:a1:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B2:74:4E:4C:81:C5:19:47:0D:AC:67:6C:50:00:4F:30:58:B3:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/20210a5c-21a1-38f1-9fef-68be3555a81e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl
X509v3 Authority Key Identifier:
keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:17:f4:dc:a2:b3:67:8e:2b:1f:cc:38:f5:4f:4a:91:73:c9:
29:52:18:6f:bd:47:c1:86:74:2c:fc:e3:50:8d:39:6c:a6:44:
4f:af:5b:00:1d:15:b6:54:dd:16:63:bb:d1:56:2e:0a:fe:29:
c2:fe:de:21:c1:3e:0f:2d:9c:d8:b5:60:a5:8a:7d:c9:4b:6e:
cc:61:4f:05:39:55:14:98:af:ef:28:91:7d:41:56:d6:72:97:
f4:4b:d5:99:19:2d:ea:bb:5d:3c:7e:56:a8:8d:51:8b:f7:f3:
aa:97:52:9b:5f:07:eb:26:46:68:ac:16:2c:e1:e4:a3:dc:b0:
2f:32:0b:ae:12:0c:92:19:ce:bb:36:5d:1d:c3:c2:83:96:8d:
50:d2:22:a3:1c:b8:28:19:b9:11:bc:06:15:3f:d6:46:17:04:
aa:aa:d5:d6:75:c8:59:57:11:97:fb:1c:40:4d:1f:69:16:33:
42:e4:9b:be:60:7e:c5:7c:19:e0:4f:3c:a0:f1:44:c8:18:56:
01:84:e1:df:f8:2a:44:81:5d:55:07:21:cd:10:ba:be:68:b3:
13:e2:9d:bf:9a:3d:4d:f3:1f:75:b1:19:49:e6:1a:e8:53:77:
b9:97:b1:27:3d:17:99:03:43:b4:ec:d0:cf:a4:d3:9e:16:d3:
64:82:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org