Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/84f5dcfa-92f4-36dd-9990-7174ddd3c1c7.roa
File: 84f5dcfa-92f4-36dd-9990-7174ddd3c1c7.roa (raw, json)
Hash identifier: 9e/rfvn4Crq8ha+zP9ezoETcV0OTq/n/tV9xyXWZzSs=
Subject key identifier: 01:3D:B0:D5:21:5F:C3:17:B6:10:22:0F:AA:08:9B:F2:8A:C2:E1:C5
Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial: 010D0C9F432858439A7E385A9AA827D496AB3700
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/84f5dcfa-92f4-36dd-9990-7174ddd3c1c7.roa
Signing time: Thu 19 Oct 2023 16:21:00 +0000
ROA not before: Thu 19 Oct 2023 16:21:00 +0000
ROA not after: Wed 17 Jan 2024 17:21:00 +0000
asID: 14618
IP address blocks: 158.26.56.0/21 maxlen: 21
158.26.168.0/21 maxlen: 21
158.26.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:7e:38:5a:9a:a8:27:d4:96:ab:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
Validity
Not Before: Oct 19 16:21:00 2023 GMT
Not After : Jan 17 17:21:00 2024 GMT
Subject: CN=14c8c3c2-cae1-4cf1-b234-a126a372c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:eb:d4:a6:0e:46:78:b9:82:42:7c:ff:db:
38:9c:6a:49:6a:a4:04:d8:c6:c8:e5:cb:09:7c:5f:
a9:55:0e:1a:86:7c:aa:cc:c6:ad:fd:ff:e5:13:84:
b7:7e:15:12:0f:af:83:15:5d:1f:d6:4f:89:40:9c:
50:3a:fe:73:a2:2a:de:4b:19:31:a2:28:88:6b:6e:
46:b7:ea:f6:cd:64:7c:18:5d:76:e6:6f:26:34:51:
d3:56:75:f8:3c:92:ef:c5:e4:46:c0:22:e7:c3:55:
dc:17:49:fa:41:85:83:5c:b1:55:95:6e:ea:2f:8d:
db:3b:00:49:29:e7:67:51:a7:98:3d:27:b5:8d:da:
47:7b:75:4b:16:05:13:7a:4e:ae:6c:0d:ec:fe:f0:
a3:85:cd:fe:ae:c1:8c:3d:f3:45:4f:7f:a6:3b:43:
12:91:9d:05:05:00:e6:4c:cc:ae:fd:d3:fc:1a:f9:
b7:29:da:d8:53:e1:e1:5d:71:7c:de:b0:ca:9f:91:
cb:c3:aa:16:a1:21:da:11:db:54:0c:5f:a6:ef:2d:
c8:04:c8:07:ec:3d:e2:57:79:08:ed:1e:4d:2c:13:
55:63:df:37:12:fd:13:00:38:fd:a7:7d:1d:04:57:
28:a6:a3:d6:bb:5a:e1:79:47:2a:84:aa:c8:1e:85:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:B0:D5:21:5F:C3:17:B6:10:22:0F:AA:08:9B:F2:8A:C2:E1:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/84f5dcfa-92f4-36dd-9990-7174ddd3c1c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
X509v3 Authority Key Identifier:
keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.26.56.0/21
158.26.168.0/21
158.26.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:71:c7:6a:bd:b7:73:5e:fb:2d:33:a2:f0:d2:bc:cc:c6:d8:
54:8d:68:6c:40:79:86:11:03:1f:fe:cf:fc:46:bd:1f:c2:07:
a3:61:28:7c:a0:3c:16:83:e1:90:0a:7b:a5:29:06:69:51:87:
76:12:40:da:a9:8d:b4:24:a5:80:05:3b:3f:08:57:b7:1e:72:
e4:0b:87:49:55:7b:73:e8:3d:05:b7:f2:48:9b:d7:09:25:7b:
00:23:d9:f9:05:c5:4e:c7:3a:aa:60:e9:18:8e:c1:46:a3:cb:
32:91:0c:0c:bb:ec:98:47:13:75:e2:54:96:b6:95:54:9e:ae:
f6:87:fb:69:3e:b9:d6:fc:f1:b1:ec:c6:2d:aa:f7:c8:0f:90:
88:dc:a6:18:bc:8f:f0:cc:66:25:98:8e:57:43:c1:4e:59:c0:
7f:14:c1:d2:d0:3d:81:98:e6:a5:52:42:ab:ea:d0:01:0e:3b:
6b:d9:61:87:28:99:e9:a7:57:aa:7f:bf:90:97:d4:46:53:36:
16:fb:46:66:0a:cd:54:cc:2a:4e:b6:9d:87:e7:c6:f9:dc:c8:
da:57:8a:82:2c:c9:98:05:28:0c:9f:c6:ad:9b:1b:76:7e:2b:
ed:29:81:14:9d:c8:d4:d2:13:20:7a:25:44:c4:71:9f:6e:10:
89:ac:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org