Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/9d9f66ed-1015-3fd5-b2fc-309ed6be397d.roa
File: 9d9f66ed-1015-3fd5-b2fc-309ed6be397d.roa (raw, json)
Hash identifier: MhCHOHI+lDzrglfmI9OBSdbRGIkTp7Ko5hhVqtExG6Y=
Subject key identifier: 13:23:3B:64:3E:60:B5:0B:70:ED:9C:91:7C:CF:DA:C6:C3:1E:D3:9D
Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial: 010D0C9F43285843E0ED435F8107364A3EA85000
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/9d9f66ed-1015-3fd5-b2fc-309ed6be397d.roa
Signing time: Mon 13 Nov 2023 21:51:20 +0000
ROA not before: Mon 13 Nov 2023 21:51:20 +0000
ROA not after: Sun 11 Feb 2024 21:51:20 +0000
asID: 3555
IP address blocks: 198.137.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e0:ed:43:5f:81:07:36:4a:3e:a8:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Validity
Not Before: Nov 13 21:51:20 2023 GMT
Not After : Feb 11 21:51:20 2024 GMT
Subject: CN=21c860d7-fad0-47bd-b5fc-abb5a16dd802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:44:d9:36:a5:ce:af:c5:b7:65:51:91:dd:
76:a7:68:4c:09:9f:f0:50:26:4a:c6:a2:1b:30:a2:
bc:95:c4:a9:c4:a5:9f:04:96:a6:56:9a:55:d7:03:
c7:4f:bc:07:bf:87:8f:9f:5b:b9:85:12:12:85:6a:
4a:94:5d:02:e4:9d:a4:ec:43:98:9c:cb:2c:e9:de:
34:2d:17:95:e5:fe:d9:9b:f7:92:a7:dc:e7:bd:ff:
58:a0:c4:ee:25:28:e5:85:55:eb:36:98:a3:a1:eb:
b6:47:68:1a:2b:2f:28:a8:fa:e2:24:a1:0f:8f:7e:
af:bb:9d:0b:f0:32:c3:1c:a0:b5:ec:3e:58:17:2a:
26:8c:f2:d0:95:65:e1:f5:66:2c:5b:c5:a8:cf:7e:
16:5e:59:be:4b:0c:9e:c1:41:cb:1e:13:6f:87:3f:
0b:8c:b5:ea:93:fb:70:b2:0d:5d:76:2b:26:4f:5e:
93:c1:8f:d8:7d:0c:82:e1:a2:25:f8:98:be:1f:d9:
b1:a2:d1:12:68:62:48:61:98:ed:c1:b3:7f:ac:3f:
6b:8f:d6:25:7a:7e:43:df:a6:57:69:a7:b8:f3:b5:
3f:6b:1e:22:b3:a1:68:eb:7b:46:af:98:19:7d:6b:
c5:0b:38:d2:8d:05:41:65:d5:16:d2:3e:f6:50:c5:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:3B:64:3E:60:B5:0B:70:ED:9C:91:7C:CF:DA:C6:C3:1E:D3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/9d9f66ed-1015-3fd5-b2fc-309ed6be397d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
X509v3 Authority Key Identifier:
keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.137.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e3:43:ed:5d:be:f2:3b:25:b6:c3:d4:67:28:dd:3f:36:26:
2e:a8:e2:f3:4a:d8:3b:79:34:56:ce:58:0f:5f:3b:9f:8e:51:
36:82:68:53:89:be:d1:c1:e8:70:7a:64:42:a8:18:29:fc:70:
41:2b:4e:22:58:62:0a:29:e0:63:5f:ee:9f:e2:f9:8c:1a:a8:
24:67:48:5d:4b:f1:ca:79:3b:69:dd:2c:49:6c:60:9e:27:b7:
47:cb:49:b4:c8:93:4a:2f:00:56:ba:c9:6a:86:94:12:70:d2:
b4:45:be:d3:06:67:ae:c2:66:4c:2f:00:5a:e3:30:e8:8a:d6:
e0:34:4a:24:20:df:c1:98:cb:13:c7:c3:b9:c8:96:fc:73:69:
4d:57:fa:0d:c2:b5:9e:18:cf:2b:6e:c5:bb:03:36:cb:f2:b4:
38:aa:cf:ef:e0:65:1e:e4:e3:ca:6a:52:c3:c9:bb:ab:74:27:
cb:75:49:e4:ec:0f:22:7f:03:50:06:50:74:1b:cf:d3:49:55:
7d:8c:b1:c1:87:aa:12:31:13:f1:b2:1d:e9:0b:00:59:af:f9:
21:59:0c:89:34:72:a2:df:c5:64:fe:fb:49:b6:4a:c5:0d:e5:
71:c0:0b:0f:b4:e3:bb:91:23:49:13:03:ee:8d:fd:d0:ad:8e:
b7:25:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org