Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/8670f938-6eee-3bd1-8722-df434539e04f.roa
File: 8670f938-6eee-3bd1-8722-df434539e04f.roa (raw, json)
Hash identifier: esS3p4egI4j9Sr2pUkXTMXuCF6gjJ2EPhYrf1NGZRoQ=
Subject key identifier: 80:84:6C:E4:89:CD:30:C6:21:C7:6C:DA:DB:B8:B4:92:E2:AC:F0:3A
Certificate issuer: /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial: 010D0C9F432858444D23444A8641760613553200
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/8670f938-6eee-3bd1-8722-df434539e04f.roa
Signing time: Fri 22 Dec 2023 16:07:26 +0000
ROA not before: Fri 22 Dec 2023 16:07:26 +0000
ROA not after: Thu 21 Mar 2024 15:07:26 +0000
asID: 40102
IP address blocks: 160.253.0.0/16 maxlen: 16
160.253.0.0/18 maxlen: 18
160.253.64.0/18 maxlen: 18
160.253.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:4d:23:44:4a:86:41:76:06:13:55:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
Validity
Not Before: Dec 22 16:07:26 2023 GMT
Not After : Mar 21 15:07:26 2024 GMT
Subject: CN=06b13b5c-8056-4f96-819f-ca495ec59ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:2b:5a:50:20:9c:ce:6f:bb:b8:b6:18:22:
8c:67:69:cb:87:84:64:b5:f4:1f:53:9d:97:4e:21:
cd:03:d7:28:2e:ee:24:89:5c:9e:ae:40:cf:47:e7:
5d:c4:1f:6f:36:c5:4a:86:77:e7:e8:50:1b:75:be:
21:ce:c6:e5:ae:1e:79:77:f5:c3:51:0e:4e:95:b3:
96:6e:b2:6f:06:f4:1c:65:11:31:05:0a:2b:8c:07:
e0:fc:1f:2a:9e:dd:53:15:b7:05:9b:ce:55:49:52:
89:75:89:d8:cd:41:f8:d3:6e:72:5b:13:6c:69:e6:
4c:67:49:3a:0c:99:86:2d:23:7a:0d:9e:d1:23:7d:
e5:09:25:38:29:1c:23:f9:7e:7b:cf:f1:ad:ed:ab:
36:34:81:c3:fe:b5:0d:09:4b:1e:40:d5:96:01:42:
ec:4d:79:9c:0c:b8:4a:60:95:3f:17:ff:8f:a5:ad:
8c:ec:f8:60:71:40:71:f4:15:a6:4e:b4:91:27:4d:
11:75:2c:e5:f2:72:27:cb:ea:76:85:2b:69:cc:e0:
8c:a1:2f:5d:b4:08:33:c0:c3:51:3a:e2:3e:a9:a4:
11:16:b4:4c:23:bb:9a:13:3f:af:91:e9:bf:57:3d:
a8:fd:04:58:85:39:56:e6:ac:48:c2:af:f4:4e:d0:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:84:6C:E4:89:CD:30:C6:21:C7:6C:DA:DB:B8:B4:92:E2:AC:F0:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/8670f938-6eee-3bd1-8722-df434539e04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
X509v3 Authority Key Identifier:
keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fb:ac:db:2b:61:ff:6d:87:16:a0:fa:36:1d:4d:51:f2:af:
b1:3b:dc:09:7b:53:38:b6:4e:55:ae:2b:28:f0:e4:72:51:54:
7b:2b:cf:bd:47:8d:6f:4d:9a:c9:2f:df:f7:7f:b3:eb:65:0f:
07:d3:29:62:11:51:8b:40:42:e1:91:9d:04:45:0c:c8:61:bb:
5e:77:96:1c:4d:11:c9:dd:ea:23:a8:df:b8:a1:f2:57:b8:a2:
83:51:1e:27:4b:f4:f6:c8:46:dd:cb:66:6c:e4:61:ed:52:79:
d0:6e:59:ab:26:5e:26:59:a8:b6:a2:a6:a5:77:8f:4f:0c:11:
3a:f8:05:87:6a:ad:a9:15:b3:3e:47:86:e5:9a:6e:4e:60:45:
5e:f9:37:12:75:34:6e:09:2a:d1:be:da:e4:83:9b:53:e3:59:
a5:dd:75:72:1c:41:d8:cc:87:1d:99:d9:b7:f6:a3:79:94:8c:
83:67:dd:b5:90:5e:37:73:a9:b6:ee:a9:cc:f2:1c:9d:22:b5:
55:18:7a:56:0b:52:9c:53:1e:ab:1e:e8:9f:c9:b3:2d:c7:ce:
9d:ff:04:c6:5b:e5:cc:92:b1:81:0d:56:7e:48:04:5b:bf:b7:
8b:f5:cb:f7:72:46:b6:dc:26:4b:4e:68:17:a2:70:7f:eb:71:
3d:05:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org