Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7f1653b1-d2d9-3405-9c9e-29603bcd3767.roa
File: 7f1653b1-d2d9-3405-9c9e-29603bcd3767.roa (raw, json)
Hash identifier: QZFXK9suB99DcX4tqb3CkbwFF0PH5CjJXeutIUKGfoc=
Subject key identifier: 38:DD:61:DD:A8:5A:70:DD:EA:8C:94:9B:32:47:D9:B4:B1:38:29:C0
Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial: 010D0C9F43285844527996CACCBF58F151771500
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7f1653b1-d2d9-3405-9c9e-29603bcd3767.roa
Signing time: Sun 24 Dec 2023 14:00:20 +0000
ROA not before: Sun 24 Dec 2023 14:00:20 +0000
ROA not after: Sat 23 Mar 2024 13:00:20 +0000
asID: 174
IP address blocks: 199.192.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:52:79:96:ca:cc:bf:58:f1:51:77:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
Validity
Not Before: Dec 24 14:00:20 2023 GMT
Not After : Mar 23 13:00:20 2024 GMT
Subject: CN=0b148dd2-b398-4504-a288-d1b52c6be3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:97:0c:8d:32:00:06:39:e3:ed:c0:8d:86:
4e:8b:0b:ea:31:78:04:c0:f6:bf:6c:35:34:c9:1e:
6e:f4:9d:c6:18:26:7d:80:cc:99:0a:0c:cf:4c:4a:
54:e0:08:76:c4:50:af:d2:69:5b:98:91:3e:d7:5c:
3b:6c:89:04:67:32:82:b1:bb:a7:3e:4d:64:ad:e7:
71:9d:36:44:27:19:99:ca:ff:0f:44:4e:76:b0:d2:
14:51:32:b3:a1:27:a8:fb:d3:93:1f:36:88:42:08:
b8:79:a7:33:0d:7e:c7:c1:53:f8:83:be:28:43:1f:
a5:33:b6:da:b7:e3:c5:46:0f:d8:3d:ae:db:23:c4:
35:65:d9:47:3a:27:84:50:e5:2f:60:43:1d:2f:be:
89:67:a6:31:fa:0c:ef:58:d4:69:c2:1d:60:22:a2:
0a:58:30:14:68:b1:25:d1:4c:d0:0a:bf:7b:a6:5c:
b3:8c:74:ef:16:17:75:b3:a6:c5:28:b5:47:0c:33:
95:b3:2a:b6:d7:65:26:22:e3:55:6a:06:cd:87:f0:
6b:dc:f0:87:2e:e5:40:88:b0:d4:21:97:0b:6a:df:
00:cc:30:ed:4f:40:b0:e2:71:ab:1f:04:56:cb:de:
1a:d7:5f:aa:19:c8:d5:15:4a:63:69:06:21:0d:b5:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:61:DD:A8:5A:70:DD:EA:8C:94:9B:32:47:D9:B4:B1:38:29:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7f1653b1-d2d9-3405-9c9e-29603bcd3767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl
X509v3 Authority Key Identifier:
keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c5:01:da:96:f1:33:93:e0:59:ab:06:74:53:d4:26:e4:d2:
7a:a6:86:a7:ca:bd:e7:e9:04:75:d7:02:24:23:de:13:c0:1b:
45:4f:77:a6:12:f8:40:2c:20:76:f8:01:8a:b7:4b:d1:78:88:
00:2f:ab:f1:d4:ba:0c:e8:5b:85:15:ec:95:9c:57:29:9b:bd:
c7:ab:58:65:7b:4f:8d:85:2a:e8:1c:c7:4c:3a:71:ff:81:88:
a2:81:28:d5:08:ea:e1:da:1c:fd:98:f7:35:57:4d:02:6e:61:
0b:27:3c:33:ce:bf:d9:2a:33:62:c3:ab:d8:43:de:12:d1:18:
b4:53:7e:6e:cc:33:f7:8b:24:66:9c:f7:2d:20:fd:99:e4:e6:
c9:3b:97:70:10:c3:82:14:c6:f5:5b:05:b6:87:45:43:8c:d0:
86:5e:37:17:f8:aa:5e:58:f5:79:78:f7:09:fa:77:4b:31:26:
40:e4:97:09:f3:a9:22:36:90:77:b8:91:ba:8c:d8:64:55:1e:
f7:79:1d:dc:09:f2:12:5a:4b:d8:a3:d0:85:95:14:09:21:f8:
cb:d2:8a:53:73:a5:99:46:50:05:f2:df:4c:14:d0:27:5d:f2:
8e:86:76:a1:12:78:af:7c:8c:f6:e7:6b:ff:8f:69:30:1d:fc:
3d:e5:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org