Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa
File: d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa (raw, json)
Hash identifier: f8K3WZ07ZXd3J0lowHRMIwmzIjNNS7nmrSw/URLn/4s=
Subject key identifier: 82:66:43:09:5B:B2:BD:3B:CE:1D:02:AB:5B:78:D4:86:51:09:3A:32
Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial: 010D0C9F432858442F2A482B4F02B06DBEE1F500
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa
Signing time: Mon 11 Dec 2023 22:27:19 +0000
ROA not before: Mon 11 Dec 2023 22:27:19 +0000
ROA not after: Sun 10 Mar 2024 21:27:19 +0000
asID: 271
IP address blocks: 204.239.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2f:2a:48:2b:4f:02:b0:6d:be:e1:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Validity
Not Before: Dec 11 22:27:19 2023 GMT
Not After : Mar 10 21:27:19 2024 GMT
Subject: CN=a993e239-baee-42ea-9685-4d3e0192071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:28:6d:3c:dc:11:04:5f:be:ab:af:df:1e:
fb:00:73:00:63:12:ba:b1:28:7b:fa:67:eb:a2:c9:
c0:a8:fb:a1:5d:8f:3d:37:0f:b3:5d:b0:12:df:5b:
2f:60:eb:1e:fa:af:8b:03:a8:e7:88:cc:2d:27:5a:
89:ec:30:32:06:ae:a0:60:19:56:aa:de:ec:69:8d:
e7:00:b0:3e:11:cc:13:bb:6b:8e:af:f7:34:96:d5:
74:da:bf:de:31:fd:d9:58:84:c4:f7:d7:ea:ac:df:
6f:0a:6c:78:f8:98:d1:11:42:c3:a1:1d:26:9d:d6:
05:b1:07:fc:22:47:79:a7:73:2c:1e:6f:be:1e:14:
61:60:b3:28:77:41:d2:66:70:17:18:d6:83:15:95:
82:1c:dc:40:31:12:f4:8e:33:21:78:94:c9:bd:ac:
b0:f2:e5:c2:d6:f1:d2:3c:a7:a3:f7:bf:27:dd:2b:
36:d4:1a:12:20:3e:fb:2d:df:31:ac:60:46:fe:e6:
5c:95:80:ed:c5:f4:a6:84:59:11:45:49:fb:92:f4:
e9:8b:dd:8a:7c:ab:b3:c2:2c:f3:77:86:83:43:79:
43:2a:29:71:1d:22:13:b2:b2:ed:06:ba:4e:15:1f:
80:ba:1b:81:d3:a1:86:29:11:39:02:68:d5:ba:ee:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:43:09:5B:B2:BD:3B:CE:1D:02:AB:5B:78:D4:86:51:09:3A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
X509v3 Authority Key Identifier:
keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:30:d6:d5:a6:d7:a3:56:8f:ef:01:11:12:95:5d:86:ed:17:
2b:19:d2:ec:1d:df:d3:40:c2:92:79:af:94:16:72:bb:73:a9:
84:53:ca:13:fc:df:0b:8c:77:73:81:48:7d:db:e7:c6:96:a4:
4a:d4:95:d5:58:85:d3:4b:f5:fc:2e:8e:55:f5:15:71:df:dd:
5b:53:64:cc:18:3c:e7:fb:12:2c:8b:86:9a:58:6a:5f:08:2f:
02:5a:b2:f0:99:d1:9b:19:cd:61:58:9c:86:fe:69:15:e4:3a:
26:92:73:bf:b0:d0:b0:21:fa:0d:f0:80:f9:67:e8:7e:6f:20:
a2:7d:66:e3:47:1e:0f:a1:d0:6b:9e:db:d7:fa:2a:cc:86:da:
cf:bf:cc:c1:7b:07:b2:a5:b5:5f:c4:76:5d:00:24:aa:27:c9:
34:1a:15:a3:fa:b4:3a:8c:b9:80:c8:ce:a5:86:30:3e:32:a8:
4e:01:a6:ac:79:2a:b5:1f:24:27:fd:99:cb:82:4b:39:00:b5:
c8:4b:c4:4c:31:ad:01:4c:53:95:75:61:96:2f:22:ec:22:49:
a7:bb:bb:80:53:ed:f0:4d:44:4b:46:4a:27:a2:32:43:1d:6c:
a4:09:a3:83:78:00:6d:69:11:1f:f8:98:69:f1:87:23:c2:fa:
64:e4:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org