Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/fb3e8253-a4f7-3a46-9565-aeef6d44fae4.roa
File: fb3e8253-a4f7-3a46-9565-aeef6d44fae4.roa (raw, json)
Hash identifier: 8+XqpmDUJExBRVf7fhW206l419jXsU0sENfyL9Kak3s=
Subject key identifier: 1E:1D:B1:F3:44:28:60:01:8C:5F:70:C1:9F:87:84:76:98:19:CC:21
Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial: 010D0C9F43285844743B28FFBEBFBD3907678780
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/fb3e8253-a4f7-3a46-9565-aeef6d44fae4.roa
Signing time: Fri 05 Jan 2024 16:12:06 +0000
ROA not before: Fri 05 Jan 2024 16:12:06 +0000
ROA not after: Thu 04 Apr 2024 15:12:06 +0000
asID: 23393
IP address blocks: 104.37.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:74:3b:28:ff:be:bf:bd:39:07:67:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Validity
Not Before: Jan 5 16:12:06 2024 GMT
Not After : Apr 4 15:12:06 2024 GMT
Subject: CN=6f6ebf5f-c29d-4c04-b649-61b407f4acb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:bd:ad:cf:74:56:01:cc:90:2d:e0:84:62:
af:7d:25:c0:95:98:2c:0f:31:4b:89:01:d9:2c:33:
c4:4b:d3:54:a3:d1:28:b2:e4:12:e9:6b:b8:48:f5:
ac:58:e4:e1:ba:31:bf:cd:9c:d6:7e:1a:09:cd:c3:
71:41:1a:16:51:7e:23:89:c2:2e:ba:a7:7e:be:33:
e3:16:5f:67:30:e0:ce:d2:89:ca:8c:c1:12:d0:47:
38:44:68:29:4a:46:6b:6b:d4:70:80:ee:35:c5:ca:
0f:2a:be:bd:e2:29:1d:f7:07:f3:41:d6:ca:f0:e3:
86:47:54:8b:d4:e0:af:2e:35:7c:2d:5c:74:8a:7e:
6c:84:0f:7d:f4:57:1e:b8:2d:9a:8c:4b:5f:e9:b1:
9a:45:38:3f:1c:95:57:1c:26:89:82:4d:df:12:02:
3f:2f:ce:e1:2c:03:d1:c0:8f:69:5d:f0:5e:b8:8d:
57:7d:af:90:58:31:20:4f:59:d2:b2:65:53:75:7b:
93:bb:13:62:90:79:30:1a:bc:aa:e8:2a:1d:8f:c7:
15:6d:01:2c:32:c7:95:b7:e9:61:3d:f7:09:e4:ed:
69:f3:62:dc:4d:0e:6d:49:19:9b:03:7d:d1:bb:d3:
40:e6:f3:37:7b:f9:41:2a:e1:c9:ac:fe:cd:a7:2d:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:B1:F3:44:28:60:01:8C:5F:70:C1:9F:87:84:76:98:19:CC:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/fb3e8253-a4f7-3a46-9565-aeef6d44fae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl
X509v3 Authority Key Identifier:
keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a5:2c:49:ae:23:28:0e:44:47:ed:92:0e:2c:5f:78:52:b1:
05:73:dd:22:bd:e6:98:1f:4e:64:20:67:fd:18:46:08:9f:0f:
0d:e7:99:db:57:03:a7:8d:79:6a:9b:19:0f:00:b4:b3:3c:c7:
d4:48:83:8d:5b:3f:50:71:58:b9:fd:94:e4:04:a0:66:a8:42:
14:c5:cf:45:80:d6:f7:f9:ae:59:0b:a0:0e:98:88:c9:f0:d7:
f9:09:8a:37:a8:c6:53:c6:19:08:4d:05:4d:fb:82:7f:bf:52:
bc:47:e0:62:a9:f2:78:95:3d:04:20:24:a6:2f:7a:06:e9:82:
bf:ce:82:b7:40:b0:3c:03:95:7b:7d:10:d4:e3:6d:5d:c0:98:
c0:ae:f6:13:d2:5c:24:49:dc:e4:88:f6:d9:b9:9a:68:0b:e3:
41:72:d9:22:03:36:f3:2c:7a:04:84:98:77:4b:4f:c7:bc:9b:
82:c5:b1:6b:b7:0f:e1:47:7d:42:34:cf:b6:08:7e:96:69:d0:
9e:3c:d3:86:82:b2:21:c0:8b:fc:d3:a5:fc:30:63:1c:e3:5e:
04:30:a8:ea:06:df:eb:b3:24:2f:c8:f5:f4:a1:03:6b:9d:dd:
b6:a8:6d:4f:c1:31:d2:68:72:f2:6c:ba:ec:c9:b5:21:73:a1:
fe:0f:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org