Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/0e2cf195-facc-319c-8d45-8615eedcf7e4.roa
File: 0e2cf195-facc-319c-8d45-8615eedcf7e4.roa (raw, json)
Hash identifier: XpyKyiXOCE0mSsMdSUKTW18sztuzyQC0V1jVHsbmLNc=
Subject key identifier: 1B:66:1A:F0:D5:7F:BF:2F:41:9C:F4:71:38:96:D4:60:6F:18:A3:EB
Certificate issuer: /CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Certificate serial: 010D0C9F43285843F6A0E4601A66595C998BDC00
Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/0e2cf195-facc-319c-8d45-8615eedcf7e4.roa
Signing time: Tue 21 Nov 2023 16:25:14 +0000
ROA not before: Tue 21 Nov 2023 16:25:14 +0000
ROA not after: Mon 19 Feb 2024 16:25:14 +0000
asID: 31898
IP address blocks: 206.168.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f6:a0:e4:60:1a:66:59:5c:99:8b:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Validity
Not Before: Nov 21 16:25:14 2023 GMT
Not After : Feb 19 16:25:14 2024 GMT
Subject: CN=412baf30-0d7e-4be4-a378-1f384d34cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:d2:c8:13:4b:4c:74:0d:19:ff:c2:06:a2:
70:65:8d:c2:78:54:15:37:b0:8c:f0:0f:9e:ce:d3:
5e:83:92:71:41:27:e7:4f:e2:68:f0:5c:73:b7:55:
a6:4a:01:c5:7d:12:da:47:18:7a:bc:17:8f:87:f7:
98:2f:43:8a:a4:d4:fe:5f:a6:80:7c:0a:b5:62:d9:
10:c6:b1:27:34:4e:73:c6:14:74:d6:26:94:c7:69:
97:20:a3:2c:45:09:b9:5f:b6:32:21:7e:32:f8:46:
ce:0f:78:eb:53:ef:53:25:d1:af:14:99:4e:c8:2c:
23:ba:dc:f9:ee:fd:ed:34:39:54:69:d2:6e:2e:b1:
43:03:f1:bb:cf:c3:a5:58:7a:b8:1f:c2:5e:3f:2f:
26:ca:0f:81:81:5c:15:4d:10:67:92:50:f5:73:ef:
65:9b:65:2b:6f:fe:28:5f:0f:41:42:7e:71:39:1a:
ad:ce:61:23:b8:29:ff:24:30:8d:4f:93:32:5b:0e:
ed:ae:b8:7c:4b:28:ae:69:11:6b:4c:b0:3e:67:46:
8a:de:6d:0f:1e:96:f9:2a:02:53:20:e3:bb:c0:92:
cb:72:e6:c8:b5:06:da:e3:1c:0d:f3:ef:29:7e:5f:
fb:97:ff:0d:95:85:ae:24:89:31:4d:2f:76:96:4f:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:1A:F0:D5:7F:BF:2F:41:9C:F4:71:38:96:D4:60:6F:18:A3:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/0e2cf195-facc-319c-8d45-8615eedcf7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl
X509v3 Authority Key Identifier:
keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d5:02:ac:ea:59:f9:24:3f:99:d9:0d:6c:3c:46:d7:0f:85:
01:72:a8:c9:e1:14:8d:3e:ae:fb:ce:82:b1:54:57:f0:fb:71:
f1:f2:ba:14:0b:57:57:de:f5:55:13:f0:ad:c7:65:22:44:14:
f6:36:cb:14:17:21:42:2f:cb:00:54:29:68:cc:31:4d:d1:a1:
79:4a:5c:fb:62:e2:b9:90:9d:24:4c:bd:45:c8:80:74:56:ba:
c8:e2:90:bc:e8:c2:c9:4b:99:5a:c9:25:2b:12:6b:40:97:1a:
d9:9f:50:f7:99:53:be:3f:e9:9c:d7:f0:fc:d1:c1:a2:61:b9:
d3:66:20:0e:37:77:4d:83:4a:1f:9a:05:ab:42:d3:f0:5c:51:
15:18:18:d9:82:c6:68:92:20:e4:f7:2f:08:85:89:a4:19:e6:
49:cf:79:b0:98:5f:d4:0d:71:3e:e7:bd:97:39:07:6e:c5:f9:
63:14:93:d0:87:0b:4f:d1:b8:bf:e5:50:90:91:8c:a0:87:ad:
90:f6:26:4b:4e:60:df:9e:0f:ec:0d:3b:4c:be:b9:a3:2d:2f:
ef:eb:b2:39:49:20:37:e9:43:7f:ac:21:40:3d:cd:11:e3:ce:
c8:48:17:26:9c:ba:cd:7d:71:61:74:33:a4:bf:f9:2d:b9:20:
05:67:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org