Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/afa773c6-c41a-3feb-bde3-875a72f18de6.roa
File: afa773c6-c41a-3feb-bde3-875a72f18de6.roa (raw, json)
Hash identifier: lSTGRJx74M+qCTYCgT9g4Lv/4hhJCtJurCgLXEtzPeM=
Subject key identifier: BB:5E:9C:A4:5E:76:19:4C:0F:79:AF:F6:AB:52:E5:64:62:25:B1:AE
Certificate issuer: /CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Certificate serial: 010D0C9F432858441E1EA1D5542B4BAB2199B200
Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/afa773c6-c41a-3feb-bde3-875a72f18de6.roa
Signing time: Tue 05 Dec 2023 19:55:06 +0000
ROA not before: Tue 05 Dec 2023 19:55:06 +0000
ROA not after: Mon 04 Mar 2024 19:55:06 +0000
asID: 20073
IP address blocks: 206.168.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1e:1e:a1:d5:54:2b:4b:ab:21:99:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Validity
Not Before: Dec 5 19:55:06 2023 GMT
Not After : Mar 4 19:55:06 2024 GMT
Subject: CN=6985ad0a-f4c8-472d-b234-f528218b126a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:7c:0a:ce:97:d2:5c:30:5b:5c:a6:53:f6:
dc:ed:31:58:1d:19:43:c3:eb:b7:27:46:93:71:6e:
f4:35:64:f9:14:0f:e2:d5:f4:cd:1e:38:a5:4b:7e:
cd:84:63:e4:2f:e7:8d:56:10:b0:5f:e6:3a:f6:2f:
08:33:f5:44:17:65:cb:4c:0f:87:f5:78:d2:45:a3:
08:8e:a2:ed:f2:6d:45:4e:4d:ae:6e:86:3d:f9:77:
a5:02:1f:48:00:6e:f8:bf:6e:96:55:57:62:a5:08:
9a:30:88:66:db:eb:4a:45:51:21:e8:05:e5:27:74:
91:ab:97:6b:5f:97:87:0e:bf:89:9a:98:ed:ae:45:
e8:ad:04:08:6d:b6:03:e5:1a:25:65:9c:41:94:c5:
57:4d:75:20:27:29:92:60:6a:a5:dd:2a:de:65:94:
85:ba:dc:1f:a8:c3:ea:51:00:ca:c9:0b:8d:f2:19:
a6:ef:ee:d2:9b:0b:e0:b8:b1:e3:1e:96:91:b5:28:
a9:c9:54:d1:76:64:30:65:ba:06:83:05:09:66:d7:
f1:77:ef:2c:af:36:f2:88:a9:dd:ff:6f:db:99:69:
f6:ef:54:41:0b:a7:30:19:e5:f5:bd:90:bc:0d:9f:
c2:9e:5e:0e:4a:73:a4:9e:b3:5c:3b:6f:99:a3:4c:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:9C:A4:5E:76:19:4C:0F:79:AF:F6:AB:52:E5:64:62:25:B1:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/afa773c6-c41a-3feb-bde3-875a72f18de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl
X509v3 Authority Key Identifier:
keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:58:db:56:a5:1b:67:67:28:59:d7:55:e5:cd:84:9c:05:90:
00:71:8b:de:d3:0a:44:57:0b:11:ec:30:f2:92:25:7b:2d:24:
9c:d7:15:a7:69:97:a9:c1:06:44:86:77:c7:06:14:2d:69:5c:
44:20:b2:b6:62:e3:ab:d5:d0:ef:9c:ba:3a:b7:41:2d:23:ff:
67:26:29:90:fb:99:bc:af:8f:51:13:fb:5e:7e:07:d9:be:6b:
cb:67:61:1c:06:9d:3b:4d:71:60:64:0e:98:02:73:89:c9:59:
e3:f3:7d:86:f9:a9:ae:f3:95:6f:27:fd:e6:0e:35:cc:19:3e:
35:27:0c:92:3c:78:fc:35:09:93:2f:41:51:22:74:1d:fd:23:
4e:ee:95:38:32:78:a7:a4:1d:63:97:3c:86:ec:83:f8:2b:78:
ab:1c:96:d1:61:00:3e:53:8a:e0:2f:ae:a3:02:ed:7a:56:72:
ad:05:ba:85:5e:a9:47:6e:67:42:9b:1e:0d:ee:90:be:f2:d3:
16:dd:4e:43:92:85:08:74:b1:df:a4:e9:29:ce:3f:08:66:88:
8e:1f:46:d2:16:99:2a:ef:9b:0f:8c:89:9a:85:be:47:92:7f:
0b:14:ae:ca:a6:9c:d3:b5:3c:06:42:2b:2e:63:fd:be:d2:ed:
51:c0:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org