Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/8066ae2a-d9b0-3f99-94a8-394879b33aba.roa
File: 8066ae2a-d9b0-3f99-94a8-394879b33aba.roa (raw, json)
Hash identifier: mIO64ETSKZrPzuyTRRO6Ae2tHRntXxBSlPXAA2/2m3o=
Subject key identifier: D4:FB:FF:97:99:3A:1C:D5:CC:0A:CA:C5:E1:F5:98:3F:3D:89:21:8D
Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial: 010D0C9F43285844D5B5E65F2F1D78B40BCB3280
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/8066ae2a-d9b0-3f99-94a8-394879b33aba.roa
Signing time: Fri 09 Feb 2024 14:12:49 +0000
ROA not before: Fri 09 Feb 2024 14:12:49 +0000
ROA not after: Thu 09 May 2024 13:12:49 +0000
asID: 63375
IP address blocks: 23.165.120.0/24 maxlen: 24
2602:f9eb::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d5:b5:e6:5f:2f:1d:78:b4:0b:cb:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Validity
Not Before: Feb 9 14:12:49 2024 GMT
Not After : May 9 13:12:49 2024 GMT
Subject: CN=8ef9dac9-e78c-40ea-9722-ae939da70562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:5b:f2:39:0c:58:57:bf:61:08:c5:03:ce:
4a:4d:b2:3a:c9:82:3c:62:fc:2e:1b:67:da:3c:a7:
08:b3:56:88:e2:a3:8b:46:05:76:fb:b8:98:2c:09:
aa:29:3a:d2:bc:9c:f2:d5:a4:a5:39:af:2d:6d:42:
f4:9e:a9:35:d5:20:e7:f4:40:51:6e:0c:3b:54:2b:
44:20:fe:95:81:2f:b8:bb:2e:1b:73:74:0c:e5:6c:
81:3e:43:fb:f4:69:c2:82:4a:5d:20:b7:54:86:2b:
57:35:c2:bd:06:7d:da:3f:d8:b1:82:47:df:b6:ee:
e0:91:93:fa:70:94:13:2f:44:37:b8:e6:5f:ea:4f:
f7:20:d1:7f:86:f7:2b:38:36:ed:c5:f8:19:b2:ab:
21:40:73:b2:60:0d:15:ef:98:ac:ed:3e:b4:6e:c3:
fa:dd:66:d5:12:64:01:e4:8b:e9:b7:a5:81:22:3a:
b6:a2:41:c2:7b:e4:1a:d4:6f:95:6e:6e:8d:2d:cb:
ec:8d:56:be:5f:cc:77:3f:4a:a8:b3:62:a3:21:d3:
57:cf:36:75:6b:de:b9:5a:8d:d7:3a:73:87:f7:2a:
9a:bc:1f:be:50:04:c6:b0:11:8e:b0:01:fe:ce:82:
ed:17:bd:90:38:0a:61:a3:67:e8:33:c6:0e:6f:03:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:FF:97:99:3A:1C:D5:CC:0A:CA:C5:E1:F5:98:3F:3D:89:21:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/8066ae2a-d9b0-3f99-94a8-394879b33aba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl
X509v3 Authority Key Identifier:
keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.120.0/24
IPv6:
2602:f9eb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8d:4f:68:28:36:7d:49:61:35:18:71:cd:7a:50:8a:e3:84:
14:54:f5:78:37:bc:b6:b1:d6:9f:4b:c3:a4:84:bd:1b:d2:ea:
67:23:45:44:bc:5e:aa:2b:3a:55:0b:8f:25:01:33:21:83:02:
28:3c:f6:f1:be:fe:cd:ee:26:38:5c:5f:e2:12:a9:aa:f3:2f:
00:09:b1:8f:e2:57:d3:6a:fe:84:bd:00:29:89:89:3f:ec:88:
4d:aa:69:5f:da:33:84:d8:bf:24:ce:19:c4:0c:39:87:14:ad:
9a:c2:d9:6d:d7:19:6c:44:df:be:4b:fc:3e:f1:e4:87:96:22:
a6:4f:ff:c3:4c:b3:98:10:3c:34:4a:dd:f2:d3:a5:6f:33:78:
be:b0:e9:da:9d:a9:54:6e:7a:81:fa:96:78:64:ca:f3:46:4a:
c8:cc:f4:3c:77:a4:3e:a3:8e:92:58:df:7a:75:6b:34:ec:e8:
e9:9a:a2:d2:aa:67:72:48:4e:e5:56:d0:34:7b:1c:4a:8a:77:
73:c3:0b:a5:e5:bb:b7:e8:b9:ab:ba:a6:09:22:e9:23:90:5f:
1b:37:da:b3:b3:9a:31:0a:b9:85:39:d8:cd:59:e1:0a:f7:be:
e9:76:d9:e1:64:9c:8b:0d:22:cd:ed:4a:f5:ac:db:ab:c7:a7:
e7:02:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org