Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/b0ca679a-2fd7-36fa-91d7-45adbb72d048.roa
File: b0ca679a-2fd7-36fa-91d7-45adbb72d048.roa (raw, json)
Hash identifier: KrFhtp/d7AhyOl6PgHu3xWpr/mMJ6fr9OaPOVgZ8sao=
Subject key identifier: 0B:0C:16:BE:88:1D:71:90:86:EC:D8:2D:3D:10:D7:6C:9D:33:E4:C6
Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
Certificate serial: 010D0C9F43285843F4D37D761DD6913926FE31A0
Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/b0ca679a-2fd7-36fa-91d7-45adbb72d048.roa
Signing time: Tue 21 Nov 2023 00:55:34 +0000
ROA not before: Tue 21 Nov 2023 00:55:34 +0000
ROA not after: Mon 19 Feb 2024 00:55:34 +0000
asID: 61317
IP address blocks: 23.165.24.0/24 maxlen: 24
2602:816:7000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f4:d3:7d:76:1d:d6:91:39:26:fe:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
Validity
Not Before: Nov 21 00:55:34 2023 GMT
Not After : Feb 19 00:55:34 2024 GMT
Subject: CN=49080a9d-6a6e-48bd-94af-b1cae299d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:e5:fa:b5:54:4e:81:e0:65:ae:6c:b7:20:
79:ee:83:97:90:39:60:10:14:2f:2f:8d:57:6d:cd:
7b:49:f4:16:16:7a:9e:7c:dc:8a:8f:b8:89:dc:87:
2e:5d:52:0f:8a:ca:c7:b5:15:0b:9c:0e:fd:aa:e2:
e6:26:c3:0c:7f:0f:07:ad:50:fe:bf:f2:bc:a8:f8:
30:5f:45:a9:20:68:fb:3d:52:a4:5b:48:9c:29:f8:
f7:40:e1:81:f2:83:1f:3a:24:62:b9:da:21:87:09:
38:e2:ed:96:c3:3d:d4:35:34:17:62:d5:04:55:6c:
7e:57:f9:e9:46:b5:8f:4e:50:2b:41:5e:60:20:86:
d0:01:10:aa:a7:74:0d:ba:63:2a:c2:4f:3e:69:3c:
6d:e3:5a:f5:85:36:ff:45:b6:05:21:1f:71:ce:7f:
6e:78:79:64:77:87:f3:b0:9c:9a:c0:92:a1:98:d5:
dd:68:c6:21:22:fd:99:60:93:fe:d0:9e:6b:fa:bf:
e6:a7:16:20:8f:1e:df:ce:cb:ee:4e:ef:3a:eb:21:
2a:7a:a2:51:26:36:f7:f9:a9:30:eb:47:0c:c8:1b:
f1:1c:b3:ed:ff:08:d3:e0:b7:0a:6f:f6:e6:63:8f:
66:0d:d8:51:61:a0:c1:b3:25:32:60:4d:8f:62:0c:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:16:BE:88:1D:71:90:86:EC:D8:2D:3D:10:D7:6C:9D:33:E4:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/b0ca679a-2fd7-36fa-91d7-45adbb72d048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl
X509v3 Authority Key Identifier:
keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.24.0/24
IPv6:
2602:816:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:69:6e:77:df:71:34:65:06:0a:50:f0:43:f2:ff:90:5a:27:
73:ad:1f:cd:a5:69:e2:5a:b0:09:32:05:0e:dc:50:eb:a1:80:
42:10:c0:28:3e:99:52:76:70:a6:ae:4e:d6:41:fd:df:e3:ef:
52:77:87:29:5f:40:1c:59:b7:38:75:45:54:be:b7:dd:f8:88:
a3:b6:dd:1f:79:c2:b1:c1:15:58:17:57:24:89:ce:eb:08:bd:
f5:f1:46:5a:11:69:c2:79:3f:b2:77:20:18:76:ac:70:3e:cb:
67:b4:77:a7:cc:0a:29:50:37:07:d6:c9:d5:c8:a5:38:a4:b7:
57:0a:24:5e:04:28:29:1b:4b:d4:9f:ab:40:b7:13:0e:38:5d:
0d:ca:2f:a9:7c:01:86:cf:ab:42:8f:0a:c5:d6:a2:0c:69:fc:
40:62:29:92:04:e7:a8:d2:dd:6d:73:00:e5:1f:1f:0b:fd:72:
b4:95:48:0f:87:08:38:3b:14:8d:18:54:24:16:11:aa:23:81:
8f:a2:6f:ea:42:b9:e2:d5:81:a9:de:3a:ce:88:5b:f8:61:e2:
77:ce:d3:7c:f8:8e:43:a1:bc:52:35:58:95:44:fb:e5:ea:51:
2a:81:86:83:0a:72:bb:49:2c:e5:5a:c8:ca:fb:47:84:58:bd:
5c:4f:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org