Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/574c2fb7-49fd-3406-89b0-19fda47d9702.roa
File: 574c2fb7-49fd-3406-89b0-19fda47d9702.roa (raw, json)
Hash identifier: Fk0SQVWlWlIj7gyQ+tLq8F4pUUsMQTBIXQYOz/g0kfs=
Subject key identifier: C8:44:81:22:3F:A2:B6:25:05:C0:3C:43:86:FB:10:F1:46:86:8E:47
Certificate issuer: /CN=f3280fa0-3649-4902-978e-e7711edc5a33
Certificate serial: 010D0C9F432858447FB90374C6CDAFB3B1B36B80
Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/574c2fb7-49fd-3406-89b0-19fda47d9702.roa
Signing time: Tue 09 Jan 2024 18:59:35 +0000
ROA not before: Tue 09 Jan 2024 18:59:35 +0000
ROA not after: Mon 08 Apr 2024 17:59:35 +0000
asID: 64515
IP address blocks: 141.195.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7f:b9:03:74:c6:cd:af:b3:b1:b3:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33
Validity
Not Before: Jan 9 18:59:35 2024 GMT
Not After : Apr 8 17:59:35 2024 GMT
Subject: CN=e4b010f8-1fde-45e9-aad7-2dc66fa327a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:ea:e3:53:58:86:0c:4c:52:a4:c6:ae:33:
2e:cc:21:a8:69:da:7c:50:33:60:39:93:28:a5:e0:
02:ed:b1:5d:d4:7e:5c:f8:72:83:5c:f3:da:2f:7e:
83:27:6f:a9:4c:b1:75:41:da:9a:fa:93:04:7b:db:
08:49:22:6c:e9:e2:fe:c8:b0:b8:6a:11:fe:18:17:
66:d3:f5:28:b6:79:33:c3:c7:52:0c:60:e1:1e:85:
86:85:ca:4f:4c:5d:48:cb:38:29:ca:49:71:b7:8b:
1e:cc:69:40:f9:0e:83:2b:27:84:55:e7:fd:3b:a0:
4a:93:c3:88:12:f9:25:f7:4a:39:2b:71:5c:dc:97:
34:5f:8b:e7:65:1b:dc:51:b7:99:47:ba:88:f6:3a:
33:55:1a:03:fe:c7:4b:48:a4:4b:97:a8:5f:dc:9a:
80:1c:70:c0:ab:50:fb:aa:5d:db:04:5e:c5:21:91:
de:65:dc:e4:e6:3a:db:c6:8f:17:64:c3:bd:a5:c6:
a1:fe:71:94:5f:b2:6f:ee:23:ff:e9:a1:48:bc:94:
de:92:35:49:eb:d9:3a:a2:6a:87:76:e6:09:0b:cf:
0c:36:4d:20:b7:60:94:ad:2e:a0:bc:08:75:c6:4f:
86:65:f4:66:1d:bc:55:c9:c8:87:cd:48:0a:ae:2d:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:81:22:3F:A2:B6:25:05:C0:3C:43:86:FB:10:F1:46:86:8E:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/574c2fb7-49fd-3406-89b0-19fda47d9702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl
X509v3 Authority Key Identifier:
keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f0:4f:38:bb:06:3a:0e:0a:59:bc:47:94:25:b1:78:10:a7:
05:b0:a3:df:0c:09:53:4a:58:e8:83:26:ba:f5:79:22:1f:39:
fe:d1:0f:5e:d5:f5:13:98:c9:9d:55:c1:96:c7:e4:bb:0b:05:
55:15:46:93:6f:40:ee:0e:44:1c:ca:01:a0:bc:1b:65:19:70:
20:41:a5:0b:c3:51:a7:70:3d:63:c9:b4:ad:5d:da:3a:f1:11:
f3:f7:ac:55:87:af:35:af:e2:de:81:11:0c:f6:01:7e:4f:90:
4b:32:04:8f:1e:d3:07:b5:0d:3a:14:60:4d:c2:10:f5:54:3b:
32:e8:6d:e1:47:cc:c7:27:ce:09:45:3e:2f:68:44:4e:f2:06:
33:a7:2e:ed:aa:75:94:60:ea:2c:14:de:b7:e8:e3:1b:5e:25:
63:3a:25:4e:78:65:95:08:f3:ab:2d:ab:9a:f6:e3:f6:62:42:
d2:5c:c4:58:c1:f8:db:fc:d3:08:85:9c:40:75:a9:3f:33:c2:
69:03:0b:b4:b3:8f:31:78:12:bb:cb:72:fe:8b:ac:fd:6f:9a:
ed:a8:0b:6b:f6:7b:b9:0f:a1:db:36:e5:93:5a:7a:92:d8:f7:
a4:3b:fa:84:5d:66:b8:14:44:c1:6e:f5:a1:21:1e:44:e4:e2:
86:04:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org