Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/873aaadf-a272-3a28-865d-7e4d47f8fa89.roa
File: 873aaadf-a272-3a28-865d-7e4d47f8fa89.roa (raw, json)
Hash identifier: Dd5taIyRrV3sivg+rD6y2FMF8k3iDtpqrMWszR1BQXY=
Subject key identifier: 35:BA:F6:55:FF:81:4A:FA:24:39:56:E3:B7:16:21:81:F9:04:82:7F
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F43285844423F8E3B537A36977DE3D280
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/873aaadf-a272-3a28-865d-7e4d47f8fa89.roa
Signing time: Mon 18 Dec 2023 18:30:33 +0000
ROA not before: Mon 18 Dec 2023 18:30:33 +0000
ROA not after: Sun 17 Mar 2024 17:30:33 +0000
asID: 400544
IP address blocks: 104.156.128.0/24 maxlen: 24
2607:76c0:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:42:3f:8e:3b:53:7a:36:97:7d:e3:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Dec 18 18:30:33 2023 GMT
Not After : Mar 17 17:30:33 2024 GMT
Subject: CN=aa130f5b-5fca-4bd5-8e56-1e91dc4964da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:b2:37:32:1b:7b:2b:49:38:1d:d5:ef:c9:
a2:1a:9a:40:37:f8:da:c3:4a:a3:cd:8f:89:18:25:
df:ee:d3:65:1c:88:ab:02:ec:3f:35:1d:85:8a:55:
b3:05:eb:d9:5c:5e:ed:76:2b:38:15:0a:81:c5:ff:
80:98:fa:0b:1f:3b:cb:89:6b:76:9d:9f:99:6f:d1:
81:24:b6:0b:d9:45:71:13:18:05:04:8d:8a:95:11:
8d:5b:04:61:0c:93:f4:a9:6a:0f:7c:25:1a:8d:be:
34:9b:6a:0b:08:0e:98:69:9a:60:d9:eb:fd:81:7b:
84:25:ca:30:92:ba:2f:b6:da:14:08:19:4e:5f:68:
f1:02:0d:fa:0d:9c:ad:ac:38:2e:bf:5b:92:8a:46:
4b:84:b0:2a:71:60:9e:71:2f:3f:14:f3:97:49:93:
ee:47:48:81:b8:97:20:4d:4d:17:81:df:00:aa:75:
e0:e1:46:5e:c7:a7:a2:4d:6a:dd:22:3c:6b:c5:90:
4e:61:18:dd:54:62:da:ba:e3:43:cc:f9:53:76:ca:
23:b8:12:dc:e9:e3:ec:eb:34:5e:32:0f:7c:32:75:
61:ba:e5:45:6c:90:8a:bc:93:3f:2d:98:03:6a:3a:
af:fb:1f:cb:5d:f6:97:81:09:3e:4e:38:43:ec:a3:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:F6:55:FF:81:4A:FA:24:39:56:E3:B7:16:21:81:F9:04:82:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/873aaadf-a272-3a28-865d-7e4d47f8fa89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.128.0/24
IPv6:
2607:76c0:a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7a:43:df:2d:09:68:9c:a5:25:c4:7a:fd:46:93:1f:a3:2b:
bd:e8:19:39:4f:50:97:14:a4:5b:a4:9e:0e:97:ae:1e:6f:9c:
76:e4:26:51:74:ae:4c:75:f9:8d:cf:ee:41:5b:dd:c8:1b:f9:
b1:a0:37:64:ac:e1:1d:42:bc:7a:56:a2:c7:09:93:41:62:24:
97:8c:9d:ec:e7:a6:eb:4e:76:b1:b6:50:cb:71:66:62:ad:27:
ba:11:64:8a:3d:a6:65:51:63:90:44:f7:85:e7:d1:89:22:41:
30:07:aa:0c:0f:44:2c:01:a4:3c:3f:7d:30:80:10:71:67:80:
38:99:a4:82:6b:f6:98:38:4a:05:2e:10:a1:15:32:13:3c:16:
25:d5:cf:f5:a4:b1:4a:5c:1a:96:0f:53:6c:13:22:07:26:96:
cd:13:43:f7:1e:7a:f6:16:68:22:51:00:e6:44:1e:35:56:4b:
66:98:cb:95:20:da:90:c8:aa:ac:67:a8:ed:ea:1c:5f:dd:41:
d3:03:2f:f4:fd:af:61:86:b6:5c:77:d8:a9:bd:be:98:9c:d3:
4a:a4:62:8c:2f:e3:33:8c:1e:bc:42:a5:b2:95:b9:66:88:ff:
0d:75:60:ef:ec:76:e4:1c:67:de:9e:ed:b0:43:92:cb:2e:43:
0a:d1:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org