Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa
File: c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa (raw, json)
Hash identifier: 8HPC0JffTWetXoIyEzW5JadDtuqgW+JVp77nAOnJBVo=
Subject key identifier: 87:F3:BC:97:BC:F1:A3:32:7D:D9:AD:E5:57:9E:45:8B:8A:F0:02:2D
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F432858435FFD891FF4F68BF66E14B620
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa
Signing time: Thu 28 Sep 2023 17:24:50 +0000
ROA not before: Thu 28 Sep 2023 17:24:50 +0000
ROA not after: Wed 27 Dec 2023 18:24:50 +0000
asID: 0
IP address blocks: 128.254.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5f:fd:89:1f:f4:f6:8b:f6:6e:14:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Sep 28 17:24:50 2023 GMT
Not After : Dec 27 18:24:50 2023 GMT
Subject: CN=0aab86ed-c5a3-4962-af7c-ad905e6fd9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:f0:bd:20:a0:fe:68:e8:8f:63:4d:03:ec:
35:02:92:42:9e:4c:a3:79:5c:eb:54:2b:71:6f:51:
4c:20:2e:f9:d6:2c:78:25:ce:36:83:b0:d7:0a:e5:
b2:e4:29:14:85:45:bc:83:9a:df:4a:5c:5c:e2:c2:
f9:7a:6a:0a:3e:55:e0:a5:e7:17:f4:d8:7a:9a:b9:
bd:dc:08:43:ee:c8:e8:6b:ad:ee:45:64:be:d0:9d:
75:09:5b:cd:8f:d4:29:61:16:04:fc:8f:83:5e:3a:
71:c3:4f:29:fe:a0:d5:86:8f:55:ad:aa:ac:d6:e9:
ee:c1:c6:e3:ef:49:ab:67:10:55:07:13:fd:02:bc:
36:14:19:ab:50:82:63:9f:c1:78:b6:c4:d5:fa:45:
80:a0:1f:9b:fc:96:7c:3c:43:0b:0c:c5:14:11:58:
e2:63:99:21:d1:6c:a1:e6:c8:8d:0b:8f:c1:40:49:
fb:05:e3:a2:66:e8:de:15:0a:c7:20:01:6a:e6:fe:
e5:85:f2:a0:e8:46:29:00:6b:08:22:74:9c:db:0c:
97:65:4d:73:19:d7:c9:42:fe:6b:85:da:a3:04:7f:
72:5e:41:64:1b:ed:3f:94:2c:ce:82:ac:ca:da:7b:
6e:e3:8d:0f:9c:94:fe:99:05:e1:ca:cc:08:dd:69:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:BC:97:BC:F1:A3:32:7D:D9:AD:E5:57:9E:45:8B:8A:F0:02:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c4504d3b-c281-3ca5-9d7b-14d07853eb03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:1e:63:8f:81:ac:80:3e:56:eb:25:79:92:77:93:b3:90:79:
02:46:cf:bb:81:2a:d9:02:85:b4:85:ff:f8:f5:82:52:a8:6d:
96:5e:46:05:31:c3:69:f2:0b:31:96:26:d2:96:7b:cc:86:26:
2c:1a:0b:13:fb:c1:e4:8b:50:cf:42:e3:b6:df:95:d9:5d:00:
f9:2a:49:be:31:a3:07:c9:08:4d:08:8c:32:90:12:92:d5:64:
43:bc:45:32:cd:39:e2:64:39:68:ce:33:06:26:d4:3b:31:8d:
16:df:f0:40:65:7c:d7:31:4a:72:81:21:43:3f:f6:90:5a:7b:
be:2f:66:5d:ce:25:ff:2f:00:f3:ed:c9:8a:e5:af:c0:75:b8:
62:7b:4a:4f:fd:d2:fc:c4:62:f4:db:fd:65:89:90:06:95:9f:
7b:f9:fc:58:98:08:d7:ce:4e:23:28:98:d0:0f:4f:f1:dd:46:
4f:dd:74:59:a2:a1:85:3e:c9:5b:78:64:1d:d2:77:06:3e:fe:
5d:dd:e2:6c:53:95:bb:d2:33:02:68:17:e6:f9:46:df:d6:ec:
b8:cf:e7:b8:36:cd:5c:18:eb:db:55:0b:c4:44:2d:13:b4:ab:
e5:12:98:2b:f1:1d:96:39:c0:0f:ca:5e:1e:7d:10:7c:0e:36:
35:a5:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org