Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/b47deff8-cf7e-31c9-843f-b84db0a4b852.roa
File: b47deff8-cf7e-31c9-843f-b84db0a4b852.roa (raw, json)
Hash identifier: M7v9NcU4lDSrqPgKBvdSlDanMeRCY8JI4FT2n5Z34tw=
Subject key identifier: BE:5A:A3:51:74:05:2B:5F:D5:7C:01:E6:09:3F:89:0E:73:97:2B:E7
Certificate issuer: /CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d
Certificate serial: 010D0C9F43285841E9E16A58DEE93F18C0BEDB00
Authority key identifier: 83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/b47deff8-cf7e-31c9-843f-b84db0a4b852.roa
Signing time: Wed 17 May 2023 17:15:51 +0000
ROA not before: Wed 17 May 2023 17:15:51 +0000
ROA not after: Tue 15 Aug 2023 17:15:51 +0000
asID: 52000
IP address blocks: 23.152.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e9:e1:6a:58:de:e9:3f:18:c0:be:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d
Validity
Not Before: May 17 17:15:51 2023 GMT
Not After : Aug 15 17:15:51 2023 GMT
Subject: CN=a7d442fd-7787-48b7-a5e3-2261a7e002cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:fb:db:4b:8a:d0:77:2e:47:4f:56:2c:73:
40:a2:a4:f8:b8:9c:2c:18:fb:b6:33:82:e5:e0:ff:
51:05:47:d6:db:34:66:76:b6:2e:bf:4b:dc:d3:a3:
ee:a0:c7:bb:f1:3a:40:87:0f:ca:ef:f8:dd:6c:60:
ce:78:70:eb:45:3b:cd:f6:cd:fe:20:09:99:10:78:
eb:d5:28:77:4d:fb:1a:8c:55:ec:90:df:bd:59:14:
5a:0a:24:91:58:79:78:bb:68:91:1f:ce:a3:98:e1:
14:1b:a4:b1:8c:f1:d5:21:15:a6:47:20:7b:82:9f:
fe:35:ef:c3:36:94:8b:e3:fe:7d:76:60:0e:7d:c5:
72:3f:e7:9d:00:c0:18:2d:fc:a1:34:b2:bb:ff:fd:
b3:bd:cd:f9:ae:8a:e1:36:e2:d8:cc:07:41:ab:bd:
d5:bb:e8:72:06:58:a3:b7:b8:13:15:19:e4:c7:bf:
cc:c6:c0:ed:1e:b9:1c:66:eb:11:d7:5b:bd:5f:6d:
14:23:b0:09:f8:81:41:b5:a5:53:56:68:c5:1b:c5:
93:81:d0:ef:b6:bc:67:d5:46:b6:41:16:ce:30:56:
06:3d:4b:54:3b:1c:88:68:78:2f:cd:0c:6f:24:6c:
52:ef:8a:61:7e:9d:42:a9:76:40:6e:a9:8e:b2:8e:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:A3:51:74:05:2B:5F:D5:7C:01:E6:09:3F:89:0E:73:97:2B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/b47deff8-cf7e-31c9-843f-b84db0a4b852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl
X509v3 Authority Key Identifier:
keyid:83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:9d:5b:b3:be:94:9c:12:bb:1d:0d:27:67:c4:46:e0:ef:cf:
32:ac:2c:d5:6e:af:89:39:69:e4:79:2f:3a:45:17:c1:0f:2e:
0a:6c:89:8c:d6:6d:20:98:0d:d2:f2:ec:f5:1e:51:6f:9a:23:
cb:db:f3:33:64:be:c2:4f:bf:30:42:80:16:8b:fd:bf:72:24:
8b:06:d2:63:ef:bd:df:31:b1:47:70:18:2a:23:b5:16:ac:d5:
62:0d:ad:d6:0b:0c:cc:9e:03:85:b8:ab:5e:b0:2b:27:ac:46:
22:e1:c2:2c:2b:7d:80:43:3f:81:a9:eb:b1:a0:33:77:d0:a4:
d8:f0:08:09:9d:09:c5:ca:18:5f:0d:35:b9:dc:05:fb:26:5d:
2c:40:70:45:4f:16:80:32:2b:ac:e1:b2:6a:7c:2e:68:b3:e7:
59:0d:e2:46:ae:db:2d:a5:8d:3b:b5:5f:33:4c:e6:a9:47:44:
ce:d1:fa:23:f9:19:0b:6e:6a:1c:a6:10:81:67:9a:66:8d:93:
c6:12:d6:0e:46:45:0b:79:22:31:47:b3:79:92:e3:be:1a:83:
b1:31:35:05:67:ca:8c:6f:12:62:8b:2d:ca:55:75:f8:ed:43:
7c:ff:5d:3e:99:db:08:a6:0c:41:75:15:a6:9f:52:71:11:f7:
2b:2a:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org