Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3b579f76-4dc3-3dc6-82b2-c15a0972c476.roa
File: 3b579f76-4dc3-3dc6-82b2-c15a0972c476.roa (raw, json)
Hash identifier: klPi4u4hKH4FL5uc9+y/5m/JPWTcGPsfiwwUmTayyR4=
Subject key identifier: E4:9A:F2:13:A3:8B:7A:49:CB:12:39:D2:F5:75:A3:9B:ED:B5:DA:AE
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285841EA8C5FD2E681A04D90BE7880
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3b579f76-4dc3-3dc6-82b2-c15a0972c476.roa
Signing time: Wed 17 May 2023 23:00:19 +0000
ROA not before: Wed 17 May 2023 23:00:19 +0000
ROA not after: Tue 15 Aug 2023 23:00:19 +0000
asID: 17358
IP address blocks: 216.24.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ea:8c:5f:d2:e6:81:a0:4d:90:be:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: May 17 23:00:19 2023 GMT
Not After : Aug 15 23:00:19 2023 GMT
Subject: CN=5ed58018-f945-4a7f-8f69-33186960a03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:1c:a8:5f:a2:cf:e9:8b:03:46:b7:53:ef:
88:c1:2d:70:b7:33:81:9a:51:e4:5d:8b:87:84:79:
1f:ec:78:4c:5f:ba:78:6e:f4:2a:0c:4e:2f:95:87:
3f:61:4e:f5:b9:fb:2c:db:bd:26:48:07:cf:6b:ca:
04:a3:19:89:11:de:43:75:f4:80:61:cc:aa:38:3e:
d5:33:23:34:08:73:3e:b9:c2:8c:be:e6:af:b9:94:
21:34:16:95:67:97:a6:6a:3a:64:79:eb:c6:d4:2c:
43:80:68:82:0a:13:cd:88:fd:2d:76:f1:de:b9:d5:
2a:76:eb:97:3b:18:46:ee:79:42:9a:e7:6b:0e:23:
95:6e:84:bc:00:e2:e3:e1:f7:d5:a8:ee:43:78:22:
89:9b:90:59:5d:6f:5c:eb:b0:e1:8e:2b:ec:80:c7:
f6:16:99:c9:79:c6:bf:cb:28:2a:08:6f:ea:b1:13:
da:11:12:7d:1e:4a:1a:c1:f3:27:19:7e:a4:8b:03:
e9:be:77:0f:6d:7f:c9:b6:35:2a:90:d9:ef:2a:9c:
8c:59:27:8a:92:bd:c8:ed:3d:90:96:cc:f1:93:06:
b1:07:ab:18:5a:dc:bf:b0:39:f1:11:9a:e1:8d:27:
90:9b:fb:2e:3f:cb:80:55:9a:bb:e2:e9:5b:b6:c2:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:F2:13:A3:8B:7A:49:CB:12:39:D2:F5:75:A3:9B:ED:B5:DA:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3b579f76-4dc3-3dc6-82b2-c15a0972c476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:08:66:16:5c:91:ce:ec:72:4e:bb:53:01:e7:dc:8e:d8:b8:
04:07:c6:ed:f1:e2:ce:ca:a0:52:f2:8c:c2:97:c8:91:87:d6:
79:b3:a3:4e:ea:e1:1b:1c:96:ef:91:05:d8:c7:e0:b8:cd:f3:
ac:78:0c:7f:3c:61:90:b7:e1:07:4b:54:9a:42:af:d7:c0:c0:
57:33:f4:32:2f:8b:e0:87:e0:f7:7c:b7:b4:b4:3c:28:1c:8e:
37:a2:4b:46:3a:d0:23:a7:67:c3:06:cd:0c:34:e1:b4:dc:e8:
58:8d:6c:f6:ac:c4:ae:27:dc:dc:a0:f6:0e:67:6f:bf:c4:95:
a5:a5:54:7f:56:c9:9e:f5:92:f2:15:3d:9c:9f:55:57:17:66:
5c:66:66:b6:ab:e4:bc:dd:0b:f1:cd:75:ec:0c:32:a8:54:b1:
6d:3d:a2:bf:64:aa:ee:70:4c:b6:14:f6:69:11:78:63:03:c0:
23:33:b2:67:52:21:b8:d1:ce:34:54:4a:d2:ed:dc:1b:59:2d:
43:b7:6e:eb:c3:7d:75:69:8f:54:bd:65:12:96:47:b6:ca:d6:
8c:f0:a9:91:8e:79:15:21:63:79:7f:0c:41:75:1c:40:4d:c7:
90:3b:75:60:78:2e:5b:73:49:59:ae:3f:25:55:55:16:e5:5f:
2b:81:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org