Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa
File: 95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa (raw, json)
Hash identifier: 0SXKAk9YQPCXzR/qNiiFsBYVZPnhK3juV0IGouvLqW0=
Subject key identifier: B8:0E:92:D5:21:B7:A3:78:87:EE:60:62:AD:7D:BA:E1:E3:17:C3:B0
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F432858429878F7E0E1111C7CC34E0E80
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa
Signing time: Wed 19 Jul 2023 06:11:52 +0000
ROA not before: Wed 19 Jul 2023 06:11:52 +0000
ROA not after: Tue 17 Oct 2023 06:11:52 +0000
asID: 30221
IP address blocks: 63.247.144.0/20 maxlen: 24
68.68.192.0/20 maxlen: 24
68.68.208.0/21 maxlen: 24
68.68.216.0/24 maxlen: 24
68.68.218.0/24 maxlen: 24
68.68.220.0/24 maxlen: 24
208.122.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:98:78:f7:e0:e1:11:1c:7c:c3:4e:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Jul 19 06:11:52 2023 GMT
Not After : Oct 17 06:11:52 2023 GMT
Subject: CN=b4150d75-92cd-4e7a-bf84-d3f9f821ac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:08:cd:c9:d8:ba:f3:1a:f5:07:60:07:6c:
e0:d4:12:59:fa:f1:ef:46:b2:ab:41:38:a7:0f:18:
d8:31:33:51:ba:ed:a7:4e:cc:59:27:3e:3b:fb:10:
9c:25:1e:22:1a:d5:a9:40:2a:46:23:a5:29:84:a5:
ca:31:19:93:36:ef:1a:4b:da:0e:fe:7d:f8:75:0e:
02:33:36:aa:a8:ba:4f:91:65:9a:b8:28:ef:26:c6:
db:c2:05:55:f4:14:d0:6b:c0:1b:c3:05:c4:7a:4f:
26:6c:1e:6e:00:bd:2d:77:80:b9:81:26:e1:1f:eb:
08:22:be:07:d0:23:95:f5:d4:a4:e0:4b:89:48:bb:
f7:f5:23:97:31:24:34:46:9a:c2:75:9d:0a:a5:9c:
ff:0c:b5:8d:03:59:c5:7d:fd:cf:be:47:93:82:44:
63:40:34:96:1d:12:3c:de:61:f9:8a:ee:00:14:94:
4a:38:eb:6f:35:69:61:15:9c:52:e2:cb:0b:68:23:
25:20:16:98:36:37:1a:c9:b2:75:df:2a:87:9d:d3:
6e:fb:35:9e:21:3f:5d:af:0b:89:8f:2c:86:43:68:
b5:44:12:2c:7a:ff:29:3c:e1:e2:a9:7d:ce:08:44:
0f:c0:6f:bc:44:f9:ba:74:37:4e:c9:3f:dd:34:97:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:92:D5:21:B7:A3:78:87:EE:60:62:AD:7D:BA:E1:E3:17:C3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
63.247.144.0/20
68.68.192.0-68.68.216.255
68.68.218.0/24
68.68.220.0/24
208.122.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8f:86:79:08:84:fc:86:ed:e2:fb:fb:7f:8a:2f:b7:55:61:
73:89:84:a4:05:65:4d:34:e3:e9:28:2d:64:f9:45:c2:65:0b:
72:f1:d0:3c:29:1c:a7:3c:5c:f2:97:0c:0c:55:75:94:d1:6e:
bd:f6:eb:f8:be:d8:82:7a:ab:fb:b4:89:48:ed:91:f3:38:d1:
d3:aa:89:29:c7:4f:de:82:21:ee:dc:ee:d7:ba:b0:c7:0f:dd:
08:84:a6:cc:93:a4:26:2a:5c:68:1a:26:7d:af:b9:e2:1a:c1:
fc:28:53:a0:98:48:76:99:ce:97:3f:47:27:ce:07:91:ad:8d:
da:c2:71:31:99:38:54:a0:14:5d:f1:eb:7d:74:2a:5c:78:70:
50:ac:da:70:06:fd:16:69:c6:d0:08:29:12:d2:c9:c8:2d:cd:
29:20:d4:2f:21:bc:01:b1:7b:59:66:e0:87:af:96:7c:9e:d6:
d1:3d:67:16:65:a8:6a:67:e5:4f:64:40:77:78:99:d3:7a:68:
87:15:36:38:b7:26:80:dd:78:30:48:2e:e1:e2:30:e6:d8:88:
ec:a2:f1:76:c8:e8:af:c8:a5:cd:f2:f3:57:72:a0:00:43:b8:
e2:ba:01:bf:46:55:59:31:41:38:01:9b:31:ca:ad:75:40:2f:
73:91:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org