Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16973b1a-4c25-3cdc-8018-f8ab2d3d5405.roa
File: 16973b1a-4c25-3cdc-8018-f8ab2d3d5405.roa (raw, json)
Hash identifier: S4isiRhSrTSZpEsRsNYhxapCDJXuO9GaQ7/1Iep6qAY=
Subject key identifier: 53:B9:2A:F2:99:ED:DA:56:8C:03:25:0E:85:E0:86:09:A0:E3:26:EB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD6E119E7F8897F60A1F180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16973b1a-4c25-3cdc-8018-f8ab2d3d5405.roa
Signing time: Tue 26 Sep 2023 21:07:54 +0000
ROA not before: Tue 26 Sep 2023 21:07:54 +0000
ROA not after: Mon 25 Dec 2023 22:07:54 +0000
asID: 4200397216
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d6:e1:19:e7:f8:89:7f:60:a1:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:07:54 2023 GMT
Not After : Dec 25 22:07:54 2023 GMT
Subject: CN=5d6e7b0b-12bd-4270-90a7-0bb85ba3526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:86:e5:fd:bf:88:a0:ed:87:84:4b:c9:ad:
45:1f:56:d8:d1:22:47:d5:d1:f7:46:48:c0:95:05:
91:2c:59:cd:3d:06:7a:a2:28:f2:e6:78:7f:67:3e:
45:37:28:8e:64:3e:d8:ed:ba:7e:a4:39:47:67:d3:
32:54:3f:66:13:b8:64:9d:8e:98:0d:8a:be:6a:23:
34:0f:00:db:a9:4f:75:99:97:8b:d8:d4:09:f6:c0:
16:ee:38:d5:be:74:39:52:da:a7:7d:cd:83:dc:75:
42:e0:61:88:81:4b:3f:97:f0:e1:02:d2:b0:37:15:
49:e2:f7:50:2f:b0:85:a5:98:fe:d4:17:d3:7c:ae:
c8:04:c1:0d:07:3f:ce:bc:10:3d:5a:a3:e3:92:a8:
d7:2e:81:e9:78:e6:b1:09:86:d5:64:a3:4d:23:b7:
e0:62:3d:d8:fb:45:f2:74:1d:0b:f1:86:0e:21:41:
88:f7:dc:d4:93:50:92:bc:8d:3b:2e:4b:35:eb:e2:
82:c4:ed:58:8b:58:9f:dd:6b:9e:5c:b8:65:b1:ff:
59:3b:f1:8b:3d:ec:cc:e3:c9:51:71:cc:f6:46:a8:
d6:86:a6:2c:44:b3:e6:63:b6:22:9b:ad:4b:04:4b:
ec:28:1b:01:53:b8:c6:5b:0f:d8:0a:53:94:24:c3:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:2A:F2:99:ED:DA:56:8C:03:25:0E:85:E0:86:09:A0:E3:26:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/16973b1a-4c25-3cdc-8018-f8ab2d3d5405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:29:11:46:82:b2:2c:44:f5:42:09:ea:21:82:f7:01:ab:23:
30:b9:dd:8f:7e:83:a7:f7:92:9d:ef:39:b1:76:4a:27:3e:b5:
0f:f4:bd:02:d2:cc:e3:2a:4b:9a:4f:2e:6d:25:11:c8:e9:95:
6e:2e:ee:b5:05:48:f5:bc:0b:13:10:47:bf:cb:a5:c1:9e:7d:
c3:43:9a:b3:33:9c:59:d1:a0:a6:26:a1:f1:83:6e:85:58:a4:
0c:ef:3f:07:80:86:df:21:7d:01:4e:fe:ed:d4:99:f5:b3:3f:
d3:9e:0c:5a:8f:2b:a4:f2:3d:fa:30:1a:f3:6e:98:51:3f:5e:
79:7d:33:85:ee:7b:ca:92:4a:5c:a7:cd:d7:97:5a:78:60:2b:
11:c9:48:b0:7c:13:3d:c1:a0:a2:11:46:6e:7a:16:79:d4:60:
68:07:61:3b:21:8c:67:92:02:f3:9c:c9:13:63:fa:6e:98:44:
a7:db:6b:04:64:a9:31:22:7f:02:07:4d:bd:d6:ff:44:50:d0:
6e:b0:63:d6:35:ea:d8:0c:d9:53:95:43:4a:b7:42:b2:8b:f5:
be:37:04:7a:cc:ad:9f:7d:6c:c8:61:6b:a5:96:35:e3:3e:67:
ad:af:f4:96:9f:ff:8c:2b:6c:cf:12:4d:88:d0:31:35:ce:62:
78:61:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org