Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a140a016-47c7-3f0e-8cfc-5dfee221d8f4.roa
File: a140a016-47c7-3f0e-8cfc-5dfee221d8f4.roa (raw, json)
Hash identifier: Ec5Na6vKX16jJRXaEAvYwl/8WhIHynxDnp63FOx67bo=
Subject key identifier: A8:1D:62:B2:3F:53:25:AE:6A:89:1C:9B:DF:C3:72:AC:C5:FD:C0:DB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BFE6708A6FB3D183DA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a140a016-47c7-3f0e-8cfc-5dfee221d8f4.roa
Signing time: Tue 26 Sep 2023 19:22:52 +0000
ROA not before: Tue 26 Sep 2023 19:22:52 +0000
ROA not after: Mon 25 Dec 2023 20:22:52 +0000
asID: 4200397215
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:bf:e6:70:8a:6f:b3:d1:83:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:52 2023 GMT
Not After : Dec 25 20:22:52 2023 GMT
Subject: CN=e0dded41-9108-4b30-9f58-f4160ff2f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:5f:e0:14:2d:0c:ce:02:dd:45:3f:84:4c:
05:cb:9a:96:0f:69:92:ce:ed:e4:0c:ba:ff:b4:90:
51:50:92:c9:66:b9:0e:9b:32:a4:25:10:05:59:39:
44:a9:d5:73:f1:37:fd:c8:a9:eb:a3:b1:9d:f6:d2:
ee:3d:0a:72:1a:d5:d6:0f:a4:b8:1b:15:12:c3:5d:
e5:54:11:aa:f2:32:13:1b:ce:e2:45:ed:c7:f5:91:
5e:ea:18:27:3a:31:c8:ca:85:24:2d:22:e0:dd:f7:
e1:5b:1f:10:fd:83:c3:8a:21:96:fa:41:8d:58:99:
88:ff:4c:02:08:05:cc:95:03:95:c3:80:bf:78:a2:
f3:d4:dc:d6:82:15:1c:de:94:8e:35:a8:ef:d3:46:
86:89:a6:85:64:5c:3d:2d:9a:61:48:76:04:1b:03:
c9:12:ee:fb:88:3b:c8:75:00:53:39:49:cb:fe:24:
a0:8c:07:36:07:cd:d9:45:1b:87:d1:47:26:10:7a:
38:96:64:02:46:25:dc:71:fe:90:d1:0b:c5:de:2c:
00:8f:4a:f2:6c:e0:a2:f1:64:55:8b:40:fc:4b:6e:
ad:f6:f2:b1:d7:39:fe:e0:cc:4c:95:b3:10:9f:76:
d0:fb:14:5b:e6:14:05:89:70:8a:96:b6:da:ed:13:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:62:B2:3F:53:25:AE:6A:89:1C:9B:DF:C3:72:AC:C5:FD:C0:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a140a016-47c7-3f0e-8cfc-5dfee221d8f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:09:49:f2:e2:df:12:2b:e8:d0:7c:80:4f:38:ae:28:b5:5f:
17:c2:8e:38:2f:eb:73:24:70:15:5b:8c:3e:06:af:a2:0e:d6:
3f:d0:f2:af:64:42:97:5f:79:e0:4c:8e:26:1d:42:6d:04:e2:
fa:17:d4:9a:49:87:2c:88:8a:e3:af:7c:6d:82:4d:70:33:f4:
cf:d8:0f:47:da:a5:9b:23:97:15:a5:e3:81:19:aa:a3:5d:2e:
86:fc:fb:d0:63:fa:99:c8:38:15:12:3f:98:79:53:72:73:2d:
a6:8e:fd:65:0a:c2:e0:cd:32:c2:eb:3e:c5:af:6d:4f:8f:0f:
80:5d:e9:32:8f:20:32:cb:8a:da:c4:dd:22:ab:1e:06:e4:7d:
42:44:37:d3:e0:e0:c0:52:3f:d2:aa:fb:39:c3:8d:be:8c:02:
b7:70:b2:f3:e0:1c:f8:f8:81:71:44:5a:98:d6:cc:81:fa:b1:
28:3b:ff:fa:7e:4b:33:bf:07:ca:de:4e:a3:f5:06:09:61:94:
c1:f6:8e:e4:85:47:b2:2b:f4:c7:cd:b4:97:db:fb:25:b6:0f:
54:51:62:5b:9c:2a:6a:b4:cc:99:f8:ac:d8:90:37:2c:33:aa:
29:f5:37:67:ea:80:8a:f3:05:7e:04:3d:e4:c1:93:d8:cf:3e:
a7:bf:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org