Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a409766b-b1cf-3e38-9dc1-facf07fee2c7.roa
File: a409766b-b1cf-3e38-9dc1-facf07fee2c7.roa (raw, json)
Hash identifier: RPx23UcmFtxQzhIevGsUJsmy8JB5s7Js2o3p4EGjNog=
Subject key identifier: 3C:03:42:7B:2F:35:C5:63:02:C1:48:66:0B:8B:A5:2D:47:5F:45:DA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858419E9198B0577D15EE44CFE100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a409766b-b1cf-3e38-9dc1-facf07fee2c7.roa
Signing time: Sun 23 Apr 2023 12:00:00 +0000
ROA not before: Sun 23 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Apr 2023 04:00:00 +0000
asID: 397235
IP address blocks: 156.154.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:9e:91:98:b0:57:7d:15:ee:44:cf:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 23 12:00:00 2023 GMT
Not After : Apr 26 04:00:00 2023 GMT
Subject: CN=105481e8-7bfc-4f2d-828e-12a07c01e694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:f4:99:68:b4:f3:8d:d5:4b:70:81:5d:8d:
29:80:8e:8b:a8:69:05:f8:cd:66:88:e9:00:4c:c6:
3a:08:f9:95:cf:de:cd:19:ff:ad:0f:3e:44:50:48:
72:33:ec:df:26:f7:49:77:5e:36:9b:d2:e3:d4:ca:
e1:e1:fb:88:fa:0e:e2:0e:59:4c:72:62:1d:aa:26:
f7:3d:51:e8:85:b1:f3:a1:be:2a:c9:5b:58:d9:ab:
14:09:92:37:78:fb:c6:ee:5a:b6:e9:2d:08:09:54:
26:93:8f:01:2e:ce:6d:8e:cc:f9:83:4b:d0:fc:6e:
d0:62:db:9e:d2:0a:fc:b1:1a:3f:5d:ec:bc:bf:0d:
e6:00:5d:87:26:6f:85:bb:8d:f9:47:b7:f1:25:2d:
41:89:fb:84:4e:95:9b:c5:fa:5e:a0:92:46:0a:94:
c4:4b:96:92:83:ec:e1:60:37:ab:57:fc:b1:2e:8e:
58:45:8d:f1:4b:17:0a:07:4c:8e:a3:e8:bc:cc:b2:
56:5d:eb:2a:46:72:b0:fb:ca:75:6f:53:3e:d5:43:
5e:39:cf:25:a6:4d:31:ec:61:fa:76:7c:d5:68:8b:
d7:09:2d:a6:14:72:4a:78:83:12:a4:9a:82:97:ba:
e4:c2:a8:3f:02:56:a4:db:51:b6:e9:60:28:86:bf:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:42:7B:2F:35:C5:63:02:C1:48:66:0B:8B:A5:2D:47:5F:45:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a409766b-b1cf-3e38-9dc1-facf07fee2c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7a:15:c7:54:ee:ed:32:87:dc:e1:f4:55:9e:17:94:9a:a2:
73:f6:c4:b4:3c:f1:69:a2:5d:b8:fb:87:23:57:17:f2:a1:04:
99:29:4c:ab:5e:51:51:6b:c7:fa:59:f2:ec:97:d0:bd:2e:00:
48:ef:7a:d2:18:fd:8a:08:5c:4c:3a:3f:b8:aa:c9:4f:f3:df:
73:8b:df:f1:47:95:7c:02:53:26:8c:9d:e1:3b:bb:9d:1b:01:
ca:62:ab:42:1e:9b:3b:77:28:be:25:5d:08:be:53:70:9a:8f:
09:d7:33:ac:de:71:ba:65:47:e8:13:4f:e0:00:f2:5f:ad:d3:
12:01:1a:9f:8b:97:c0:3b:f2:8c:22:c2:40:32:c3:b3:06:00:
b8:02:b2:89:a6:85:7d:31:9e:72:40:0a:2b:0d:0e:99:b8:42:
ff:35:c7:66:79:a5:e7:5c:f9:02:17:b1:e9:1f:c6:a9:7b:2d:
90:02:92:88:6e:16:68:78:21:34:fe:94:9d:18:a7:83:9a:94:
34:36:98:f7:af:cd:ea:8d:1a:f4:3b:20:88:0c:5d:9a:1e:55:
10:25:3d:00:6e:fc:89:70:5e:be:b1:90:9a:70:1f:04:d9:a0:
24:15:16:69:7f:d9:64:a6:79:f6:7f:56:de:3b:ac:da:f3:06:
5a:ce:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org