Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28e91a6-1f1d-375d-98e7-d18dea24d65c.roa
File: b28e91a6-1f1d-375d-98e7-d18dea24d65c.roa (raw, json)
Hash identifier: Gz7fIziuir8G0ud0ODAkmYIwhTo0l18ikCYybz8uHf8=
Subject key identifier: 06:13:93:F6:B7:3E:5B:7F:11:43:59:84:F4:03:7F:A5:C3:BC:E3:B0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD6E089AE7DF11930FFA400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28e91a6-1f1d-375d-98e7-d18dea24d65c.roa
Signing time: Tue 26 Sep 2023 21:07:54 +0000
ROA not before: Tue 26 Sep 2023 21:07:54 +0000
ROA not after: Mon 25 Dec 2023 22:07:54 +0000
asID: 397239
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d6:e0:89:ae:7d:f1:19:30:ff:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:07:54 2023 GMT
Not After : Dec 25 22:07:54 2023 GMT
Subject: CN=5353dd07-e178-4cf1-b6bf-3b45ef08bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:0d:3b:40:57:51:8e:e3:87:7b:f7:cd:27:
c6:7f:67:91:82:6a:4d:f6:98:91:b1:89:a3:32:d1:
d3:03:2b:65:be:4c:e0:62:5f:e8:c4:e0:cc:d9:b0:
93:5c:d3:d4:15:aa:67:4b:c1:ad:8d:73:bb:7e:3a:
68:73:28:78:b7:16:07:0a:3c:b9:71:f3:8e:3f:01:
e1:9d:6a:32:3f:97:27:a5:66:63:00:73:34:84:a4:
89:3c:f7:cf:34:c2:78:62:57:d5:80:70:87:4f:20:
f0:07:3a:bb:00:d3:fe:fb:0c:83:a4:96:02:1d:f3:
b9:49:81:ee:30:43:12:7b:b0:02:82:ad:af:fa:77:
fe:ca:c2:c9:d5:b2:53:6f:c2:f1:59:cc:5a:4a:40:
57:ff:8b:f2:dd:89:50:bd:3a:01:76:67:7d:63:da:
1f:e2:10:b7:fb:ae:f8:94:31:a8:95:2f:fe:46:82:
a3:32:bb:2e:07:f9:dd:f6:bf:44:c4:a2:35:57:10:
1e:0b:37:d1:31:8a:ba:4c:29:0e:a7:ed:be:34:29:
51:61:35:da:55:a8:13:d7:2a:8c:2a:3c:ab:2f:1d:
d3:95:76:8b:5b:1f:e5:9c:b4:35:a6:73:b9:6f:23:
97:ee:68:6a:00:a8:74:e2:71:71:82:a5:08:1e:57:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:93:F6:B7:3E:5B:7F:11:43:59:84:F4:03:7F:A5:C3:BC:E3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28e91a6-1f1d-375d-98e7-d18dea24d65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b0:3a:ed:06:3f:19:a7:ab:83:7b:e1:a6:4b:a7:bd:d7:3a:
f4:93:bc:ec:9f:f3:32:f0:ea:fe:04:7e:01:0d:cf:df:8d:f1:
24:bc:58:e7:01:0a:49:16:ec:a8:5b:01:6c:dc:66:4f:b1:9a:
5f:41:a9:90:87:69:3d:a9:af:40:f3:3b:bf:77:d8:05:f6:9f:
ae:94:38:b7:49:72:4b:ad:eb:e9:e6:72:c5:f3:85:83:aa:3d:
ee:c7:96:57:60:cb:f3:9d:13:89:63:5c:28:cc:4f:c7:3a:48:
4f:b8:85:c5:19:09:bc:79:bc:43:86:8c:15:bc:8d:fe:33:c1:
79:21:a7:2f:fa:cf:90:d6:98:57:f6:0a:ec:cf:fa:dc:0b:e0:
f3:96:9b:aa:bd:12:e6:ca:3f:27:f0:9f:01:ff:44:55:08:3c:
29:7f:bf:1e:3c:6d:91:b0:4e:38:cd:6f:b8:49:54:85:d0:7b:
16:84:79:9b:47:c3:6d:57:db:33:89:39:28:3d:2a:f7:2a:b0:
9c:38:00:80:a7:c1:fd:d8:3d:21:9f:ee:11:f5:9d:8b:5b:29:
06:28:28:ed:9f:50:21:27:78:61:c7:c8:83:18:f3:b0:1c:f8:
db:d1:a8:82:3f:de:06:8f:76:36:e9:e9:30:40:57:e6:7d:0f:
1e:40:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org