Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9c9ac1d-cf6c-3b1a-a199-44ca193385de.roa
File: b9c9ac1d-cf6c-3b1a-a199-44ca193385de.roa (raw, json)
Hash identifier: DnGyRF6SUFQlNkvaYVn0aYegEBUJs00FHmRd+xnDGDg=
Subject key identifier: 37:17:F1:5A:62:71:11:E5:E2:47:36:6A:5E:3E:40:75:E2:44:A6:09
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD363B2814F5571394BBD40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9c9ac1d-cf6c-3b1a-a199-44ca193385de.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397216
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:63:b2:81:4f:55:71:39:4b:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=2b9acec9-a594-41b6-a201-54eb2981bc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:b6:4e:6d:1f:1b:05:f8:d6:ff:73:32:ca:
a1:18:76:ea:d9:5c:c5:c2:f1:ed:27:80:eb:c4:20:
0c:59:54:2c:ef:00:33:f8:18:45:5b:d2:a2:0c:ab:
e0:db:20:0b:69:e2:65:9d:5a:fd:21:3a:31:77:5a:
83:7a:cc:5d:fb:af:ba:94:ed:be:bf:65:fa:7a:6f:
fa:46:7b:33:bd:a3:59:13:87:7c:e2:8c:e0:3b:8b:
d7:9d:c0:36:7a:8b:48:a9:80:b7:84:40:32:30:c6:
9e:da:f8:4d:f3:35:59:c2:cd:cc:99:b4:3c:24:a8:
24:1f:82:84:73:d7:35:d1:4b:cb:0a:b6:ba:19:4a:
3e:5b:93:ae:18:58:c7:6b:e6:40:98:d1:08:1a:e9:
e7:53:f2:e5:c5:87:17:63:56:d6:e1:9a:d6:55:8e:
52:6c:8e:94:85:30:26:dd:9b:23:40:c6:e6:bb:d2:
45:ce:b6:a6:73:8f:2b:43:61:e1:eb:eb:67:bb:21:
0d:e2:11:00:ef:06:3c:e5:24:51:a9:b0:ba:9a:a0:
9c:f4:66:8e:93:e0:15:0c:b1:f6:8e:3a:c7:7f:8b:
74:54:64:41:21:85:12:ed:37:c9:f5:8d:92:29:f1:
7e:c2:20:ce:4c:53:6e:e6:c5:90:96:f7:2b:d3:a9:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:F1:5A:62:71:11:E5:E2:47:36:6A:5E:3E:40:75:E2:44:A6:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9c9ac1d-cf6c-3b1a-a199-44ca193385de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:6a:ad:07:f7:1c:ad:87:b7:f2:9e:2e:71:0c:0b:a7:ea:8d:
f8:fa:f0:c5:12:f2:3d:97:0d:5f:f1:53:b8:6f:25:c6:da:80:
cc:c2:1d:99:ea:fa:f2:c0:43:e1:35:8d:ee:b4:25:32:c0:ee:
33:9e:b7:d0:0e:65:49:c9:b2:e2:85:19:3c:99:8d:4a:27:80:
33:dc:0b:ee:15:f5:a9:bb:bd:9f:9e:e9:09:b4:c9:e7:12:35:
05:43:0a:e4:c3:21:3d:79:8e:96:5e:b6:7b:28:72:9f:8b:f6:
b7:9e:bc:75:63:66:c2:b3:1d:31:0a:da:6f:93:5c:3e:88:62:
1b:26:ca:cf:9e:d4:12:6d:27:33:f8:d3:3a:14:e6:d9:76:44:
35:53:d9:fc:42:6c:82:bf:5b:a5:22:c0:1d:02:c0:9e:f2:5c:
8e:23:10:dc:c1:bb:1e:2b:22:64:cd:48:2c:ab:43:d3:2a:d2:
2e:c4:df:a0:82:bf:13:59:b1:f5:88:15:25:db:3d:8d:32:d6:
7b:87:75:aa:27:1a:6c:8a:a1:3c:25:2e:08:b4:13:30:38:fd:
be:53:c3:05:b6:89:dd:b6:3f:fd:d8:34:c8:cb:b7:0d:58:9b:
10:43:b1:aa:80:43:a6:0c:99:8e:2d:44:15:45:23:84:70:06:
43:11:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org