Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc97c0ea-feed-3da7-9abe-6c1ee9e3e973.roa
File: cc97c0ea-feed-3da7-9abe-6c1ee9e3e973.roa (raw, json)
Hash identifier: +y3SyNaEtvysbtYXwZeUlmjCSzMP58wKMJLLugJ+Xgk=
Subject key identifier: 3D:9F:AA:BD:AF:7A:93:58:AA:EB:C7:14:AE:A3:B5:59:6A:73:E3:15
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD6DF390E4B5D5F1490B900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc97c0ea-feed-3da7-9abe-6c1ee9e3e973.roa
Signing time: Tue 26 Sep 2023 21:07:53 +0000
ROA not before: Tue 26 Sep 2023 21:07:53 +0000
ROA not after: Mon 25 Dec 2023 22:07:53 +0000
asID: 397235
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d6:df:39:0e:4b:5d:5f:14:90:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:07:53 2023 GMT
Not After : Dec 25 22:07:53 2023 GMT
Subject: CN=b0823883-88ab-4776-85a9-ab90ddcf86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:33:b8:4c:51:bd:1d:bb:bf:79:fb:4e:6c:
e2:40:66:f7:db:39:69:54:9e:c1:cb:3c:bc:41:c7:
c6:ec:ee:04:41:6b:06:bd:a9:2c:d0:b1:fc:88:24:
95:0b:9b:32:9f:32:e3:69:67:a9:d0:2b:53:d4:3e:
49:85:3c:e6:4d:a2:94:19:4f:8f:28:28:dc:9c:1d:
55:6c:f5:f4:39:7b:24:9a:3d:0a:26:59:10:bf:da:
c7:bd:4b:50:c2:13:45:6e:d6:96:f5:00:77:03:33:
70:93:21:1a:cd:79:71:06:3b:79:34:61:25:06:9e:
01:17:5b:2b:58:40:0c:c6:0e:3f:94:cd:05:62:84:
cd:80:51:40:f5:99:c6:5b:8b:a0:12:d7:5c:89:f0:
c1:3e:ce:aa:75:60:56:b9:c7:2f:85:5b:a5:80:69:
50:08:4c:cd:52:36:e3:b7:8b:0f:30:ab:07:d9:0e:
71:88:e7:a8:3b:2c:b7:e0:15:22:02:98:89:b5:c5:
55:70:a8:f0:cb:07:e5:ed:89:8d:97:a9:f5:03:0c:
74:33:7a:f8:a2:85:1b:ef:96:17:f9:42:42:09:26:
d4:74:92:69:4c:6a:c1:76:fa:83:1f:47:c7:7e:75:
80:d3:3c:32:e8:3f:dd:91:e5:7e:bb:5a:68:ac:4a:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:AA:BD:AF:7A:93:58:AA:EB:C7:14:AE:A3:B5:59:6A:73:E3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc97c0ea-feed-3da7-9abe-6c1ee9e3e973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c0:0e:53:52:b8:50:7c:c4:77:62:3d:be:67:81:de:0f:b4:
3a:9a:4e:2d:f9:97:eb:2d:44:77:b3:93:3b:d5:38:7c:4d:16:
59:e3:4e:10:e7:16:ab:aa:96:68:94:0f:6f:6a:02:35:4d:1d:
f5:f1:8b:ff:09:38:f5:d6:4f:e2:a1:81:25:73:0e:fa:45:93:
c5:ee:4d:a8:35:20:b8:87:75:ee:ce:45:b5:8b:f0:95:06:07:
a4:b8:94:a7:ec:dc:a8:ec:e5:46:ca:bc:82:86:d9:d7:39:fe:
08:1e:6a:b4:8b:f2:2a:20:e2:f4:0a:d0:17:e7:db:9a:93:05:
6e:50:76:9b:d5:ec:cb:a6:b9:d8:df:11:a6:d1:82:fe:76:0c:
42:09:42:66:a7:8a:1e:3e:6e:15:0c:9f:9b:08:bc:43:24:4c:
37:8c:d6:34:63:ab:b1:ee:f7:e9:81:8f:5d:3c:5f:67:e6:66:
fe:3d:fa:02:ae:06:26:11:e0:5d:94:08:04:35:31:8c:81:7a:
17:63:c6:33:2e:b1:9d:b8:f4:19:83:b4:cb:82:85:e3:ab:29:
ea:9c:35:96:e5:41:fd:41:90:15:65:b6:3c:af:ef:72:ec:a4:
3a:95:10:a8:70:95:74:4a:a5:05:e1:7d:a5:a9:84:4c:7c:14:
9d:16:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org