Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/8a8b7333-6a09-37a6-af5d-1a9f57d81ac9.roa
File: 8a8b7333-6a09-37a6-af5d-1a9f57d81ac9.roa (raw, json)
Hash identifier: 8DjGPB4Ue8IbYzg09NYQQkKgm1blSg5d/TIDvNKDf8w=
Subject key identifier: F9:34:C8:6C:55:EC:AC:D1:56:00:F0:17:99:AB:35:AF:78:29:22:1B
Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial: 010D0C9F43285842E615901C44CEAB4D2F922000
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/8a8b7333-6a09-37a6-af5d-1a9f57d81ac9.roa
Signing time: Wed 16 Aug 2023 01:24:38 +0000
ROA not before: Wed 16 Aug 2023 01:24:38 +0000
ROA not after: Tue 14 Nov 2023 02:24:38 +0000
asID: 151487
IP address blocks: 23.151.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e6:15:90:1c:44:ce:ab:4d:2f:92:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Validity
Not Before: Aug 16 01:24:38 2023 GMT
Not After : Nov 14 02:24:38 2023 GMT
Subject: CN=4ece1e13-1fe8-401d-9741-e879b02a8892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:ed:58:d2:4e:f0:2a:cc:73:43:45:23:d2:
ca:2b:b6:a1:9d:06:8f:66:af:d7:76:40:da:fa:62:
e2:9b:05:e1:cf:9b:4d:28:7c:53:67:07:84:4a:07:
df:a3:5a:52:d3:d0:a1:57:7d:a2:0f:29:ca:07:cc:
9a:d2:2a:f8:94:76:05:0a:39:8b:e9:07:34:03:61:
1f:e6:40:f5:fd:a2:ac:00:51:bd:da:ba:02:14:81:
ad:88:c2:1b:05:cd:79:8e:ac:38:07:d9:cb:f1:e2:
85:be:0a:d9:42:de:21:5a:8b:47:29:09:65:f4:f8:
e0:b9:96:26:9c:24:cc:f8:f1:89:4e:40:e2:2f:4a:
80:dc:1f:1c:2f:d4:fe:a8:f9:95:28:64:ac:eb:ee:
06:cb:67:14:91:e1:21:f1:b5:e6:d4:80:08:87:d8:
af:29:13:90:9c:43:92:91:4e:79:5b:49:30:07:fc:
2e:3b:e4:d4:bc:94:ba:aa:2e:00:0a:ba:0f:c1:37:
e1:de:06:ad:62:77:66:90:ab:23:a2:f0:eb:a0:7e:
be:29:ac:76:9e:10:ad:8f:52:c8:76:43:60:b3:9a:
2f:b0:9a:e1:fe:d3:bb:26:f2:25:92:0b:b3:e2:8c:
e2:80:57:e6:8c:bb:b8:c0:4a:6f:c8:9a:4a:3c:ef:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:C8:6C:55:EC:AC:D1:56:00:F0:17:99:AB:35:AF:78:29:22:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/8a8b7333-6a09-37a6-af5d-1a9f57d81ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
X509v3 Authority Key Identifier:
keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:06:80:54:43:70:d7:fd:4f:b5:64:59:72:ee:9c:c7:a4:f9:
18:bd:ee:71:ee:fd:ed:9a:91:bb:33:7e:91:5e:65:a5:04:05:
1a:d5:52:4d:27:c9:cd:30:6f:56:18:05:8f:16:36:a4:3f:0a:
13:03:7e:56:74:e3:74:6c:ed:9e:16:99:d9:b3:a4:98:a8:5d:
c8:13:0f:be:a8:2c:01:15:58:24:3f:71:d0:9e:84:13:ef:07:
20:8c:d6:3b:72:cc:b8:46:f3:43:73:8c:76:b9:b0:de:e2:c0:
51:93:4b:92:5c:86:66:ab:bb:22:86:01:55:d9:84:13:d3:49:
03:c6:0a:bf:c3:44:85:96:8f:6d:fd:02:13:e3:28:7c:38:18:
fb:11:90:ad:d5:65:42:fd:91:4c:d2:59:39:0b:08:5c:30:90:
4d:aa:8a:95:51:e0:11:37:58:25:54:b2:cd:7f:6a:f1:be:98:
90:c5:bf:d7:60:ce:c7:8b:7b:2c:c1:e5:2e:4b:93:e6:57:a2:
85:10:e2:2e:d2:ae:57:18:06:42:ba:7f:22:2b:0b:97:ac:c4:
81:dd:7b:e3:d2:1f:db:b3:cc:e2:12:43:f2:97:16:2a:28:dc:
1e:be:e4:26:bc:49:79:1c:10:2d:93:24:dc:19:44:fa:2e:6d:
41:7f:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org