Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/3d4c8038-2ca4-3622-87cf-74fddb77883a.roa
File: 3d4c8038-2ca4-3622-87cf-74fddb77883a.roa (raw, json)
Hash identifier: 2UuS1dcG0tkziLRCNSZQG74RewA7OfMpWoMHPSkuv4c=
Subject key identifier: 86:45:CC:E1:AB:81:9D:B1:25:67:02:AF:47:FC:46:50:92:CE:5A:75
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F43285842E0742DDA0724DA23F7336340
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/3d4c8038-2ca4-3622-87cf-74fddb77883a.roa
Signing time: Mon 14 Aug 2023 01:00:23 +0000
ROA not before: Mon 14 Aug 2023 01:00:23 +0000
ROA not after: Sun 12 Nov 2023 02:00:23 +0000
asID: 834
IP address blocks: 173.195.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e0:74:2d:da:07:24:da:23:f7:33:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Aug 14 01:00:23 2023 GMT
Not After : Nov 12 02:00:23 2023 GMT
Subject: CN=f7c6a8c9-4351-44c7-971f-539bb3a9212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:37:b4:20:c7:b3:c6:43:3e:77:d3:91:60:
2e:7c:ef:c3:8c:63:9b:f7:7d:1a:3a:69:54:71:c5:
01:06:5d:81:05:c4:51:3f:75:6c:88:e6:93:02:a7:
a7:9a:a0:e8:57:82:9a:6f:75:9d:38:65:d1:cf:be:
74:e8:6d:8b:d6:a8:13:05:c3:db:f7:8b:5a:ef:9c:
77:77:d1:73:10:cb:dc:89:22:33:d8:3d:14:74:ce:
66:1f:7c:47:72:b4:24:79:7b:27:00:fd:6e:5c:43:
69:5c:f6:c8:c5:c2:74:c4:5f:a1:5e:5b:ea:6d:01:
76:45:ee:61:ef:37:52:45:42:90:29:7c:82:cc:99:
8c:d4:9b:af:bf:dc:5f:7b:a0:e9:ce:e1:eb:d1:79:
bd:e1:74:3a:dc:8b:fb:88:c7:55:e0:4c:cc:c4:08:
8b:4b:0d:a7:63:99:47:3e:27:ea:c6:a9:38:cb:12:
e9:bc:f1:be:12:4b:e9:e6:d2:16:31:96:26:e2:31:
07:8b:ad:4e:be:f0:e8:e6:c5:64:2c:23:32:c4:22:
90:21:e8:1f:d2:7a:ad:fd:a8:b8:c5:6b:68:2f:ef:
76:10:5b:92:02:f6:bd:15:5c:6d:da:b4:43:a6:d5:
36:d9:02:83:53:5f:ed:70:f2:9e:98:d0:22:20:e1:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:CC:E1:AB:81:9D:B1:25:67:02:AF:47:FC:46:50:92:CE:5A:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/3d4c8038-2ca4-3622-87cf-74fddb77883a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:3b:2c:11:e6:1f:c1:cd:82:a9:3d:8b:27:d4:e1:60:af:65:
6f:9a:84:02:e7:33:ee:c6:51:19:2e:0f:97:0a:a1:11:ae:5d:
8f:6a:67:9c:f7:4d:08:b8:e2:0f:00:29:2c:81:86:a8:68:09:
ac:ff:6c:fd:fb:c5:da:5d:dd:13:68:74:7e:d0:74:91:42:98:
52:30:3c:06:cd:b8:14:6d:aa:5a:82:26:8f:9c:25:b1:c4:bc:
d9:a9:86:9a:c1:2a:32:71:6e:09:41:57:78:ee:bf:1b:8d:87:
4c:0b:51:82:4a:f5:ef:17:0e:cf:54:00:49:92:8d:a3:25:7f:
4d:59:e4:0d:57:a7:62:95:90:1e:60:4e:5a:7a:75:44:29:7f:
5b:9e:17:77:6d:90:3e:2f:55:dd:ed:38:dc:e6:5b:56:b7:1e:
97:89:3b:0e:e7:6c:c5:20:85:c4:5b:8c:92:88:4f:89:ff:7b:
09:0e:ac:1d:be:e0:3b:30:1d:d9:67:24:6b:2f:a5:b4:f2:25:
0f:c1:ec:a9:0e:c7:cb:a7:45:e8:3b:9c:ab:2b:80:f8:37:44:
53:56:0b:c5:4e:59:e4:28:17:3b:d5:99:96:aa:7b:b2:8c:a1:
a0:ce:07:b5:02:d6:0d:be:0b:51:02:f0:11:5b:5f:68:92:33:
dd:8c:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org