Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa
File: bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa (raw, json)
Hash identifier: gibQByuZjhIg+m8PUSXXBYD11LEu4fHw6damL+RhKJU=
Subject key identifier: 03:AD:54:A6:AA:96:38:49:2A:56:8E:5B:B9:A6:4A:63:11:80:84:F1
Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial: 010D0C9F43285841EA4980106361B9C9AE1AB000
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa
Signing time: Wed 17 May 2023 20:45:34 +0000
ROA not before: Wed 17 May 2023 20:45:34 +0000
ROA not after: Tue 15 Aug 2023 20:45:34 +0000
asID: 64517
IP address blocks: 162.221.27.240/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ea:49:80:10:63:61:b9:c9:ae:1a:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Validity
Not Before: May 17 20:45:34 2023 GMT
Not After : Aug 15 20:45:34 2023 GMT
Subject: CN=5ad28a63-ceca-4be6-9f14-011436fe956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:50:46:f5:64:75:3b:c6:a9:ca:e0:ca:20:
72:b7:cb:f5:c9:88:05:3b:4c:c1:99:eb:26:0e:80:
e3:7b:28:f4:00:03:86:4e:00:da:59:a1:e3:f4:5a:
1e:2d:f2:16:d4:43:83:e0:13:be:99:8c:65:be:f7:
fa:7e:16:0a:e0:e9:42:a3:de:64:d9:7e:78:e3:e0:
77:bb:34:43:36:ef:2b:38:66:4f:7b:1a:64:db:a4:
8c:a8:c7:c3:93:da:00:f4:3c:40:a8:50:26:67:f8:
68:18:f5:1f:7b:cf:b3:91:14:71:cb:a3:3b:67:69:
a4:12:b8:73:87:1d:73:1c:33:49:06:25:0f:b8:04:
7a:46:14:b9:cd:e9:25:d4:27:77:ca:02:7c:f5:39:
6f:52:73:d2:f2:86:25:57:02:5d:6b:0c:78:a6:b4:
c1:1e:6f:57:d1:7e:fc:ad:8f:c7:9d:93:87:2e:29:
0a:7e:4d:a3:5c:d6:a1:24:23:ad:22:5e:fc:e6:61:
05:d0:5d:3c:98:70:4c:4b:a1:b0:1f:d3:c2:a8:85:
79:ee:0f:d5:1c:a9:14:5e:bb:83:60:24:93:78:d8:
eb:5f:15:2d:92:35:5c:19:73:b1:c2:78:97:46:86:
38:c0:71:f7:2b:b4:b0:dd:c7:18:cf:99:ef:0b:68:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:54:A6:AA:96:38:49:2A:56:8E:5B:B9:A6:4A:63:11:80:84:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/bd85b9a9-7441-3e1a-84de-e359f1d8a308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
X509v3 Authority Key Identifier:
keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.27.240/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:e8:f3:63:ae:b5:93:1a:1f:39:a7:3a:59:97:96:59:96:e2:
a1:1a:b9:b6:cc:f1:37:9b:81:ff:d9:d8:36:5e:a4:44:5f:5b:
be:34:16:d1:cb:9a:87:0b:9a:27:06:38:c5:a3:9e:e6:07:2f:
eb:89:45:14:e8:27:f3:33:0f:da:4d:b1:2f:d0:cf:b4:54:fc:
06:da:bb:9e:f4:f8:0f:03:fd:8c:75:09:0f:e0:9d:7b:33:23:
79:06:31:da:c3:7d:1e:d3:ff:f2:65:0a:06:90:69:5d:e1:c0:
3a:f5:7d:cf:bd:b2:1d:15:65:7d:a7:75:e3:ad:40:dc:aa:8c:
38:cb:9a:c8:79:34:37:03:bf:ad:7c:d2:e9:e6:e2:b7:e6:21:
c3:44:1b:3a:18:60:ad:66:ad:67:fa:ba:5f:87:77:b5:fd:6d:
9d:ab:ca:cd:96:4d:94:1f:f7:4a:08:1c:ac:12:6c:21:af:4c:
c7:d7:1e:69:fa:64:24:a8:51:60:c5:bb:78:2d:8a:8f:c6:61:
bc:55:fd:4b:d7:9b:cf:20:16:5d:b9:9e:e6:b1:8c:2f:61:47:
fa:34:6b:16:e2:c0:b7:f9:de:a6:c8:d7:16:80:18:5c:f4:4a:
62:74:0d:6f:82:d9:fe:bc:a2:41:4e:a0:b7:60:1c:c3:e5:12:
ca:c3:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org