Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa
File: cd631af0-3fe1-3ba5-86e0-7696db412776.roa (raw, json)
Hash identifier: /EGFerK9LZ0mu1YfDV09ASEOGT891pvyblknnAPFmAA=
Subject key identifier: 5F:09:38:53:E0:BE:82:F2:EE:54:A0:7E:40:53:AE:94:80:AD:3B:F6
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285841E46D41E4D16A572373864380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Thu 22 Jun 2023 14:13:49 +0000
asID: 18258
IP address blocks: 209.8.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:41:e4:d1:6a:57:23:73:86:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jun 22 14:13:49 2023 GMT
Subject: CN=182ae58e-3b7f-4c14-88bb-1ee59269bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:6d:12:d4:95:40:f6:fd:14:54:4a:7e:9a:
d1:89:ea:57:06:db:0b:5a:3b:68:6d:39:00:68:1c:
41:84:ad:1a:1f:c3:9b:4a:a9:2b:4c:f0:e7:a9:61:
95:1b:51:5d:5f:a9:cd:12:e3:a3:d8:43:00:26:88:
08:b4:9f:af:5b:77:3c:dc:01:6c:ac:44:79:65:37:
6a:0f:08:c4:dd:6d:3e:01:b2:bf:6f:21:a8:39:50:
f4:bf:2e:d2:00:94:31:89:37:be:e9:1a:e0:c7:fb:
85:ae:f6:16:ab:f4:08:9a:4b:d6:4e:91:57:a9:49:
9a:7c:4f:54:61:00:82:3b:6e:38:14:16:ac:e9:65:
f9:6f:b6:07:d9:35:6c:94:f9:3e:c1:ec:4a:c0:5e:
16:ba:fe:70:88:92:81:28:91:ba:3f:9c:c6:cf:2c:
bc:14:47:5e:15:f6:04:08:8c:8e:31:d4:28:02:4f:
ad:13:1e:d7:45:43:c8:1d:a7:54:ce:8b:3a:5d:be:
30:8a:98:7a:63:d5:0b:ce:1a:99:26:81:fc:fe:b7:
54:46:8e:e7:e9:ac:95:8e:5f:de:80:ba:6a:fa:bf:
c2:e2:e0:f1:57:6f:2d:57:33:b5:2f:26:ca:b6:b7:
fc:16:30:9b:74:68:25:66:15:19:07:cf:36:35:ba:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:38:53:E0:BE:82:F2:EE:54:A0:7E:40:53:AE:94:80:AD:3B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:1a:34:69:3a:b9:43:89:c3:cb:00:68:ca:85:e2:02:b6:39:
9e:c2:c7:ac:87:48:d4:7c:0e:93:2c:cb:ec:77:b8:09:5b:f1:
a7:8d:2e:c4:e9:60:53:6e:b1:d1:c0:66:63:dd:64:d6:3b:ed:
f6:5e:7b:7f:cb:fe:3f:cb:f7:bc:ed:ce:75:87:9f:68:06:19:
d9:3c:ea:b9:cb:45:03:73:5f:db:9b:01:32:ff:3c:fe:4d:c5:
67:65:6c:79:02:6f:5a:37:5c:f3:f6:78:08:f7:99:f8:3c:e2:
b7:fe:c8:ac:d4:ea:e0:01:34:fa:ae:8f:d6:92:df:f1:fc:6d:
bc:27:ae:eb:6d:99:8e:00:5e:1e:a5:dd:14:e1:31:94:50:5d:
80:df:2f:c4:c1:de:0f:8d:02:d3:53:62:bd:6b:4a:c2:cb:11:
b6:9f:12:f2:b0:3d:db:9e:e6:d9:2d:41:2a:e7:77:77:8e:82:
de:d1:82:8d:c6:f4:96:68:85:be:22:91:4a:cf:fc:49:76:ea:
19:e3:64:51:01:08:c9:7a:c7:d8:51:4b:83:a7:43:70:f2:ba:
90:f9:89:2b:01:15:5d:76:fe:84:a0:b9:01:eb:52:b1:12:7b:
b2:8a:3d:07:7c:f3:bb:6c:f8:75:26:8a:8f:fa:d3:e2:32:7a:
b8:0f:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:52 2023 by rpki-client on console-fra.rpki-client.org