Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/47620955-44c9-3a87-b6b8-4078627eb92c.roa
File: 47620955-44c9-3a87-b6b8-4078627eb92c.roa (raw, json)
Hash identifier: QL90DpBDklHMgCMiCHu+gRp9ialnMSu1EtlgHcORZMs=
Subject key identifier: 77:5F:4B:41:0C:41:84:68:BB:52:5F:9D:85:37:5C:43:B2:3E:70:F0
Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial: 010D0C9F4328583986B140DAB6BD338F1AD69700
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/47620955-44c9-3a87-b6b8-4078627eb92c.roa
Signing time: Thu 08 Apr 2021 04:00:00 +0000
ROA not before: Thu 08 Apr 2021 04:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 396982
IP address blocks: 161.38.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:86:b1:40:da:b6:bd:33:8f:1a:d6:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
Validity
Not Before: Apr 8 04:00:00 2021 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=463f3de7-bbc9-49cd-bfde-d113403b6ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:49:5c:50:2b:20:37:07:53:25:e0:af:74:
e8:20:13:f7:4f:7c:41:20:48:08:2e:91:59:25:bd:
a0:62:9b:e7:f0:25:8b:f6:1a:ea:5f:21:cd:ba:7d:
65:c9:e4:92:36:10:8b:ef:3b:50:b9:2d:d3:8f:8d:
b6:48:8f:bf:65:ff:ae:ba:b1:31:81:ca:8b:65:03:
4e:65:bc:40:8c:61:7b:ab:77:92:d2:bf:b5:a2:48:
be:e2:cb:40:c0:cd:7d:6a:70:aa:e3:4a:31:10:3f:
cf:b1:24:b8:ec:bc:cb:a8:d8:af:a4:7e:23:44:61:
bd:c4:49:0e:83:88:51:ef:d6:dc:fb:0e:17:a4:cf:
03:9d:96:54:13:5e:e5:d4:2d:f2:ac:01:91:81:11:
4c:57:c2:1c:c7:a3:77:a7:eb:53:5f:60:4c:b3:d7:
bb:29:84:2f:76:d5:75:ed:81:d6:f5:f3:40:eb:30:
22:b1:26:95:43:d0:a5:f9:f1:9e:68:51:89:97:9a:
57:53:77:33:18:58:84:cd:73:54:42:4e:42:31:9e:
91:7f:05:75:f8:25:0f:80:9b:03:88:d2:da:30:7c:
2a:ae:a8:64:d1:af:ef:b6:a7:0f:09:cb:66:08:0a:
af:36:5f:ae:f9:3a:37:8c:d8:9f:7f:8e:1a:a8:4d:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:4B:41:0C:41:84:68:BB:52:5F:9D:85:37:5C:43:B2:3E:70:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/47620955-44c9-3a87-b6b8-4078627eb92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
X509v3 Authority Key Identifier:
keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:84:ae:af:ae:a0:a7:e7:5f:a1:91:7a:b5:2c:ff:af:21:17:
4a:e6:ef:af:bc:99:27:6a:c5:32:6c:7c:bc:0c:08:a7:b4:40:
36:d4:f4:c9:c5:f3:39:33:9b:35:49:55:c4:e3:b0:55:a0:b2:
34:dd:ad:8c:77:43:a0:f8:b2:7d:42:c0:39:a6:3a:e3:79:b0:
58:1f:8f:e1:48:14:63:e3:24:1d:5c:8c:f2:de:8f:e1:2a:89:
e6:ce:1a:cb:81:8b:95:ad:ff:d0:a9:23:a0:6a:7a:79:c9:bd:
fc:9b:b2:d5:59:20:6b:b9:03:d8:d2:2e:d2:cc:34:c2:91:34:
43:7e:3e:75:dd:e0:01:a9:55:8f:3c:3d:ec:b3:58:d4:f7:37:
95:92:67:e4:d8:fe:0f:3a:cc:ac:f3:69:82:35:80:78:98:5d:
c5:f0:ee:e5:94:40:82:81:85:4b:eb:9d:7c:f0:ee:3d:cf:39:
92:cf:60:6f:42:f3:ed:f8:cd:7f:52:9f:68:68:c1:d9:be:3c:
5b:2a:f5:04:ee:22:1e:95:34:a6:f5:b7:21:c6:d7:af:85:52:
43:0e:d5:b5:3c:12:ee:fc:fc:1a:8d:d3:de:95:ec:06:db:9b:
ea:42:31:fc:8d:60:2a:84:c3:ec:f1:f1:e7:bc:27:46:7e:15:
59:4b:13:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org