Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3d080a2d-57ea-377b-a51a-5d41321c924d.roa
File: 3d080a2d-57ea-377b-a51a-5d41321c924d.roa (raw, json)
Hash identifier: sZJm7KJPKhfmQ1zGm/yGIs5ulgUiDnk1qdgsYmg1J5Q=
Subject key identifier: F4:C2:9D:77:83:1E:5B:90:43:C3:1D:5B:1A:34:5A:C6:87:FE:EA:90
Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial: 010D0C9F43285843F0C3A3CE12CF961A42127040
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3d080a2d-57ea-377b-a51a-5d41321c924d.roa
Signing time: Sun 19 Nov 2023 14:00:21 +0000
ROA not before: Sun 19 Nov 2023 14:00:21 +0000
ROA not after: Sat 17 Feb 2024 14:00:21 +0000
asID: 6498
IP address blocks: 75.78.212.0/22 maxlen: 24
75.78.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f0:c3:a3:ce:12:cf:96:1a:42:12:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Validity
Not Before: Nov 19 14:00:21 2023 GMT
Not After : Feb 17 14:00:21 2024 GMT
Subject: CN=529fc2c5-88ed-4f02-9c17-c9502e85e3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:5a:ad:e3:1b:7e:b4:9d:b2:1b:b7:f5:de:
4d:59:bc:34:88:fd:41:1c:dd:cb:34:25:04:68:4d:
cc:62:cf:77:ff:d3:1d:cc:97:e7:e3:26:93:1a:f8:
7a:9f:51:28:3d:74:da:88:b9:87:85:5c:bc:1b:3a:
74:12:39:e1:ac:a1:68:c1:cd:10:70:b4:8e:a3:fa:
ba:8a:0a:95:6b:71:4a:0b:d0:b7:87:f8:84:ca:a1:
98:8b:03:e8:ba:f0:56:f3:a6:e1:b2:49:ca:1e:2c:
02:f5:28:f8:58:4e:b1:8e:8c:64:fb:9f:eb:72:2b:
e0:93:e6:81:ed:6e:d6:19:8f:9c:01:37:e6:ae:e7:
8e:72:55:bb:5e:9e:c6:11:5e:1f:37:d4:40:a0:ad:
10:ce:e0:4c:84:03:05:d0:4a:35:08:5b:c4:8b:c8:
9d:e8:67:b7:d9:05:1d:20:3c:dc:a1:8a:06:01:59:
b6:8f:dd:ea:8c:da:8e:8d:98:43:ed:f8:f1:8e:56:
77:77:8d:01:3b:cc:70:0f:19:02:09:13:75:36:5f:
3c:a0:c3:f6:ce:25:e1:91:d4:5c:50:37:34:e9:27:
50:fc:43:f2:07:95:3f:5e:f4:ec:87:35:f8:24:0d:
a1:9a:84:b4:30:78:08:8c:00:ff:f5:8e:1b:60:4b:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:9D:77:83:1E:5B:90:43:C3:1D:5B:1A:34:5A:C6:87:FE:EA:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3d080a2d-57ea-377b-a51a-5d41321c924d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
X509v3 Authority Key Identifier:
keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
sbgp-ipAddrBlock: critical
IPv4:
75.78.212.0-75.78.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5c:3a:e5:b9:93:13:4e:5c:1a:fc:e7:8a:27:ed:06:31:d3:
6f:af:66:c3:c1:01:e9:39:c3:a3:ff:b6:7b:8d:e0:57:eb:ac:
e0:02:9b:8e:d6:b0:be:4c:f2:11:ec:ad:e6:48:45:83:28:5a:
0e:e8:8b:e3:f1:fb:1c:3d:a4:99:5b:f6:1b:ea:fe:b2:e8:89:
b0:60:1b:a8:de:a6:5e:de:4b:da:9e:df:f8:24:d0:18:39:5e:
f4:42:de:9a:5a:65:26:e5:38:fe:cb:7e:29:13:60:9e:e1:05:
e2:21:85:f0:db:38:dd:a4:13:84:4a:b9:38:09:bf:ce:ad:df:
97:f1:6b:7c:af:c1:d9:bb:f1:5c:74:97:b6:c5:2c:02:45:9a:
31:30:4c:66:48:ca:7f:fe:81:b4:e6:29:2b:47:9b:d5:86:a4:
ea:ff:cc:11:2f:cc:71:d6:e1:93:6a:ce:95:b7:06:1b:f4:f5:
b8:6f:e4:5c:11:53:f9:fb:d6:66:72:49:4e:c1:9f:64:1f:5d:
89:ab:49:95:0b:2b:0b:f2:3a:62:db:be:8f:1c:0b:0f:14:28:
8d:82:86:0a:35:cc:ed:ca:cf:da:47:75:6e:db:10:15:a1:23:
35:77:60:13:34:52:f5:d0:c2:d6:92:23:fc:e6:61:3d:ce:5d:
df:86:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org