Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/28e46e72-3586-3046-843f-42f7d9763e61.roa
File: 28e46e72-3586-3046-843f-42f7d9763e61.roa (raw, json)
Hash identifier: k8fQZ14fLrzCEPsKJZdGiBTdE1lzoxw2CnQpNNN883c=
Subject key identifier: DF:EB:79:A9:08:7F:16:33:A4:1B:02:34:83:2A:EA:92:29:07:39:0B
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328576D51CC73C042CFC17229103D72
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/28e46e72-3586-3046-843f-42f7d9763e61.roa
Signing time: Mon 18 May 2020 18:33:49 +0000
ROA not before: Tue 28 Apr 2020 04:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 207.202.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:29:10:3d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Apr 28 04:00:00 2020 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=bb6b6986-3593-4c20-a897-a8c1813e792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:5d:b8:0f:0e:da:0c:85:be:f8:8b:e3:fd:
dd:a0:bf:9d:86:86:43:2d:1c:1b:5c:a8:13:75:2a:
0f:e8:39:da:7d:72:df:39:6b:94:6d:74:ab:d1:6e:
cd:73:e2:4d:00:47:93:81:c4:5c:66:b5:bd:af:15:
ed:6b:b4:d0:12:29:1d:14:78:43:f1:b0:b5:b2:ba:
82:97:89:6f:98:88:db:df:eb:89:b7:ac:2f:1f:48:
ff:09:bf:31:9b:84:87:26:92:73:36:d3:e9:c6:65:
79:e0:0b:99:d1:ba:d7:79:3b:8e:34:88:2a:93:27:
cc:37:de:18:fa:20:78:3e:19:71:97:0f:cf:b6:79:
72:bc:33:6c:e9:28:da:77:ee:76:3b:e7:14:59:de:
82:4d:be:07:40:ea:39:b9:fb:74:56:c1:fb:da:09:
f3:57:53:7b:71:a4:b2:12:24:07:91:61:64:54:08:
e6:02:b8:d1:d0:96:15:ac:da:f8:f1:22:d0:3a:d1:
cb:7f:a4:0d:7b:2b:41:84:6e:98:1d:46:5d:36:47:
b5:33:d0:e0:75:5a:49:4a:14:8b:b4:cc:b1:43:b8:
4b:3c:24:11:c4:78:d9:22:43:7b:29:87:f3:cb:9f:
20:1d:c5:12:65:1b:2c:8f:14:0d:2f:45:46:2e:3d:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:79:A9:08:7F:16:33:A4:1B:02:34:83:2A:EA:92:29:07:39:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/28e46e72-3586-3046-843f-42f7d9763e61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:49:84:3f:26:a6:be:5f:10:60:fc:5c:72:18:ac:ed:00:53:
d7:94:b6:45:a0:ef:cd:83:68:8b:47:d1:ab:1a:5d:7f:a7:25:
71:6f:7b:30:e9:ae:b3:4d:3e:fc:1f:0f:4c:97:ff:ce:04:f7:
85:c8:78:cd:c7:36:bb:25:fc:be:95:72:67:44:da:02:cd:6f:
69:66:cf:ad:94:da:45:1f:df:28:92:7d:cf:8c:28:33:78:78:
b2:04:ec:c3:a1:5b:01:4b:8b:ee:3e:c3:e9:0e:7f:b4:d0:1f:
9a:d4:bc:8f:35:1f:64:21:f4:90:f5:c8:0a:8b:56:55:09:d5:
72:d1:38:0c:14:75:b9:2a:93:ed:67:9f:d5:c1:38:51:eb:6b:
2b:72:4a:e5:55:39:6d:d0:2e:fa:e1:18:a8:ef:7f:80:ce:b3:
86:8e:06:41:6c:2a:ce:14:5a:63:3e:2b:ee:84:7e:f6:24:44:
75:df:1b:f1:c4:9f:36:ab:46:94:64:50:85:2f:b1:cd:9a:43:
7b:a3:0b:ed:1c:0c:8c:29:c6:c6:34:44:4c:e5:90:98:45:08:
ad:3a:b8:4e:d3:7d:8d:62:3d:6b:f0:13:f6:87:8b:cd:25:4f:
02:54:24:a1:26:df:ef:ef:bf:84:7f:a0:57:ff:02:0d:c8:fc:
bd:34:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org