Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/baf475b1-b829-301b-8a42-2bf5e2fdb6f0.roa
File: baf475b1-b829-301b-8a42-2bf5e2fdb6f0.roa (raw, json)
Hash identifier: zxCKzmPony7Smz2Q0MHoqhtaYhj7hIbzIdH+QxWaDv8=
Subject key identifier: A5:7A:10:F1:59:8E:F7:E6:F6:E1:CD:34:E8:37:9D:A9:C4:08:F3:99
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F43285837AF0D25D94E9D10C29DB69040
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/baf475b1-b829-301b-8a42-2bf5e2fdb6f0.roa
Signing time: Mon 10 Feb 2020 05:00:00 +0000
ROA not before: Mon 10 Feb 2020 05:00:00 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 164.153.131.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:af:0d:25:d9:4e:9d:10:c2:9d:b6:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Feb 10 05:00:00 2020 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=5200664e-05ff-4177-9b0f-5a38d0c4e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:47:3e:24:c3:30:85:e9:4d:10:0f:6f:58:
ec:84:20:76:9a:d4:45:24:e8:eb:66:27:44:34:d1:
6b:21:0d:33:8e:24:d9:40:2a:41:4d:a0:82:92:ff:
85:dd:51:9d:27:2c:cd:c2:67:ae:f5:04:c5:87:84:
b1:15:e0:1b:75:d7:95:1e:2e:f1:b6:30:4a:e0:d9:
06:54:01:a2:47:8a:cf:62:b4:26:b8:49:85:a1:72:
fc:b1:13:99:00:ec:f3:ff:e1:a9:94:97:e5:97:62:
77:df:d3:7b:0b:70:85:3b:ea:1e:3f:27:30:a6:e9:
89:32:da:74:a4:dd:99:b0:1b:6e:4a:97:85:65:26:
59:fd:02:e7:46:c7:39:6f:74:94:d7:3c:04:a1:22:
26:34:0f:67:2f:45:15:02:89:5b:75:4e:87:da:0a:
d9:02:f0:77:6f:9f:43:bb:9f:bc:a9:88:aa:d6:5d:
4a:ea:59:ee:b0:63:9f:2b:ee:1b:9e:90:64:b6:a9:
81:64:85:cf:84:41:b2:66:06:07:aa:0e:a3:8e:87:
b1:59:5e:ad:b5:1c:11:0b:4c:e4:b4:43:63:74:07:
e8:b2:7a:27:a1:a4:6b:27:01:bc:26:f3:65:a2:de:
17:c7:5d:77:66:15:99:17:e8:0c:e9:7b:0c:74:8e:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:10:F1:59:8E:F7:E6:F6:E1:CD:34:E8:37:9D:A9:C4:08:F3:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/baf475b1-b829-301b-8a42-2bf5e2fdb6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6e:69:6a:a5:ae:04:ca:c8:d0:a9:80:18:63:06:b4:79:28:
2c:b1:d8:dc:a4:7a:6a:eb:af:88:d3:22:bc:6b:b7:11:df:e1:
15:ae:2f:16:7e:d7:38:bc:6d:f1:fc:51:b1:93:2f:5a:54:27:
43:b7:48:3a:80:bc:3c:e0:0a:f7:45:b8:bf:e0:13:3c:bb:e6:
9b:8a:27:86:99:5d:a4:69:16:d7:cd:8e:46:da:55:7f:a7:77:
75:63:ff:36:1d:f5:56:83:3f:3f:39:d8:c6:72:cb:59:48:c9:
1b:b4:6e:f1:12:4d:4a:f4:fd:38:1d:99:c3:d4:76:01:83:d8:
87:3c:37:22:0d:90:92:d4:0c:5c:25:af:23:bb:9c:2d:2b:43:
0c:e7:dd:45:58:00:e5:46:67:86:0a:66:ef:86:42:1d:f3:a4:
ea:71:04:0d:06:85:69:09:d6:a7:83:ef:f0:6f:d5:19:d9:d9:
9d:40:8f:84:f7:d4:6d:2d:a0:4c:53:94:f3:d2:a5:e1:00:5c:
57:51:e7:c5:3c:a4:e1:f4:7d:f3:81:00:f5:91:e3:df:8c:22:
fe:89:63:d9:49:33:b9:53:02:82:5c:5d:a3:15:fc:14:a2:70:
0a:4c:3f:8c:39:9a:84:a2:73:37:71:7c:d7:67:23:eb:da:0e:
99:75:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org