Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1da1fa9e-1a48-3b37-855c-01af3f48dc48.roa
File: 1da1fa9e-1a48-3b37-855c-01af3f48dc48.roa (raw, json)
Hash identifier: kdKiCk29tHmn/+BoK+a8fS21duHdHB7aXITcRrSILYY=
Subject key identifier: 5C:B1:1A:51:8C:20:8A:EC:90:BD:C5:1E:47:80:33:0C:F8:E7:D0:B5
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285841E42B0D6EFC6996232F2CF540
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1da1fa9e-1a48-3b37-855c-01af3f48dc48.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Sat 12 Aug 2023 03:04:08 +0000
asID: 211585
IP address blocks: 67.43.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2b:0d:6e:fc:69:96:23:2f:2c:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Aug 12 03:04:08 2023 GMT
Subject: CN=bf4b78a3-1b02-47e4-8b26-3de8baf41e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:ca:e2:7b:22:67:7d:ff:4f:96:58:5a:89:
f8:32:99:be:af:4c:2d:20:9d:6e:a6:34:f1:e9:f6:
2c:e5:8e:7d:e4:f7:45:83:ff:34:a3:b9:c3:84:10:
37:44:32:6c:90:77:e2:ae:10:f1:c7:4b:1a:70:b2:
af:95:07:97:2f:87:10:2e:cd:7d:39:f3:1c:9f:c6:
4a:86:e8:2d:c1:ff:a3:f5:02:ee:7c:40:c9:fd:0e:
50:18:6a:cd:bb:ee:a7:aa:32:5d:7f:fa:df:b9:82:
20:d0:71:4c:32:34:9d:1a:47:65:72:35:47:5f:17:
b7:78:09:40:27:77:e8:f3:20:a4:be:93:d5:59:05:
3a:3c:a0:03:85:8b:22:45:87:55:4a:d8:41:14:09:
03:25:fb:84:ee:c1:fc:a7:04:3c:e3:26:5e:06:eb:
ee:53:fa:72:63:6b:60:8a:f4:45:cf:5e:a1:e2:9d:
17:63:d8:91:cd:4c:40:08:c0:f6:80:4c:b4:83:9d:
d3:e2:81:38:b5:b7:59:9b:bd:d6:82:8a:06:bb:2a:
13:75:3f:2e:10:44:11:d8:a5:cf:52:f2:fa:a7:25:
ac:1c:96:78:d5:98:98:5c:d2:05:56:95:e0:82:f1:
1a:37:77:f4:82:72:20:d0:e1:ad:c2:6a:cc:0b:62:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:1A:51:8C:20:8A:EC:90:BD:C5:1E:47:80:33:0C:F8:E7:D0:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1da1fa9e-1a48-3b37-855c-01af3f48dc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:99:b6:13:72:79:12:f6:39:21:1e:5a:6c:bf:9b:e4:d1:a1:
8f:a2:a4:be:5a:b5:89:9a:d7:f3:32:3b:8a:66:3c:ec:dc:5e:
0e:6e:12:10:ca:f9:02:f6:f2:77:31:78:9d:e4:80:b4:cc:0d:
e2:ac:05:4c:31:c0:10:f8:93:c6:db:4a:e3:a5:a6:3a:dc:86:
0c:b2:ae:7e:8d:5d:05:9b:92:f0:e8:43:d0:29:38:74:4d:82:
68:52:3f:95:62:c0:2b:bd:db:00:da:48:00:e7:c8:cc:40:d2:
ea:ff:5b:fb:94:43:a3:92:57:6b:c2:be:35:6f:92:26:32:89:
dc:15:82:c1:b3:67:3e:9c:b7:2a:35:f6:fa:f2:25:4f:fe:d0:
8e:20:14:97:3d:4e:e8:02:0f:6b:19:ff:4b:57:71:39:ab:31:
f9:48:ba:9e:05:19:16:75:cf:e2:80:af:44:b2:7c:fd:e8:1a:
52:37:05:e0:5f:8f:5a:a9:52:db:a3:d6:ec:dd:3f:46:c3:d1:
ac:d6:e5:f1:f5:68:33:1c:a7:b2:fe:cb:86:91:ea:e2:ae:bf:
6f:57:f7:b3:0f:db:16:81:24:d4:d9:79:df:e0:72:df:80:6f:
51:c4:95:a9:b8:7b:8f:05:a5:ac:2d:2f:85:9a:94:15:d3:d2:
36:75:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org