Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4126672d-158a-3574-856d-5608bdb16784.roa
File: 4126672d-158a-3574-856d-5608bdb16784.roa (raw, json)
Hash identifier: cy85x1ghusOOYSpPvb7f20zerpCsGyPKOilPEGPN2NE=
Subject key identifier: 5B:78:0C:62:FD:71:40:AC:90:B4:24:A9:E0:0B:71:45:ED:E6:A0:19
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328583EB4DA78CCE988BBC2307A08C0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4126672d-158a-3574-856d-5608bdb16784.roa
Signing time: Tue 24 May 2022 22:03:08 +0000
ROA not before: Tue 24 May 2022 22:03:08 +0000
ROA not after: Tue 29 Oct 2024 04:00:00 +0000
asID: 36692
IP address blocks: 204.194.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b4:da:78:cc:e9:88:bb:c2:30:7a:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: May 24 22:03:08 2022 GMT
Not After : Oct 29 04:00:00 2024 GMT
Subject: CN=33955cd7-cab0-4587-8950-b109b2b9af37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:c0:fe:04:e0:8e:7c:1d:bd:ca:f2:d6:b0:
6b:47:b4:59:87:eb:b6:a8:83:8e:ad:06:21:fd:5b:
43:c8:1b:f0:dc:24:27:9f:9a:9c:88:3d:65:8b:6c:
d3:1a:b6:17:24:27:3c:5b:cf:0c:99:7a:0b:ce:d1:
89:6d:5f:df:a7:7d:c6:e0:df:d8:60:d9:7d:3b:1f:
25:ac:f7:20:29:f6:93:3d:e1:82:38:5c:7b:da:fe:
8b:cf:2e:da:f8:27:9b:07:79:52:55:fa:c4:a7:38:
8e:f0:ee:cc:9c:09:fd:41:53:6e:93:2e:99:bb:06:
92:e8:61:d2:a3:c6:e8:59:c7:1f:95:18:55:38:87:
e3:eb:1a:bc:a0:96:26:90:21:25:f3:d4:8d:c4:3e:
d2:41:bb:33:39:b7:52:33:55:7f:b1:28:e4:fc:75:
65:1b:64:0e:28:2c:e7:d2:6e:a9:d6:4f:e2:67:24:
5b:a8:0a:94:16:a7:69:3f:99:fe:af:80:da:02:9a:
7b:29:66:99:9f:12:b5:a3:60:aa:23:ac:e2:52:f0:
f8:2a:fd:da:62:42:75:63:61:4e:7d:17:70:6f:60:
f2:19:ce:bb:52:ed:06:22:99:2e:40:69:5b:72:0a:
f6:7e:53:56:24:42:68:82:ef:2c:27:cd:3e:bc:a2:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:0C:62:FD:71:40:AC:90:B4:24:A9:E0:0B:71:45:ED:E6:A0:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4126672d-158a-3574-856d-5608bdb16784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:1f:b6:a5:bd:b2:b5:95:54:ab:17:c7:1c:3b:28:2c:f2:11:
55:7c:7a:c7:58:60:b2:10:98:64:18:4b:c4:42:7f:f7:09:42:
4a:c7:e2:85:44:0c:e9:5f:d0:75:89:ac:4a:48:9f:42:7a:37:
35:ac:99:3b:6f:3b:b3:04:df:f0:58:b8:3e:62:e3:be:e5:a9:
fc:54:33:97:ae:c0:b0:a0:9e:f0:ee:96:ef:92:14:24:6d:4c:
94:4c:fc:b5:41:1a:e3:2d:36:79:86:99:dc:02:e3:34:87:5c:
5a:0c:da:11:4b:bc:c5:a9:5b:db:6e:6a:34:d2:9e:d2:00:1f:
57:50:75:82:b9:12:f9:5a:ee:7f:eb:aa:12:e8:e7:e1:fd:d7:
8f:51:80:39:b1:3f:a3:13:a2:b4:c0:4d:28:1a:69:e9:3e:1d:
d2:29:54:2a:1c:8d:0a:19:e4:36:ed:53:f6:62:ff:62:a9:2f:
21:72:34:d9:9a:37:b1:29:1c:54:f8:20:fb:db:66:6f:81:b0:
a4:a5:12:bc:fe:9e:83:3a:90:cc:e5:90:b7:6d:67:17:18:a3:
fa:89:af:ab:e8:75:22:79:fd:b3:f3:76:b3:20:72:e7:0a:10:
54:e5:ad:7e:11:d8:29:88:9c:70:c4:7d:b9:ec:39:28:1d:71:
50:3f:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 07:16:18 2024 by rpki-client on console-ams.rpki-client.org