Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8e71c921-6cc6-32f9-8132-dbd7c733e8e3.roa
File: 8e71c921-6cc6-32f9-8132-dbd7c733e8e3.roa (raw, json)
Hash identifier: gI0MO+2Gq2h22UgpMb1rTJUQL4UbcwWHdE8T/EZHHWs=
Subject key identifier: 7F:C3:20:DB:C3:13:BF:7F:D1:19:1F:74:4D:25:B6:8B:7C:DF:2E:24
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328583AA2FDE2CE7DE81665816FB000
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8e71c921-6cc6-32f9-8132-dbd7c733e8e3.roa
Signing time: Mon 19 Jul 2021 04:00:00 +0000
ROA not before: Mon 19 Jul 2021 04:00:00 +0000
ROA not after: Tue 19 Jul 2022 04:00:00 +0000
asID: 36692
IP address blocks: 208.67.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a2:fd:e2:ce:7d:e8:16:65:81:6f:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Jul 19 04:00:00 2021 GMT
Not After : Jul 19 04:00:00 2022 GMT
Subject: CN=71a644ef-f7cb-4950-8e8c-67ef61b2b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:ae:04:be:aa:d6:fe:c7:db:27:98:00:9c:
da:6b:40:71:8e:a6:82:43:fe:d1:e2:21:0f:26:7f:
7d:89:bb:47:c3:93:22:25:f3:a9:1d:40:74:bd:85:
a7:39:82:82:d3:75:c8:d9:b6:8a:16:b0:67:ef:8b:
30:86:d6:b9:9b:31:97:e3:a2:ab:1b:18:f7:a8:bb:
5d:f8:f4:e6:63:49:eb:94:4e:5d:dd:f9:6f:72:6c:
51:b0:11:f9:bf:c9:a6:fa:29:0e:7b:67:c0:8d:cf:
69:6e:bc:45:da:6d:a7:ed:03:6a:cf:34:45:d2:63:
b1:fa:95:7e:37:ea:8b:b0:92:39:78:1a:ed:3f:71:
03:7a:2f:ec:1e:71:2c:18:4c:e1:ef:e8:1e:08:13:
ad:63:d0:a8:eb:24:d7:09:e9:7b:05:bb:83:ad:dc:
41:ca:70:e7:97:8b:51:8e:de:8f:c1:c3:fd:77:79:
8b:7e:d1:a4:ad:13:4a:39:e5:6a:f8:e6:03:56:a8:
8c:82:27:83:a6:20:a1:41:71:3e:73:9b:b4:0f:cb:
a8:69:34:03:f5:47:d7:77:b3:cb:fe:50:d4:6d:cf:
dd:a2:75:fe:fc:6d:d7:ba:a2:97:2d:73:11:40:01:
fe:46:d1:34:0f:f0:ca:f2:10:6f:2d:ed:b2:c8:4c:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C3:20:DB:C3:13:BF:7F:D1:19:1F:74:4D:25:B6:8B:7C:DF:2E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8e71c921-6cc6-32f9-8132-dbd7c733e8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:12:68:9e:8d:33:e5:77:4d:1b:05:8b:2f:32:07:02:0a:51:
b3:1c:23:da:28:8a:cb:a6:c9:7c:22:f9:60:08:c1:39:78:e5:
0b:22:ec:e1:c6:46:5b:b7:ae:5d:80:83:8f:f3:13:e0:85:ad:
b3:cc:d8:96:3e:16:a6:62:7c:68:b4:30:da:fa:20:0f:3b:a7:
9a:73:0c:30:cd:c0:c6:68:18:a4:4b:5b:27:6e:dd:45:5e:fa:
84:d5:1f:f1:f7:d4:94:e7:85:62:3c:07:2e:fe:e9:1e:e4:75:
b8:e0:2a:f3:fa:01:33:af:a8:e4:96:d0:f8:3b:3d:56:b8:c5:
f7:d7:16:d9:03:5c:5e:e3:2f:99:e7:63:33:8f:4f:4d:1f:08:
e7:07:cb:0e:36:cb:20:34:c5:f4:63:39:9c:cd:50:00:dd:0e:
43:e3:7c:87:cb:fb:38:b1:c9:d2:39:be:62:ea:0c:9a:63:f7:
2c:bd:98:46:42:d5:aa:d2:a9:aa:8b:fe:73:64:c5:26:9c:70:
ca:0a:4d:0a:cb:94:c6:97:ca:48:55:0e:91:b0:2c:15:cf:9c:
da:41:d4:fc:33:2e:d7:5d:52:c7:2d:0f:18:77:b5:6e:26:b0:
3f:f6:c1:20:c9:d2:65:ac:b6:a5:71:fa:c3:e7:7e:30:38:08:
b4:b6:5d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org