Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/f2abeee8-9d3d-3f13-bda8-a6940335469b.roa
File: f2abeee8-9d3d-3f13-bda8-a6940335469b.roa (raw, json)
Hash identifier: 0dpU5Rl6q6MYaKV4bAhvOqk9FFSfykEkRYKdwuHa3Es=
Subject key identifier: 79:2F:89:A5:F1:43:6A:BE:27:E9:02:90:54:0A:33:3D:BD:7C:D3:FE
Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Certificate serial: 010D0C9F4328576D51CC73C042CFC1713107D866
Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/f2abeee8-9d3d-3f13-bda8-a6940335469b.roa
Signing time: Tue 31 Mar 2020 14:38:49 +0000
ROA not before: Tue 31 Mar 2020 04:00:00 +0000
ROA not after: Mon 04 Jul 2022 04:00:00 +0000
asID: 20099
IP address blocks: 192.44.70.0/24 maxlen: 24
2620:89:c000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:31:07:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Validity
Not Before: Mar 31 04:00:00 2020 GMT
Not After : Jul 4 04:00:00 2022 GMT
Subject: CN=e89a5bf0-488b-4204-a4db-f47a094fa738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:e7:a6:27:98:38:13:ac:40:5d:4c:7f:73:
3f:a1:7f:10:c9:e9:6c:25:eb:5b:f9:33:1c:1f:d1:
05:f8:72:7e:6c:4d:d8:be:5c:ce:e3:12:1b:b5:d5:
08:be:00:9d:31:e9:2d:4c:20:43:22:17:6c:92:9d:
9c:76:1f:41:9c:0c:05:d6:42:b7:af:13:78:9c:c2:
38:88:11:5f:23:98:20:72:66:85:bf:90:ff:ff:ea:
1a:8c:e1:41:6a:e7:6a:1d:8a:85:ac:03:72:42:b3:
47:97:50:66:fb:5f:74:26:dc:10:fa:ea:6f:42:8f:
93:f7:c0:20:c9:62:26:91:66:27:5b:55:3d:2b:33:
f4:b6:5e:d7:f3:bd:c8:92:14:2c:2c:99:02:c4:b7:
90:f0:ca:36:40:f3:be:cc:e0:21:0d:78:e6:24:0a:
b5:33:d9:4c:5d:14:04:a9:09:db:b8:c2:46:10:54:
a9:ff:16:f3:16:ea:06:b7:04:81:46:01:66:7f:fd:
6f:fa:0f:b6:2f:db:76:e5:90:10:0c:bb:d6:12:a5:
49:d6:a0:7b:30:d6:aa:7a:70:11:fe:d2:5a:62:24:
28:51:6f:a3:e6:bd:4d:49:c9:63:7c:24:f8:bd:71:
49:c9:08:29:56:03:27:25:00:f4:d3:be:d7:60:d2:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:89:A5:F1:43:6A:BE:27:E9:02:90:54:0A:33:3D:BD:7C:D3:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/f2abeee8-9d3d-3f13-bda8-a6940335469b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl
X509v3 Authority Key Identifier:
keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
sbgp-ipAddrBlock: critical
IPv4:
192.44.70.0/24
IPv6:
2620:89:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d6:8e:de:86:0b:4a:f8:19:82:09:1e:40:bc:84:80:c3:02:
d7:12:29:37:70:80:08:f7:55:14:82:fe:48:91:1f:9b:05:86:
39:25:9a:90:0d:2b:ab:92:60:dd:bb:7f:b3:ce:43:80:cc:82:
10:d1:a1:e6:ce:cc:10:b4:15:17:ca:34:c7:ac:4f:a2:4d:5c:
e3:e5:c5:93:34:b5:c8:65:57:f2:7d:a6:1d:30:d5:9f:ab:07:
72:62:d2:cc:73:b1:9e:34:5d:23:6f:d6:88:a1:88:95:4b:7f:
0f:80:5b:ad:48:39:25:61:fc:ad:61:6d:05:63:d3:2b:b9:70:
cf:fd:12:d4:76:7b:19:6b:fc:b8:e3:71:d3:03:35:40:50:63:
8c:5a:7d:b7:b6:b6:5c:5b:63:06:73:31:a9:9d:22:c6:fd:a4:
cc:44:c7:09:fe:a5:24:d1:1f:56:f9:78:bb:77:14:de:75:c4:
90:48:1e:5d:9e:1d:8f:bb:e2:7a:c0:93:5d:d6:d5:7b:2b:fc:
1f:96:5f:f0:4d:22:b6:8d:57:39:be:69:ee:d4:83:ac:39:95:
2d:1d:b5:35:1b:2c:33:7e:4d:5c:8c:ca:b2:73:6d:3d:ec:9e:
86:e7:06:f4:1e:b4:66:c2:0f:1b:ff:c3:55:2a:78:a9:ef:79:
10:21:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org