Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/aaa12b7b-8c7b-3957-b79d-7dd4ededc145.roa
File: aaa12b7b-8c7b-3957-b79d-7dd4ededc145.roa (raw, json)
Hash identifier: uUhpDA62uH1ey74MZNlgAb9AfeAL3rrRvD8ULvCRfvs=
Subject key identifier: 2A:60:C2:FC:F4:1B:1C:23:D7:31:5D:31:C2:ED:ED:94:70:B0:B6:93
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F4328583CEA1C5823C62078EE3958E400
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/aaa12b7b-8c7b-3957-b79d-7dd4ededc145.roa
Signing time: Thu 12 Mar 2020 04:00:00 +0000
ROA not before: Thu 12 Mar 2020 04:00:00 +0000
ROA not after: Sat 18 May 2024 04:00:00 +0000
asID: 1239
IP address blocks: 64.40.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ea:1c:58:23:c6:20:78:ee:39:58:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Mar 12 04:00:00 2020 GMT
Not After : May 18 04:00:00 2024 GMT
Subject: CN=bad9cd34-079c-479f-a63a-cd15cb89a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:6f:e4:3e:37:79:cd:42:f6:c0:3e:a0:de:
92:d6:95:28:f1:c6:39:4e:24:f2:de:36:38:be:ab:
64:73:77:6a:2e:9f:fe:ea:73:74:4f:79:d6:91:8a:
d8:17:56:13:21:17:a9:4e:d5:22:ab:cc:dd:3f:86:
49:27:b7:d5:67:29:ef:d5:8a:88:cb:3b:c7:9c:07:
34:fd:76:10:c0:80:0e:7c:0f:a9:aa:eb:3e:ea:62:
19:b6:a7:5d:8d:3f:0a:be:f6:f3:b2:57:56:c8:85:
4f:dd:70:4c:ab:39:6b:59:e1:66:e0:25:1d:1e:19:
46:18:f9:3f:b7:06:cb:6c:7c:55:e7:fd:92:f3:03:
65:dd:f4:13:16:9a:7e:a5:09:d4:37:e3:69:1d:90:
ed:80:6e:46:56:4b:c4:85:b6:ec:31:fe:7f:e8:32:
5b:86:01:50:61:4d:b8:3e:cc:20:11:17:b3:d9:2b:
dc:78:9c:18:4f:78:20:6d:9b:e6:4c:09:bd:e3:ff:
71:98:5c:07:79:d3:e1:93:4f:da:9f:9d:ef:ff:62:
0e:3b:36:68:51:cb:d3:e7:15:e0:3e:84:c5:54:f3:
93:3d:1c:9c:51:3c:71:30:9b:ad:eb:89:ff:9b:e9:
e1:01:ea:0f:54:e1:35:8d:2f:a6:31:42:7d:a9:27:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:C2:FC:F4:1B:1C:23:D7:31:5D:31:C2:ED:ED:94:70:B0:B6:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/aaa12b7b-8c7b-3957-b79d-7dd4ededc145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:96:db:95:ca:08:20:54:46:a7:b9:fc:0e:8c:22:71:d2:c8:
71:f8:c5:92:17:6d:d2:bc:5d:e4:3b:fd:ab:be:37:f0:75:be:
36:22:8f:60:1c:78:4a:88:62:53:80:4e:e0:c0:b1:00:c1:62:
97:f7:58:78:4e:0f:9a:3f:ca:4d:2a:3e:b1:97:87:58:a7:51:
83:16:e1:3e:ff:a4:c0:66:ae:47:45:39:0a:b8:f7:52:8e:3a:
52:08:5a:6b:8d:6a:86:52:89:1d:ba:c7:a1:28:c3:d8:75:3c:
8a:5b:46:92:bb:92:fe:a7:2f:b6:36:bb:13:cc:4f:82:5b:bb:
a3:5a:63:a6:a7:b1:11:cf:bd:e7:9f:15:37:33:15:6e:49:6a:
23:48:9a:83:6e:1e:13:df:84:89:bb:29:d9:0d:d5:7f:c9:b9:
d5:37:6b:4d:85:02:50:dd:88:22:9c:85:2c:18:a4:13:ab:ce:
97:a1:0c:24:fe:e1:64:65:8c:f2:b0:8a:fb:57:11:9a:7d:43:
95:c6:8b:76:28:80:4b:a3:10:5e:47:40:95:5b:c9:47:69:c8:
f9:50:5b:ab:b6:2f:c4:3e:9b:4c:ae:ad:27:94:e4:11:25:5f:
0e:98:c2:b5:44:51:32:64:46:36:7b:51:dd:54:75:6b:11:77:
7d:49:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org