Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa
File: 2ff0568a-3c32-3520-8c54-98271e36ec7a.roa (raw, json)
Hash identifier: WmWiNcC4sPO0cD9D200OKdlWcY+3qFArQQ6Nx8QHWYs=
Subject key identifier: 21:73:76:79:3E:D3:05:9E:E8:10:DE:99:96:4C:7B:EF:CE:20:DB:51
Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial: 010D0C9F4328576D51CC73C042CFC170F46F11FF
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa
Signing time: Thu 19 Mar 2020 20:14:44 +0000
ROA not before: Mon 10 Feb 2020 05:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 158.51.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f4:6f:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Validity
Not Before: Feb 10 05:00:00 2020 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=45fb7304-e034-40bc-b515-77a74b56feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:d3:2b:94:4a:b4:ea:9f:f4:a5:cc:f8:50:
b9:dd:c3:f8:bb:53:fa:09:c8:64:63:fc:06:08:5b:
d1:30:87:66:cd:74:c2:52:b0:e7:e9:be:b6:f9:47:
83:e6:bd:17:87:58:bd:b0:3e:ba:ad:51:ec:06:66:
f1:fc:6e:7c:87:a7:3e:69:3a:25:6a:af:d4:dc:d2:
c8:9a:59:86:ed:c2:cc:57:06:64:53:a0:68:d8:13:
5b:a4:7f:95:38:3f:a1:e1:ca:6d:6b:d2:70:33:56:
4d:94:80:b7:aa:8a:4c:c6:09:31:5f:33:55:fc:53:
44:c7:0a:84:af:12:15:2c:f2:5d:a3:bd:86:b3:60:
4c:23:d9:f1:d3:e2:54:24:23:2b:41:81:3f:08:9d:
15:fe:9d:33:6e:4b:63:3a:f9:63:d5:ba:9e:f2:53:
77:d2:cf:7d:b6:51:ec:4c:e4:fb:cf:5e:12:c9:ac:
28:0a:45:0d:b5:1d:83:b7:1b:db:ad:4a:22:95:92:
23:a8:56:17:d3:46:06:1d:20:68:41:ee:aa:b8:bc:
d2:bd:18:7e:9f:4e:1c:d0:19:45:18:4c:7f:7e:a0:
b1:23:6a:59:a2:6b:db:ac:cd:b5:50:20:49:69:a3:
08:29:9d:58:a3:ce:4c:1a:c2:3e:d4:2e:cc:cf:3f:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:76:79:3E:D3:05:9E:E8:10:DE:99:96:4C:7B:EF:CE:20:DB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
X509v3 Authority Key Identifier:
keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:63:28:69:aa:48:65:b0:89:c0:77:48:00:39:6b:ea:0b:77:
08:d5:33:0c:f1:40:c9:0c:4b:ab:d9:b0:43:45:7b:f0:30:1c:
b2:7e:fe:c6:f1:af:6f:bf:32:e2:5e:7c:8b:3c:a0:d6:c0:3f:
e7:a6:a6:6f:8e:ca:5e:a9:c3:0f:4c:2c:84:a5:b8:02:2f:02:
e5:50:18:24:7f:27:dc:93:c7:b6:82:3e:42:68:bf:9c:5b:12:
8b:4b:d8:f0:40:c2:7d:76:8b:0d:0e:37:23:4f:d9:80:13:44:
81:29:74:53:ac:b3:74:ec:01:ea:fd:ce:1c:b6:c4:82:ce:05:
5e:dc:fe:8f:a8:14:d3:78:1f:d2:c4:78:7d:8a:11:03:89:72:
3f:8b:46:14:8a:55:80:ad:b5:b6:f3:b8:69:d5:6a:ef:39:32:
17:c7:54:f6:44:56:85:51:e0:a5:88:2d:79:25:a6:85:9e:1c:
c9:1a:62:bb:4e:61:55:4b:25:3b:ec:7c:09:d3:07:9c:4f:d7:
6e:cd:7d:67:a9:25:ff:9c:e4:12:1c:00:bc:e4:8f:5a:38:e0:
d3:2a:59:6c:89:5d:a3:1b:0a:55:2e:d9:19:68:9f:ee:86:ce:
aa:86:9b:44:e7:ec:e4:6d:32:95:0e:c7:90:b3:b4:65:54:32:
9a:f3:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org