Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/128a43a5-dbdd-39c7-9381-ff9f98953a69.roa
File: 128a43a5-dbdd-39c7-9381-ff9f98953a69.roa (raw, json)
Hash identifier: d74GiKWhTaR6dmMIcfhhXNVchswDEYzVQciI8xtTZzc=
Subject key identifier: 2A:39:42:96:39:65:D1:23:52:18:FF:15:8F:AE:33:DF:62:A5:30:15
Certificate issuer: /CN=a608dbfe-af80-486b-9ebb-bee14610b2b8
Certificate serial: 010D0C9F4328576D51CC73C042CFC17203D1687A
Authority key identifier: D1:55:23:3D:12:A3:4A:36:AC:E5:88:87:EC:DD:CB:7A:A0:C6:69:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/128a43a5-dbdd-39c7-9381-ff9f98953a69.roa
Signing time: Mon 11 May 2020 12:59:14 +0000
ROA not before: Mon 11 May 2020 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 16842
IP address blocks: 208.66.128.0/21 maxlen: 24
173.229.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:03:d1:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608dbfe-af80-486b-9ebb-bee14610b2b8
Validity
Not Before: May 11 04:00:00 2020 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=675076e5-ff77-4fd7-8a8e-a85190b67852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:b0:95:25:3b:87:ad:9b:c2:f6:7c:54:e1:
4e:27:2d:78:c6:10:36:1b:97:5d:1c:1f:08:e1:12:
6b:90:6c:72:cf:13:31:09:ba:f9:97:f2:2a:71:44:
4e:e0:b6:57:2b:1c:4d:de:9b:e4:95:f3:9f:79:01:
86:ec:f6:47:8a:92:25:9d:60:b1:49:28:56:58:11:
2b:02:5e:4b:de:e8:1a:46:93:8a:a7:8d:c3:63:07:
2c:bb:71:72:76:b9:7d:79:2c:b5:8e:33:ea:82:9f:
a8:13:43:41:2a:ed:a6:56:62:4b:2b:20:39:73:22:
7b:e3:ba:69:dc:55:8b:6e:68:d2:dc:8c:d8:f4:e7:
39:51:36:c7:fd:76:1e:b2:28:34:63:a1:11:2b:f3:
c6:e3:3e:67:56:2e:04:b3:14:5e:48:f5:73:12:ae:
7e:1f:e3:ea:70:8e:fd:6e:bc:33:09:e2:5c:07:95:
a4:4f:0a:68:fb:82:d5:63:2b:77:69:c0:58:2c:06:
e6:a2:36:df:d7:ff:93:73:32:c5:b8:29:72:4b:51:
0a:ab:1b:df:99:a5:6c:a9:2a:b0:73:9e:31:aa:f9:
6c:91:f0:53:de:de:cc:50:ce:cb:b7:96:7f:cf:c4:
28:e8:76:8b:4d:f1:16:98:e8:ce:df:6a:56:c9:fb:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:42:96:39:65:D1:23:52:18:FF:15:8F:AE:33:DF:62:A5:30:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/128a43a5-dbdd-39c7-9381-ff9f98953a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/a608dbfe-af80-486b-9ebb-bee14610b2b8.crl
X509v3 Authority Key Identifier:
keyid:D1:55:23:3D:12:A3:4A:36:AC:E5:88:87:EC:DD:CB:7A:A0:C6:69:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8.cer
sbgp-ipAddrBlock: critical
IPv4:
173.229.0.0/19
208.66.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:98:74:8a:23:6e:65:e6:b9:ea:3b:15:d0:d6:a0:86:e8:9d:
70:7f:e4:5a:9a:22:9e:5a:4d:4c:5a:a6:8c:f6:c7:ee:ce:f6:
e1:0b:03:00:08:3d:49:f8:ca:5f:fb:95:48:de:6e:fa:85:26:
bd:0a:e3:50:db:19:c4:d7:92:ad:3f:95:3d:a1:b1:01:28:93:
62:86:dd:8f:3d:9f:14:39:00:ab:5a:6f:31:34:b1:24:ea:e8:
06:2f:84:ba:d1:84:a4:5d:9d:11:26:e3:97:c5:cf:d3:49:53:
9f:9e:fe:c9:15:09:04:66:6b:52:60:3b:44:ed:d0:43:07:19:
83:13:a2:2d:c4:68:19:f5:7f:1f:a1:07:f0:5a:dd:26:40:ac:
5f:5d:0a:18:7a:7c:39:74:da:96:e7:ca:c5:ff:ba:aa:22:cc:
e4:ed:19:87:e2:c6:7a:34:76:c8:ef:17:f0:9a:35:4e:21:39:
5a:ce:46:77:f5:cf:a4:e4:cb:36:f8:8c:48:97:28:c2:1c:58:
18:a9:71:38:60:cc:a2:b7:c2:e9:0b:0c:7b:bc:ce:4e:7a:6c:
7e:13:1f:df:83:eb:44:e1:57:d7:78:e1:d9:98:b3:b5:59:6a:
2b:95:3e:0a:5f:94:a9:dd:97:48:49:60:09:37:ef:ce:27:3d:
33:cc:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:42 2024 by rpki-client on console-ams.rpki-client.org