Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d79b19d4-6491-3b49-8044-c2f0eeab5245.roa
File: d79b19d4-6491-3b49-8044-c2f0eeab5245.roa (raw, json)
Hash identifier: wbTEMqDYWn5wm+/rziRPpYAg3wqBUxZhrKH/E3nh6as=
Subject key identifier: 1A:B1:59:B9:2B:72:FC:6B:89:E9:85:87:FE:2B:E9:85:19:C6:5C:DB
Certificate issuer: /CN=c5866eff-c061-4d47-9ecb-06697eb4f13d
Certificate serial: 010D0C9F4328576D51CC73C042CFC171987668A8
Authority key identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d79b19d4-6491-3b49-8044-c2f0eeab5245.roa
Signing time: Mon 20 Apr 2020 16:40:29 +0000
ROA not before: Mon 20 Apr 2020 04:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 53591
IP address blocks: 208.74.136.0/22 maxlen: 24
208.94.32.0/22 maxlen: 24
2604:4700::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:98:76:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5866eff-c061-4d47-9ecb-06697eb4f13d
Validity
Not Before: Apr 20 04:00:00 2020 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=90d578ed-444d-4b64-9e28-bea56242f04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:c7:f2:34:eb:f0:e7:fd:0e:37:f9:fc:3e:
7e:d5:ca:e4:db:5e:51:62:80:9a:15:4e:50:90:94:
6c:c1:1a:3e:e1:af:fc:16:21:fc:d3:ca:88:01:c6:
de:3f:0d:47:98:45:b8:0a:a7:02:bf:61:99:1f:87:
4f:54:26:b0:6b:15:ac:25:d5:53:5e:27:91:9c:f3:
eb:3c:22:41:2a:45:f2:a6:84:f1:3c:54:ae:4c:71:
89:a9:36:da:59:07:12:2c:41:20:f5:c8:c0:18:37:
3f:a1:f8:13:04:2e:f3:77:32:20:81:e8:aa:3b:d3:
11:60:60:41:49:0a:8e:3a:52:f1:f7:2a:54:fb:e4:
22:61:c9:71:12:9e:ae:46:2b:81:a4:77:b1:99:fc:
66:19:a8:68:e6:2c:d1:87:a3:61:7d:a3:8c:1e:8a:
2c:98:46:e7:54:f7:ae:a5:6f:06:be:b4:06:41:6c:
f9:5b:9d:2d:78:81:07:8b:26:67:97:d6:5a:c4:0c:
36:f6:6b:db:00:7b:7e:54:42:05:f2:d8:cb:ac:9b:
c1:6a:a9:6a:6b:b8:29:c6:2d:d9:b0:76:94:aa:2c:
21:1e:ce:ef:89:59:20:0b:e0:95:fd:ba:c8:b6:fb:
07:c7:2b:13:64:5a:a3:55:bb:10:fa:d0:1f:a8:98:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:59:B9:2B:72:FC:6B:89:E9:85:87:FE:2B:E9:85:19:C6:5C:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d79b19d4-6491-3b49-8044-c2f0eeab5245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.crl
X509v3 Authority Key Identifier:
keyid:3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.74.136.0/22
208.94.32.0/22
IPv6:
2604:4700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:25:2f:61:36:77:75:86:ae:15:4f:cb:24:d9:66:1a:70:58:
48:fc:ea:70:d9:13:52:98:18:8e:4d:15:0c:a2:d9:ed:7f:9e:
b7:f7:f4:e8:9b:11:ab:26:47:71:b4:d2:30:bd:2a:dc:a3:cc:
b0:1a:a1:3f:a2:66:fb:35:3f:a9:4e:68:5e:fe:a8:c8:41:97:
bb:c0:7d:02:b5:e1:0b:52:5e:eb:99:39:9b:15:57:96:ce:df:
ab:70:94:df:0b:e6:d1:a2:bb:93:85:d0:6c:71:52:49:4b:d9:
a7:b1:2d:94:86:f6:54:83:6b:a1:07:e1:88:6f:4e:56:2b:b3:
0a:68:92:ec:6f:17:c0:9d:57:4b:23:1d:d8:b5:f8:60:7e:1f:
40:04:fa:06:ec:5e:24:86:66:ee:f7:13:dd:ed:58:bf:f6:4b:
76:e6:8a:d8:ed:56:29:49:4c:46:23:d7:3f:2d:93:82:8f:dd:
e8:5a:88:cb:f4:ef:9b:1b:d2:19:8a:0d:9f:85:a7:e3:22:99:
d9:43:16:89:72:f0:90:1a:58:1c:99:63:ca:31:7e:0d:59:a1:
fd:66:84:37:b0:aa:3f:93:8c:6b:54:9b:8e:33:26:e5:9c:62:
1a:a7:00:34:d3:ce:f5:da:fd:2d:81:3c:1c:05:75:60:3d:57:
55:6b:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org