Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3e117e95-b6d5-3cf5-a4c0-a10a0b4d5684.roa
File: 3e117e95-b6d5-3cf5-a4c0-a10a0b4d5684.roa (raw, json)
Hash identifier: Fxq4RJj/axu1785y73KAsKzmN7m8VTLyZjwudFvOhNA=
Subject key identifier: 33:1B:DC:2D:82:A4:87:2B:E0:C6:58:64:EC:FB:12:5A:D4:5C:7A:EA
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285842D8142C5BB32F3007EA8E1E00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3e117e95-b6d5-3cf5-a4c0-a10a0b4d5684.roa
Signing time: Fri 11 Aug 2023 01:00:22 +0000
ROA not before: Fri 11 Aug 2023 01:00:22 +0000
ROA not after: Thu 09 Nov 2023 02:00:22 +0000
asID: 16509
IP address blocks: 208.70.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d8:14:2c:5b:b3:2f:30:07:ea:8e:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Aug 11 01:00:22 2023 GMT
Not After : Nov 9 02:00:22 2023 GMT
Subject: CN=e9bb595b-f4fa-4ff0-a48d-dc3c0e5ac1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:d8:8a:6a:16:b4:6c:b3:52:41:82:87:b0:
0b:4c:a9:e1:4f:e3:79:c2:e3:68:d5:ba:e2:c4:4a:
88:82:c7:a9:dd:1d:40:1e:6e:d1:b5:a3:d6:65:7b:
2e:fa:50:dd:87:bb:8d:9f:e1:28:89:6f:0e:f9:32:
87:c8:7e:81:8e:fb:8f:c6:86:ca:a2:11:ff:8b:b3:
36:31:f4:20:18:ff:4f:f0:d4:c9:7d:29:87:72:0a:
20:c3:7e:86:74:d8:37:f1:a2:62:31:9f:71:51:d1:
ad:f8:7d:53:0e:93:86:26:5f:36:bd:b5:f8:d1:70:
22:24:f1:73:0b:87:80:55:68:3b:02:6c:6d:a8:7e:
ab:7e:57:d5:45:e4:bf:c5:c4:aa:84:ad:c1:ec:3c:
98:68:c9:59:c5:79:64:73:6a:51:9c:e7:a1:bc:8b:
f1:d7:e1:f7:01:ee:65:27:ae:d7:0c:7e:6c:47:a1:
63:06:91:44:9b:e4:a1:ba:20:2e:d2:d7:50:04:b2:
94:9e:49:2d:a3:ca:0f:09:a8:4c:cb:76:23:fa:64:
41:a8:ec:fe:bf:04:42:40:0e:3c:a2:9f:26:ed:81:
b2:87:64:50:3f:24:8b:26:99:86:d2:84:ab:f3:7c:
64:2a:85:ef:86:e4:11:7e:bd:2d:29:a4:e7:17:c2:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:DC:2D:82:A4:87:2B:E0:C6:58:64:EC:FB:12:5A:D4:5C:7A:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3e117e95-b6d5-3cf5-a4c0-a10a0b4d5684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:09:51:45:ac:94:d3:11:84:8d:c0:64:37:de:4b:75:4f:e2:
ce:f4:36:95:5f:de:dc:80:fd:1c:e3:90:23:17:82:44:52:8d:
7f:3a:44:06:f1:d2:e8:cc:66:15:8e:9c:8e:d6:f8:b8:4c:76:
04:d3:00:44:02:07:94:ac:f0:e8:d6:e6:34:e8:f0:80:cf:14:
c4:7f:0a:29:6c:f1:07:1c:5a:36:10:0f:b8:72:03:68:14:4a:
5c:b2:f9:e0:6a:e6:13:84:b1:9c:78:79:85:49:95:eb:60:d5:
42:f5:4e:a1:10:e2:4a:eb:0a:ee:fb:29:ab:1a:d3:58:f3:84:
86:2e:db:10:42:b5:63:a8:ec:20:7b:45:a7:36:e0:ea:b9:16:
bd:97:43:75:e2:f0:e1:03:53:e0:e5:00:71:7c:cb:45:8a:0b:
61:c2:c2:87:61:d5:57:3a:6d:12:e1:e5:65:a0:09:b7:57:62:
c6:ff:eb:9c:d1:77:47:3f:eb:74:f7:6c:0f:6e:21:6c:8e:cb:
3b:1a:38:cf:46:f0:3d:ec:aa:77:7c:ba:05:ca:c8:e4:33:b7:
b7:c5:a9:57:b7:d3:4b:ff:46:5f:ad:33:98:05:ed:15:50:2e:
49:28:f5:15:73:09:c6:8a:3e:7e:4c:85:db:4d:59:68:76:89:
51:e0:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org