Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9bb5fedb-e2ed-30fb-b449-77c0cb6fbba7.roa
File: 9bb5fedb-e2ed-30fb-b449-77c0cb6fbba7.roa (raw, json)
Hash identifier: YTXaPx0jXdLDBHz13G4Qc/fFPybdMrMx3aQJK6FTNtc=
Subject key identifier: FB:F0:88:9F:76:58:E7:F9:47:69:14:FD:E2:6F:86:EB:4A:1D:5C:1C
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285842A1A3BB8A4D5553CD22D3BF00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9bb5fedb-e2ed-30fb-b449-77c0cb6fbba7.roa
Signing time: Sat 22 Jul 2023 13:00:17 +0000
ROA not before: Sat 22 Jul 2023 13:00:17 +0000
ROA not after: Fri 20 Oct 2023 13:00:17 +0000
asID: 16509
IP address blocks: 208.70.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a1:a3:bb:8a:4d:55:53:cd:22:d3:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jul 22 13:00:17 2023 GMT
Not After : Oct 20 13:00:17 2023 GMT
Subject: CN=772f8644-2b01-43b5-8bab-ad110fbfbc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:1d:e7:51:ff:e1:86:25:ee:c2:79:0b:3a:
4b:50:d2:91:5c:bf:8e:aa:40:66:d9:e0:42:44:2d:
38:a1:55:8f:a4:01:e5:8a:d7:54:f6:9b:0d:35:24:
c7:13:63:f7:ab:f4:84:0a:6d:9d:7d:82:cb:61:65:
10:bf:b4:9a:cf:74:59:f4:b3:f7:82:45:8c:4d:45:
29:74:4a:a4:cd:94:b3:02:ef:ca:58:f3:a8:86:07:
13:d2:e2:a0:3a:a0:5f:c4:19:6f:da:9a:14:da:95:
65:06:c5:89:00:1d:78:02:e7:3d:1d:6f:f4:7d:80:
06:9d:f4:fb:d0:e8:2a:04:77:72:a1:28:0a:26:d3:
fd:55:56:cd:f0:e6:d9:57:38:c8:cb:79:0b:bd:0f:
4b:23:7c:35:1b:98:b4:98:ef:d9:6d:25:e4:06:bd:
ab:da:18:ed:32:73:9a:28:ea:ee:16:e5:a5:1f:c3:
31:f9:f9:19:86:1c:dd:68:d1:e6:a0:b3:71:39:51:
5b:e5:0c:d1:4d:25:a0:aa:ca:b6:40:54:8e:41:59:
82:92:8a:c8:e5:25:fb:ff:47:5e:e1:cf:ed:d1:4b:
5c:1b:8e:3c:48:db:b1:15:78:9c:c1:b9:0f:b6:9e:
a9:62:19:b1:0b:47:86:da:d7:0e:26:f7:9a:b4:96:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F0:88:9F:76:58:E7:F9:47:69:14:FD:E2:6F:86:EB:4A:1D:5C:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/9bb5fedb-e2ed-30fb-b449-77c0cb6fbba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:bc:b7:41:66:41:37:e6:73:b1:ef:bd:57:70:1d:6f:4a:7b:
b6:51:14:a7:2a:a9:3a:22:9b:f2:26:f2:51:ca:99:80:9a:bf:
cc:a9:f1:2f:23:c4:e3:5b:0f:e9:9e:ee:16:16:bd:e6:8a:63:
4c:23:aa:55:8f:a4:fb:88:f1:0a:b2:3f:05:c6:bc:c5:e5:57:
75:f2:c9:52:c7:11:10:8b:87:d2:0d:aa:8a:55:9c:32:63:76:
0a:d3:cc:22:7d:cb:96:5c:dc:92:cc:43:13:29:d3:60:c3:af:
f3:80:d3:c2:51:6b:df:76:d5:16:69:32:51:e5:6b:24:52:fd:
77:3d:ad:53:e3:90:cc:45:ba:40:e7:b3:f5:c7:0f:16:3f:7b:
58:8c:a6:df:d3:8e:74:fa:93:ce:d9:6d:f0:14:e6:02:a7:06:
06:0f:b6:37:0b:87:4a:b2:d1:dc:a0:95:aa:88:c5:88:91:0d:
e5:c1:e5:b7:cf:80:b3:43:50:69:c5:c3:77:8f:5f:f8:ad:3c:
96:48:5c:7d:74:e2:05:07:d9:1e:97:e5:d2:ae:d6:51:fa:71:
05:10:7b:d1:49:0b:59:c6:60:c2:b4:40:f3:85:e7:9b:5e:54:
3c:e0:b4:92:2e:4e:eb:e0:d0:ae:4d:1e:79:50:98:d2:bf:c2:
83:2d:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org