Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/010f4ebc-e38c-3a3c-a01d-b7ef4a6abfad.roa
File: 010f4ebc-e38c-3a3c-a01d-b7ef4a6abfad.roa (raw, json)
Hash identifier: YzReOMI29WDVjdIwPNTugpTvxAF0sTtNo9y8C7c1qdg=
Subject key identifier: 2E:C1:44:33:51:CF:9F:15:7D:5A:8B:4C:F9:24:F0:D6:87:7A:DC:97
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFEFC2F07CFF073317FF60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/010f4ebc-e38c-3a3c-a01d-b7ef4a6abfad.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 10264
IP address blocks: 204.101.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:ef:c2:f0:7c:ff:07:33:17:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=859e937e-6762-4c00-87ad-912fec184c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:de:cf:ce:b5:6e:7b:d7:d6:cb:60:bf:1c:
88:c9:28:d5:9c:6d:1d:fc:96:76:b6:90:7b:bd:3c:
1f:23:72:f0:bb:31:3b:62:7e:d6:47:53:56:42:1f:
42:04:ff:43:62:a1:ae:f1:4a:1c:9f:a3:34:0e:53:
41:b1:ae:d9:14:27:be:1f:54:9a:5c:04:99:ec:b8:
79:c0:c2:7d:f2:94:3b:ee:48:62:a3:b9:54:34:b0:
b4:05:b6:75:05:59:0d:62:72:22:1d:0a:1e:6a:c4:
16:da:68:45:ac:3d:18:6f:c1:ef:23:0a:26:72:ab:
5c:89:44:ac:5d:ab:b5:32:a1:e5:74:c1:72:7b:13:
2d:1d:3b:fc:c0:c6:06:05:ac:b7:b4:1d:4d:70:b7:
08:b0:e3:d0:0c:92:18:38:da:c0:af:21:e4:30:2a:
ab:65:a3:e4:12:b7:c0:bd:88:40:d7:24:20:75:17:
bf:a2:cd:27:8d:2d:b0:98:9b:e2:2b:30:ac:7a:b6:
0d:e5:ce:3b:e5:62:70:25:4f:8c:d7:fc:cc:b5:42:
53:c7:96:d0:27:37:35:06:5c:95:d7:37:11:ca:9b:
88:3a:79:72:a6:7e:f0:cb:39:53:31:c8:54:4f:7d:
4a:f9:83:36:61:cf:4d:02:8d:c9:83:a7:58:eb:bc:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:44:33:51:CF:9F:15:7D:5A:8B:4C:F9:24:F0:D6:87:7A:DC:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/010f4ebc-e38c-3a3c-a01d-b7ef4a6abfad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:21:23:3b:f3:b2:6a:62:57:4b:68:4e:70:8e:80:94:ab:c7:
22:59:e4:fa:bd:e0:d2:aa:e7:a1:a9:0c:a1:1d:0a:93:e5:76:
54:c1:af:c9:15:8e:a6:7c:78:e1:3d:8f:fc:d7:f4:f3:ef:07:
d0:6a:cf:62:45:a4:b0:89:a7:6c:13:fb:0c:67:4b:6a:03:c6:
19:97:8a:93:49:35:c8:a7:22:1b:b6:98:02:0e:22:a6:34:a5:
23:15:90:28:43:65:98:71:5e:70:a9:6b:30:f4:b8:c5:d1:a5:
56:92:25:3f:0c:c1:69:0a:55:80:bd:49:89:9a:3e:4b:dd:e8:
9a:eb:16:1b:08:ac:26:d8:56:40:b8:2e:bf:8d:f0:c0:a4:37:
f2:82:f4:78:2e:0e:ed:d3:3b:a7:da:a2:84:01:69:d2:58:84:
a8:b6:89:71:31:b2:80:4a:0e:d4:74:d8:0f:3c:01:d4:2c:98:
54:49:98:b8:4d:96:75:d9:f8:d0:84:ef:da:6a:ee:5c:0c:70:
c8:b0:43:23:3c:96:6c:ed:45:79:26:34:02:b3:05:01:42:03:
39:4b:00:9d:92:06:ae:60:38:9d:1d:d9:f6:d5:60:f8:a7:c6:
98:ca:44:35:a4:7f:67:ce:0e:8b:bb:cb:16:00:c7:88:bc:7e:
25:01:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org