Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02446841-5e78-38c2-b61b-6e3ea759357f.roa
File: 02446841-5e78-38c2-b61b-6e3ea759357f.roa (raw, json)
Hash identifier: JQ/MbTyHjKt3gdtdd3eKrAekBc9AHn8H3LJH1zaEED8=
Subject key identifier: 8E:46:A4:C4:27:BA:8B:C4:CE:1F:F7:27:25:C3:93:11:C9:24:3E:D1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0BFF2025A9668297F0B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02446841-5e78-38c2-b61b-6e3ea759357f.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:bf:f2:02:5a:96:68:29:7f:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=32de20e1-a6f1-4fb9-b526-a76ed7768beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:53:12:42:48:cd:01:9a:76:b6:32:25:e4:
68:45:f1:a4:ca:97:66:66:4b:02:3e:6c:00:56:4a:
fe:68:f2:11:fb:76:59:e6:46:0b:6c:76:f4:35:57:
05:e3:62:03:42:62:fb:5f:28:13:0e:fd:d7:d5:80:
ad:50:04:5a:30:94:2c:b7:cf:07:68:bc:41:78:9c:
99:1e:6d:ad:9d:b7:df:cc:ec:bf:be:63:05:32:dd:
a7:c0:49:b5:02:a0:05:e9:62:82:a6:ac:15:79:f9:
b9:cf:b6:85:52:59:e1:9a:8a:5b:c6:50:19:3f:f6:
de:9b:9f:a5:8b:b3:21:ec:65:04:9b:c7:0a:7a:14:
ae:8a:61:71:53:73:8b:9c:71:a9:09:c3:bc:47:f7:
0e:ee:ba:b4:08:af:60:87:5c:98:37:72:78:21:97:
a6:4f:b9:fa:4a:47:33:30:b5:01:2f:e9:a4:ef:77:
13:ef:ac:6c:2d:8f:74:d3:62:0e:b1:7d:23:0c:7f:
37:57:88:b3:c3:52:53:b9:aa:61:49:aa:51:36:fa:
aa:b4:e1:8c:44:c7:86:e4:5f:69:a3:91:78:4b:98:
14:d7:c9:a4:0e:f5:09:03:1a:dc:1d:10:4d:b1:d0:
8a:57:c0:1c:5a:97:a9:55:ec:5e:39:47:6d:9f:6d:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:A4:C4:27:BA:8B:C4:CE:1F:F7:27:25:C3:93:11:C9:24:3E:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02446841-5e78-38c2-b61b-6e3ea759357f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:15:d7:fb:5d:de:b4:91:19:62:5c:23:0b:e4:65:9b:f2:a1:
00:f4:f6:ac:e9:3c:6e:ed:f5:6c:04:ee:8c:24:d9:f8:1a:64:
7c:7c:4c:83:35:73:dd:5d:df:52:e0:bd:c0:59:f1:76:19:08:
0f:51:67:4b:11:4a:f0:7f:e5:6d:a5:15:73:f7:53:57:87:94:
16:bd:6a:32:05:98:ba:15:de:ca:eb:7e:86:45:92:66:ce:1a:
a9:ef:c4:a8:98:02:ab:dc:d7:b8:5a:8b:f6:e2:52:c7:37:6f:
3c:fe:9c:97:07:26:b8:f3:ed:e1:88:2b:0d:fe:ba:8b:8b:8f:
ff:4d:5c:41:9a:93:29:0b:df:21:38:60:f1:99:f3:b5:f9:96:
cd:a6:42:b6:d6:cf:b8:54:8d:61:0f:8e:bf:1e:80:09:f0:17:
f2:02:4b:9b:b2:fe:de:d9:e2:88:72:95:92:ad:96:ac:29:1b:
d4:ee:89:b7:ec:ab:fa:5c:d9:90:a9:ed:06:20:69:41:63:2e:
c0:6a:e2:41:3a:d1:ef:16:fe:94:83:36:62:c5:87:6b:3f:dc:
5e:48:9f:38:56:8d:68:b4:b6:a2:2f:0d:ac:cc:a5:ac:b0:cd:
fc:7c:97:05:58:64:fd:4d:c0:da:6c:94:ad:e9:75:78:39:9e:
eb:4e:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org