Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05f223e1-b614-334c-aab4-912f2d3e2ba1.roa
File: 05f223e1-b614-334c-aab4-912f2d3e2ba1.roa (raw, json)
Hash identifier: gYdMvLqsHgOOnb1n/PvKMmxBsXNDmss7FTO3jU86yus=
Subject key identifier: 25:91:9C:8C:B1:32:67:68:BB:17:E4:FC:C9:A7:FB:CD:99:54:82:7E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314D4B881CAD9E9C2D0C400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05f223e1-b614-334c-aab4-912f2d3e2ba1.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 204.101.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:d4:b8:81:ca:d9:e9:c2:d0:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d6960123-7eb5-4261-9914-6371f6d439b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:97:8f:d1:6e:42:8a:a5:de:f4:e3:14:38:
4d:5e:0c:4d:b1:b0:41:f8:3e:7c:21:e0:54:d9:c5:
1e:36:29:48:7d:5c:cd:32:8d:d5:f5:7f:6b:7b:28:
28:12:0f:0c:13:23:26:93:21:6b:56:9b:7e:ea:be:
fd:41:db:c8:19:f0:aa:24:bb:07:17:6d:aa:bf:d8:
a3:4f:f9:17:0b:45:12:79:95:ac:1b:94:bd:5e:d2:
65:75:f1:c8:e8:28:ef:2d:52:46:c2:a8:7f:fc:8c:
b7:92:c0:ff:49:ef:8e:ad:04:c5:09:d4:91:d0:26:
31:89:26:a1:3f:c6:ef:d6:ce:fb:a3:34:7a:2c:b4:
52:0d:f5:ef:b1:59:87:d7:95:75:53:49:86:63:b3:
9e:85:61:e2:fc:64:b0:64:8d:75:82:ea:5a:4b:8b:
cf:e0:97:fd:6b:c6:4a:78:db:30:05:db:ea:ac:d6:
de:ca:53:86:73:b0:3b:79:49:cc:c0:40:bb:ae:69:
d0:8c:46:73:f3:be:cc:6f:48:60:45:c2:8c:fc:8d:
ea:d2:28:a8:18:81:e5:e6:a2:ba:1a:9a:4b:db:50:
91:d1:b7:1c:c5:92:e0:a2:e0:79:94:14:da:58:8d:
79:65:59:fd:8a:6d:99:0a:3e:de:83:26:c9:2b:71:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:9C:8C:B1:32:67:68:BB:17:E4:FC:C9:A7:FB:CD:99:54:82:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05f223e1-b614-334c-aab4-912f2d3e2ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:c9:3d:0f:e8:61:81:03:3b:5e:e0:b0:17:af:2d:a5:dd:e9:
31:4e:09:1a:4b:3f:e3:da:f8:bb:56:59:64:7e:55:d9:47:24:
46:0d:22:05:6a:a1:b2:30:8f:62:43:c5:97:15:99:97:13:56:
1f:f5:8d:38:40:fb:99:49:ba:bb:b6:82:37:68:66:97:25:8b:
ad:f6:07:06:dd:10:e8:f2:b3:c4:11:af:ba:0d:97:dd:c8:85:
d9:5b:93:4a:7e:9a:56:45:1f:d0:0e:75:9a:dd:d0:8f:d5:d8:
34:9a:f4:86:31:4c:0b:dc:bf:ca:de:b7:c0:47:e5:01:e8:02:
f0:06:aa:89:ab:1d:58:b0:40:7e:65:d4:50:a9:b9:bb:83:a4:
8d:03:e6:8d:88:49:3c:7d:16:7b:7d:e8:b1:fe:40:de:d7:6e:
99:3d:75:30:97:48:73:d5:d4:7a:d9:c2:fc:51:42:d8:51:ba:
3c:f1:b9:5f:7a:8f:7f:19:3b:d6:29:43:05:dd:57:3e:c7:07:
07:51:69:5a:3f:1b:cb:da:9d:14:b5:6a:47:e1:a8:e4:e7:13:
a8:ca:2f:96:7f:ac:93:54:d2:2a:54:0d:de:c5:03:ba:ba:6f:
39:7e:22:e9:1d:c9:88:ed:29:c3:f8:1b:3d:b9:f9:29:69:0c:
3c:f5:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org