Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1074aa45-b701-398a-b2da-b055a92fa42d.roa
File: 1074aa45-b701-398a-b2da-b055a92fa42d.roa (raw, json)
Hash identifier: J8l+zB2/h1blUaB9on0mfwOvsR5Oj5t1mAr+TLFz168=
Subject key identifier: 65:66:2C:15:17:12:DF:85:0B:7F:31:59:54:87:46:B2:B2:25:61:54
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0766533E3D979C7BE9400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1074aa45-b701-398a-b2da-b055a92fa42d.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 16532
IP address blocks: 207.35.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:76:65:33:e3:d9:79:c7:be:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=96d782fd-3419-4169-bd10-0bc888108d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:f0:01:52:46:f4:62:7b:72:22:d9:bd:e7:
00:22:89:f2:7d:00:2d:9c:e3:9f:c8:d4:d9:ce:7e:
2a:e8:55:63:84:02:a1:8a:1d:d1:28:5f:7b:2a:86:
66:00:19:c4:ca:37:6b:de:87:e7:ee:6e:8b:62:37:
20:17:47:36:1b:08:05:02:9b:59:93:e4:8d:10:88:
e4:56:69:29:25:ea:a9:77:08:4c:49:9b:83:87:b8:
a3:4c:75:81:87:66:a5:27:c4:31:19:d5:a3:59:c1:
48:29:bd:7d:5d:6a:5b:71:47:b4:bd:6c:81:f6:cf:
05:68:8a:15:ab:29:6b:60:29:8c:49:19:16:2b:c8:
a5:67:f1:1b:c4:71:a1:a9:06:38:42:40:96:6c:5b:
b6:8f:af:bb:ea:e6:22:16:00:94:2d:27:94:28:3c:
b3:2e:fe:dd:22:bd:a5:93:90:79:4f:49:11:85:2b:
66:6f:a2:9c:80:53:7b:da:4b:46:1b:2f:93:02:f1:
a2:6c:ca:5e:2a:b0:1f:c7:18:21:b8:0b:b9:e1:2c:
33:f9:d2:ba:5e:ed:d0:9f:81:0a:25:6f:64:3c:00:
2c:59:8a:e5:d0:e9:c3:39:f0:e1:d8:5b:eb:11:a9:
28:53:a4:5d:8b:26:44:6a:cc:e6:51:07:ab:32:3e:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:2C:15:17:12:DF:85:0B:7F:31:59:54:87:46:B2:B2:25:61:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1074aa45-b701-398a-b2da-b055a92fa42d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0f:0d:5a:05:46:f9:65:4c:11:26:3e:e5:52:c5:38:6a:8a:
9f:53:5c:c5:93:e0:62:b3:88:b4:f2:6f:a4:b4:df:bf:3e:36:
c1:e4:91:6d:98:7f:94:f4:cb:c7:4a:ee:80:1e:56:6d:44:70:
14:e8:26:ac:fd:81:cc:23:25:f4:e0:3d:62:12:44:d0:74:40:
b8:22:7e:a7:41:35:2c:10:f2:de:f2:af:27:1a:42:c3:fd:62:
84:c1:b9:56:62:8a:0d:87:2a:73:05:4c:57:f5:26:1a:ed:51:
34:a0:91:5f:fb:96:2e:d9:c0:d6:71:98:30:81:e4:56:1e:f7:
0e:28:b2:49:6a:8f:1f:64:c3:b7:e7:d9:a3:2f:e7:b4:7e:d6:
51:18:89:eb:d4:5c:3d:55:52:07:7c:1a:94:3f:df:d2:39:78:
e0:8a:7d:6f:09:f8:6a:be:3d:3e:cd:d9:8e:39:b6:68:aa:67:
14:0b:39:52:bc:08:63:89:7b:8a:be:68:57:a2:4f:c5:7c:96:
aa:98:be:bc:81:a3:db:d6:fe:61:17:fb:bc:62:70:87:a2:16:
fd:de:57:cc:aa:7b:7f:c7:4c:15:84:0d:5e:d6:e4:a7:b6:af:
61:4a:fc:39:3f:50:38:2b:ee:39:4e:ca:20:fb:31:86:fc:01:
ed:44:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org