Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a8800d0-0726-39f7-81eb-46f9a51a5c81.roa
File: 1a8800d0-0726-39f7-81eb-46f9a51a5c81.roa (raw, json)
Hash identifier: gLJOLv5s1uTVWie+GvxHYiZp5K8LwIGJSXw1oSD03AA=
Subject key identifier: BD:A3:B5:9C:3A:AF:73:98:6D:6E:30:A9:8C:62:B4:D8:44:B5:A4:3F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0C0F40FF65FC929350380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a8800d0-0726-39f7-81eb-46f9a51a5c81.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:c0:f4:0f:f6:5f:c9:29:35:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=aa6d2220-f898-468b-bb0c-eac7fd5c6b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:c4:74:b8:be:80:9b:ca:fd:93:cc:44:26:
c5:0a:a5:0f:14:3c:46:a2:15:f2:83:e2:1e:70:93:
1d:65:68:3d:04:a7:65:96:b7:af:2e:f7:01:1c:53:
0e:d8:04:a6:1c:fc:5b:52:46:2f:73:ce:02:ce:38:
a4:28:a5:93:7e:32:c5:ea:ca:e7:74:c5:59:dd:56:
f9:99:fe:c0:c3:54:c2:fe:26:96:13:a9:5b:2d:f4:
c9:17:bf:8a:74:d3:61:5e:f9:ec:39:bd:84:91:ad:
6c:07:5e:a7:77:e1:5a:82:e8:47:71:62:0a:24:cc:
40:fd:dd:bf:da:94:98:19:3c:6e:15:0b:d4:e2:8b:
f7:7b:26:d4:1c:61:ac:1f:6e:92:4b:ae:8f:2c:2d:
87:18:d2:4b:99:13:43:a5:a1:5c:5f:3e:b9:78:13:
d1:68:17:de:f1:bb:8e:22:7b:0b:4a:2b:78:72:db:
28:45:44:7d:c6:45:3e:2d:3b:f2:0b:07:a0:dd:4c:
86:1b:c9:b5:ae:7d:56:35:c4:09:a8:05:7a:96:8b:
86:1d:b8:f3:92:1b:58:ad:85:ac:fc:33:c0:38:cf:
1a:74:a5:04:38:cf:0a:a7:d9:4b:e5:a6:da:e7:26:
9c:df:0b:78:7c:d3:ea:e5:fb:b7:b6:47:10:bd:67:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:B5:9C:3A:AF:73:98:6D:6E:30:A9:8C:62:B4:D8:44:B5:A4:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a8800d0-0726-39f7-81eb-46f9a51a5c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:60:b5:07:da:e7:66:22:dd:b0:13:6d:39:47:21:cb:21:1f:
63:32:c1:11:e7:38:27:ac:93:60:ba:87:e4:bd:28:c5:af:e8:
f1:fe:39:da:1b:b3:1d:1d:9d:b0:58:7b:3d:ec:17:bd:ce:da:
3d:ea:2d:32:cb:50:84:db:59:7f:71:35:9c:d9:d8:0e:b2:cb:
f4:b8:a3:72:61:18:20:1f:92:83:56:b5:b2:43:82:c3:ee:d9:
f2:6e:6d:ee:a6:4d:cb:da:62:e8:42:3e:c2:87:c3:23:cc:1f:
d5:0f:f9:08:a4:51:88:90:80:91:93:3c:e4:cc:7b:c9:b1:2c:
f2:43:75:ac:92:ea:f0:51:53:8b:2b:a1:b7:dc:e6:6a:0e:7e:
0e:0f:c2:1a:b7:93:b8:23:a2:15:b7:26:f8:a6:61:8a:e7:fe:
e4:d6:ab:1e:d0:18:6a:89:69:7b:68:de:53:48:cd:6c:bd:1d:
c9:03:15:3c:cd:99:c0:9e:de:a3:36:ce:68:f1:46:6f:49:65:
46:c9:1e:69:8b:42:3a:e9:3b:78:bf:4d:cb:40:2a:f0:20:4a:
0f:8f:99:c0:e6:c2:09:33:c9:3e:7b:73:d8:c2:d2:7a:92:a4:
ee:7d:59:8e:39:18:ca:bf:f9:70:04:e1:09:4c:84:01:84:d1:
73:c0:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org