Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/200da232-aec9-355f-97ac-e60154cc8cf1.roa
File: 200da232-aec9-355f-97ac-e60154cc8cf1.roa (raw, json)
Hash identifier: dXKn9fyyyHOP2QapUwoNWXkiLFQ+VFlt0+6Sxg4qpA0=
Subject key identifier: A1:09:B3:CB:A0:FE:A5:DD:57:27:A1:D8:EF:DC:0B:68:04:53:CB:E8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313E8260B833529E2F5A580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/200da232-aec9-355f-97ac-e60154cc8cf1.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 72.28.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:e8:26:0b:83:35:29:e2:f5:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d59fa2b6-1263-4072-b7c8-f6969ce1d18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:29:e7:c8:b0:51:8f:d4:32:93:d8:0e:b2:
76:cd:99:ef:32:b5:4f:01:81:a2:c3:b2:4d:b8:10:
c2:25:8b:a0:7c:e7:b6:bf:8c:de:49:1b:f8:21:77:
8c:84:bd:2c:7e:98:33:0d:4e:13:86:9a:28:1e:f1:
dc:34:74:9f:5a:cc:e9:ed:a8:3f:43:4b:78:14:00:
e6:d5:ba:62:0b:f9:7a:8d:71:cb:33:c8:b0:cd:88:
56:c8:8e:de:bf:64:b7:36:a1:df:6c:aa:ca:97:96:
54:3d:0b:76:3e:66:8e:6f:b0:24:2b:9a:5b:ec:d7:
1a:84:ff:6c:94:74:a8:68:1f:df:86:32:a5:11:9b:
25:84:93:38:16:9d:63:e3:e1:07:f0:f7:ba:61:55:
7e:f1:7f:55:78:81:84:08:d8:e3:43:7c:31:12:59:
e3:0b:15:59:0e:76:ba:8c:92:de:c6:66:99:c4:e6:
07:8b:9e:c5:26:cd:f3:11:d5:21:5c:9f:e8:82:ec:
8c:45:24:08:fc:a2:92:30:d3:30:47:41:fd:87:88:
c0:c3:d6:30:f5:89:9a:49:9c:89:80:90:0c:76:18:
3a:61:23:eb:93:26:0f:d9:b2:d8:b9:d0:be:8e:e1:
f2:61:47:86:3c:e3:57:fd:73:7e:6a:21:a9:b6:4e:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:B3:CB:A0:FE:A5:DD:57:27:A1:D8:EF:DC:0B:68:04:53:CB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/200da232-aec9-355f-97ac-e60154cc8cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:62:8c:67:9f:6e:8e:17:6b:02:79:d8:99:c3:24:09:30:c1:
e2:9a:55:08:b4:c0:60:f5:e1:d0:c1:1f:44:44:89:2a:1c:69:
85:e4:e6:85:1a:a8:4e:7a:a5:61:08:40:cf:b2:e7:54:e1:40:
d3:3b:a7:1d:61:d4:c1:4b:d2:c9:92:1e:33:b6:1f:09:04:1c:
ae:6d:0e:cb:60:61:9a:68:0c:1d:73:37:5f:01:79:4b:7e:af:
de:35:9e:97:7d:71:61:c6:a4:a9:59:f1:67:e6:16:17:f3:74:
1e:48:8b:fb:e2:16:38:a3:65:91:f1:3f:f0:72:f1:20:09:cf:
bd:4d:46:74:62:92:ac:9a:1a:65:b4:79:f6:0e:90:b4:53:aa:
ef:01:5a:ea:9b:eb:8c:f9:dc:b2:f5:31:00:e6:a0:44:b5:6c:
63:ab:a0:ba:4b:cd:e0:39:dd:2b:10:5a:56:5b:c6:b8:13:48:
98:c2:d6:ee:74:eb:f6:59:05:1d:94:8f:18:db:7e:c8:8d:99:
66:e5:f4:d6:72:14:d2:e0:06:45:b5:6c:2e:3e:e2:99:78:8b:
7f:d1:f4:7a:a1:71:3e:a4:ba:35:62:ff:e2:16:c7:52:16:6d:
ec:c2:c3:39:a0:07:00:65:e6:d9:c1:ed:2b:40:af:16:d8:e6:
25:17:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org