Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/234a8650-446e-34dc-a44c-93b454f451e6.roa
File: 234a8650-446e-34dc-a44c-93b454f451e6.roa (raw, json)
Hash identifier: rDcXN4jSXn40vklbfiuiS9sa1+UjxerMXTklO9bQXuk=
Subject key identifier: F2:0D:0C:C9:EC:D1:AF:DB:C1:F3:95:20:56:3E:76:BC:48:26:0C:B6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF762DF3BA7F94352725C680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/234a8650-446e-34dc-a44c-93b454f451e6.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 19152
IP address blocks: 216.208.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:76:2d:f3:ba:7f:94:35:27:25:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=9452dcaa-89b3-4654-9d61-700c4b4c1f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:7a:b3:52:7a:4e:e4:f2:a6:12:0f:39:b1:
4c:c6:dd:b8:18:18:35:b5:ba:03:11:ba:12:8d:20:
f6:c9:68:b4:8a:9d:cc:40:5c:5d:1d:62:14:d7:23:
2c:17:18:a5:c4:86:77:60:7c:73:f7:99:c5:9f:bb:
c3:9c:24:df:a8:70:ef:61:c2:60:c2:2c:11:69:13:
b0:7e:b2:fb:4b:1e:b5:47:98:6b:fe:27:a3:f5:54:
02:8d:0b:1d:b5:34:24:cc:23:4c:24:63:4e:83:7c:
9e:2c:d6:61:0e:f2:f9:9a:ff:d5:cd:ae:d8:69:5d:
57:c1:0f:f9:c1:17:9f:9c:a4:5f:d3:99:a1:9b:1f:
ed:51:5e:76:fb:e8:b5:30:29:20:08:c4:04:50:49:
46:fd:96:e4:1a:75:c7:7f:f8:b6:da:7b:1d:db:a6:
dd:5b:32:a7:47:07:9a:41:a5:19:5b:5b:59:12:82:
a7:9d:16:f8:58:b8:d9:f0:4f:6d:27:8f:db:5f:e1:
fc:86:ca:27:76:84:a3:41:15:87:61:43:95:17:eb:
54:b3:9a:48:24:0e:1d:55:c8:0a:85:14:97:2a:b5:
d4:bf:dc:29:32:ac:7f:88:3e:ee:a6:23:d9:f8:a3:
6c:05:cd:d5:1b:51:aa:14:e2:ff:01:20:a3:6d:7f:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:0C:C9:EC:D1:AF:DB:C1:F3:95:20:56:3E:76:BC:48:26:0C:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/234a8650-446e-34dc-a44c-93b454f451e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:db:59:c2:58:fb:ea:4d:47:e6:64:83:5f:90:81:3f:18:f9:
95:66:4d:c3:11:9f:2c:9f:60:a1:2c:f8:91:4e:0a:91:05:9d:
1b:ed:1c:ad:cc:db:b5:0b:1b:8b:a0:34:d0:6c:5f:bc:f3:52:
4a:46:10:6c:58:17:c4:0b:c0:2b:51:29:77:20:a6:33:d8:99:
76:63:d9:41:81:5a:33:5f:d8:33:4a:74:1a:bb:9c:35:4f:5e:
7a:f9:54:a7:d7:d9:64:06:f6:c2:60:6c:0e:6b:d4:9b:71:c3:
a7:d1:3b:f0:21:6c:0d:c9:96:16:86:59:b8:d8:a9:8a:98:fa:
01:78:03:4e:02:bc:7f:2d:a1:4d:f4:0f:8f:2b:27:09:fd:e8:
46:b0:cd:d1:31:05:c1:f7:12:1b:84:c0:bd:a0:07:3c:15:0c:
11:8e:d2:03:ee:a0:35:e8:d2:ed:00:a1:1e:4f:8e:34:93:5d:
e5:c4:e0:34:11:46:9e:d7:a4:d7:01:55:c9:38:e1:ec:99:7a:
9d:57:54:d7:cc:17:8b:ea:a7:60:38:73:e9:80:26:59:70:60:
25:fe:ac:ae:4f:55:54:a8:c0:b6:90:5b:76:81:e0:eb:00:c5:
5b:a2:57:9f:3b:cf:a3:65:47:54:36:55:b0:55:d6:5b:ca:51:
c0:91:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org