Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28ef33d0-b237-39bf-af87-3e4a8da81778.roa
File: 28ef33d0-b237-39bf-af87-3e4a8da81778.roa (raw, json)
Hash identifier: doybcGqdGcH9MRdyR+OUtEJf78mtXKUjC4umHwHjPco=
Subject key identifier: 20:97:F0:6A:B0:11:FA:56:22:20:F0:CC:D5:9D:A7:31:B7:E4:08:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493155FD54A25E7C6F185E400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28ef33d0-b237-39bf-af87-3e4a8da81778.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 13727
IP address blocks: 206.47.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:5f:d5:4a:25:e7:c6:f1:85:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=8c77d1b4-ffb6-426c-8261-8e6724965ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:f5:96:bb:35:9f:58:41:5b:b5:89:58:f4:
64:36:7a:1b:1c:15:32:97:2a:f7:22:5d:09:ae:58:
da:66:c9:c6:92:e9:89:86:6b:fe:84:8e:0d:8c:53:
e7:ba:ed:f9:2a:03:d0:c1:13:48:1d:44:6f:05:3f:
3a:92:85:16:b7:e5:f2:e5:fd:48:8c:ef:b4:a5:67:
36:14:1e:c0:1d:e5:88:3b:81:4e:15:d6:4f:fc:5b:
d2:7c:2a:68:ad:88:88:1c:13:97:f4:84:b5:de:c7:
b3:18:3c:81:1a:d0:5b:72:05:19:e1:ca:f9:8e:49:
57:b6:ca:f4:b5:ea:25:99:fa:85:b4:0c:31:62:89:
4b:3e:7e:ea:2c:36:ec:d1:55:01:c3:d9:e5:b7:a6:
26:f9:c4:88:34:2f:c5:49:2e:83:7e:ec:a1:00:96:
d8:65:49:3b:7b:0c:1e:dc:23:2f:86:ba:7d:f3:20:
a7:99:fe:da:33:ec:38:ff:4c:11:f5:bd:71:15:18:
7f:b8:70:80:59:58:4c:d8:2f:28:71:33:4e:e1:7e:
1f:50:8e:de:b6:34:be:57:da:b2:b3:b1:10:0a:8f:
26:1b:59:4b:03:dd:4e:30:bb:4c:1f:56:59:8e:bb:
a3:40:ac:3b:27:11:82:db:fb:19:ab:42:62:16:f1:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:F0:6A:B0:11:FA:56:22:20:F0:CC:D5:9D:A7:31:B7:E4:08:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28ef33d0-b237-39bf-af87-3e4a8da81778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:82:a8:fb:c2:2c:67:d3:3a:a7:fc:97:2b:a6:24:fd:c5:1d:
03:d6:a1:db:b4:e0:9c:85:54:41:98:bd:bd:61:a4:ad:e6:f0:
3b:19:f4:11:5e:1d:be:48:91:10:45:ec:ca:b1:79:88:2d:85:
49:bb:02:c1:3f:86:bf:06:9a:cc:bd:59:77:05:dd:70:7f:81:
4b:b1:ae:fc:98:12:64:73:b4:21:f1:20:be:10:a7:ce:84:a6:
c3:d3:46:f1:d1:f8:0e:ec:cc:60:a7:18:cf:5b:20:bc:31:1d:
dd:99:fc:41:2b:48:67:a8:85:6c:4d:ca:79:62:7f:92:c7:e6:
d5:86:ab:5b:6b:b2:69:54:14:03:2d:f8:4d:1e:6d:9b:ad:8f:
b9:54:99:d2:b4:fb:35:fc:1e:1a:2a:0c:0c:80:60:34:ae:a3:
17:ec:16:88:c1:03:5a:04:8f:9b:41:b0:92:71:bf:c8:73:7c:
91:5d:aa:92:c4:c6:6d:26:0d:8f:83:c9:07:06:33:ef:ac:a6:
88:ca:96:51:73:a5:74:f8:3c:72:ea:7e:c5:ca:cf:c2:27:35:
08:f9:4b:17:30:e4:31:bd:ac:fe:c3:af:b6:5d:f4:0a:96:89:
d7:85:43:0c:e1:a4:06:bd:5b:d4:f9:8a:90:05:9b:c0:6d:fc:
c9:8a:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org