Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8a39c2-3c04-30d3-83b7-f9ef6ec1bd43.roa
File: 2c8a39c2-3c04-30d3-83b7-f9ef6ec1bd43.roa (raw, json)
Hash identifier: uiwvWCBcLtSeporhwHZJMBOZjuem06EQXGyvcPAwAv8=
Subject key identifier: 2D:9F:F1:4F:98:6C:CF:8B:F4:9D:86:E8:AE:19:23:19:2D:E2:98:80
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFF4CB8A9C27286DB1B180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8a39c2-3c04-30d3-83b7-f9ef6ec1bd43.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 10264
IP address blocks: 204.101.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:f4:cb:8a:9c:27:28:6d:b1:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=84887a22-72d0-4f44-a522-ccc4872cc531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:b2:3d:7b:55:cd:a6:38:a0:c3:a1:01:bf:
7d:8b:ec:c9:13:1e:dc:50:3e:ee:b0:08:fc:65:48:
d5:55:b2:49:59:f4:30:60:3e:12:2a:7a:5c:c1:27:
e1:99:89:18:59:46:32:be:ed:56:75:d6:0e:1c:76:
5e:76:d2:62:6d:dd:9c:77:a0:d9:a8:3c:a7:d8:8f:
10:4e:14:db:45:e4:30:bf:a8:3d:68:d5:08:20:58:
ac:14:90:9a:9d:5f:93:14:cc:af:52:02:4b:fd:8c:
ac:26:23:d9:f5:78:6f:8f:73:ea:a4:19:61:25:44:
b8:33:c1:cf:7e:e6:fa:2a:ed:1a:4d:cd:58:11:d9:
cb:f3:5a:1e:2a:05:e2:75:f8:f2:de:41:c0:06:a9:
69:42:41:8d:2f:d3:74:48:c0:4a:76:6a:67:82:e2:
67:c4:e1:7d:2b:94:ed:26:06:a5:be:40:ab:56:b4:
b9:0a:b4:cc:3d:0d:e3:86:c8:9f:24:5b:52:39:4a:
6c:cc:a9:45:58:01:82:77:3f:83:3d:d1:7c:4e:4b:
f7:ed:a4:c1:29:d0:41:7b:5a:58:bb:72:b9:2c:7e:
6b:3e:89:e2:2b:79:0c:31:dd:04:03:3b:45:c0:d2:
06:7a:c8:ca:9f:4a:db:6b:15:86:48:2f:7b:33:96:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:F1:4F:98:6C:CF:8B:F4:9D:86:E8:AE:19:23:19:2D:E2:98:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8a39c2-3c04-30d3-83b7-f9ef6ec1bd43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:dd:8a:70:c4:a4:cd:dc:1c:2d:b4:32:95:11:74:2b:32:0e:
6b:3a:24:bc:89:7c:df:09:21:d9:e1:ec:c4:14:9f:bc:db:da:
a4:49:c1:d6:02:47:83:66:27:43:fe:0f:3a:4b:96:95:5c:d6:
c2:be:3c:4d:29:c5:0f:a4:c0:14:e9:59:58:96:31:04:0c:33:
56:17:e9:14:33:db:c7:da:eb:56:85:b5:21:26:96:4e:44:d3:
1b:90:79:59:74:b6:6e:c1:b8:c1:af:cb:ef:13:ad:e9:44:b0:
a3:9c:1c:45:e9:d9:08:76:6d:f4:c0:09:ba:20:91:e4:47:c1:
ca:83:63:88:f4:a4:df:9f:73:a0:70:99:d3:9f:6d:df:a4:16:
41:f6:0e:80:85:3f:75:05:e1:db:b1:a1:f7:94:0f:02:44:f7:
f7:ef:02:28:4f:4d:e8:59:99:c4:2b:39:45:25:72:6d:a7:75:
8c:5c:71:a8:f4:e5:36:a2:e2:53:37:17:a3:ac:37:1f:ff:43:
af:51:c4:1c:0c:3a:e8:2e:3f:82:87:f0:b9:7e:69:5d:16:63:
af:1a:6b:44:ae:13:a4:d0:37:c4:cb:61:e1:02:78:f1:1e:46:
16:65:13:a9:c4:58:cc:65:e1:4e:dc:86:61:5b:32:47:f5:8d:
1e:d5:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org