Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f3ce27c-9a9a-3a63-8f8c-159ac4ecb341.roa
File: 2f3ce27c-9a9a-3a63-8f8c-159ac4ecb341.roa (raw, json)
Hash identifier: 5Q5eupv/vgEXj264/CgeXFAQBWcVWr8r6ezIamxffLo=
Subject key identifier: 79:8C:DF:C7:4B:A3:30:95:21:55:18:DA:DE:F1:0E:46:47:30:58:42
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931404B0773801CB87068620
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f3ce27c-9a9a-3a63-8f8c-159ac4ecb341.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 76.70.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:04:b0:77:38:01:cb:87:06:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=55c3cae4-7cd5-4fd2-963d-4903e655d0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:4d:23:16:e2:7d:f5:4c:51:72:36:93:0a:
27:fa:fc:28:c6:e3:54:fa:31:a1:c1:c3:a4:2f:95:
37:cb:4f:82:5a:ae:94:82:8a:d0:d5:43:6c:37:84:
44:d6:96:2c:5f:b1:d2:45:04:d9:e1:08:40:ba:09:
48:a0:30:38:a8:cc:b4:42:3a:77:6b:2d:1d:8a:83:
12:b7:f8:6d:f2:06:50:42:d2:5d:d5:e5:9a:a1:19:
71:f3:d1:88:39:5f:2f:a0:4c:4a:b7:5c:2c:c3:b6:
2c:1d:d5:dc:1c:f0:37:00:50:c7:b6:33:76:be:d8:
99:a1:0c:78:71:95:98:b7:49:8a:40:50:6c:42:36:
12:15:ac:47:6e:c5:0f:5b:79:66:aa:59:27:83:12:
96:dd:e3:a3:11:a0:b8:44:eb:38:90:5a:e7:47:40:
a9:3a:9c:3b:e2:61:12:2c:f2:ed:ad:3e:9a:a7:2b:
40:7d:0e:8f:a0:2e:4e:45:5a:ba:fa:e3:97:fb:4e:
bd:46:b2:1a:53:1a:c8:38:42:8c:ce:b3:45:9d:af:
d6:e2:29:a3:60:08:b3:a5:a2:e1:74:c8:34:bf:84:
61:ca:6a:c2:2a:f8:d8:01:bc:c4:78:70:6d:41:2d:
49:bc:67:1a:19:ec:fd:9e:c3:6b:72:f7:e1:26:1e:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:DF:C7:4B:A3:30:95:21:55:18:DA:DE:F1:0E:46:47:30:58:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f3ce27c-9a9a-3a63-8f8c-159ac4ecb341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6a:28:20:ce:86:10:21:34:8f:48:f8:d5:4e:8b:4e:f6:bc:
8e:e3:32:ca:71:ac:5a:86:4d:6f:26:99:d5:b9:3a:72:e5:54:
dc:16:c5:fa:03:3c:49:7e:a0:13:1a:11:77:e9:88:b9:fb:44:
95:c7:eb:c7:e6:17:63:93:d0:41:37:a6:dc:9d:cb:b3:df:1a:
37:15:73:52:00:c8:aa:fb:58:af:14:d9:08:95:b5:7f:5e:29:
2d:1e:30:0a:42:cb:aa:b9:88:12:a9:be:59:1a:02:2f:96:b4:
0f:6f:ad:7a:5e:9a:4a:50:dc:2e:20:81:45:ec:7b:87:bf:77:
9d:93:ad:a5:37:10:0c:af:08:e3:d5:4f:02:d1:5c:9b:ff:0c:
86:3a:e2:40:b7:5c:ac:ec:32:9d:01:b4:ca:69:f4:94:b7:16:
0d:8e:e9:3f:93:d9:37:a4:1c:4a:b8:de:81:95:f1:b8:73:e0:
85:d6:31:47:90:56:d1:88:4c:4d:f0:e1:7b:61:dc:95:55:17:
48:cf:13:e5:5d:40:73:e6:a8:ec:b5:ec:7f:9f:e5:90:2b:3b:
c6:b8:02:93:d1:54:b5:91:49:33:83:6b:ec:60:6c:a5:43:b0:
02:a2:f8:4a:ff:a5:c3:f2:88:63:64:59:f8:02:a8:c1:d0:a9:
05:5a:bc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org