Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fa78228-5b75-3682-a6c4-4ca12ac2c525.roa
File: 2fa78228-5b75-3682-a6c4-4ca12ac2c525.roa (raw, json)
Hash identifier: P2Z3IjXcQja8aVO9BqRAtxSo08YvdCq3WN/yxL4CBl4=
Subject key identifier: 94:B8:95:77:BF:36:89:D7:2C:A6:1A:59:A4:83:B0:D5:E2:17:15:E3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF86018EF533B0CA3FA3EA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fa78228-5b75-3682-a6c4-4ca12ac2c525.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 32463
IP address blocks: 209.226.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:86:01:8e:f5:33:b0:ca:3f:a3:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=218570b2-5ef1-4eb4-8e9d-b8f28c30ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:86:a0:86:09:d6:fb:fc:9b:11:30:4c:20:
2f:e5:ad:b9:c5:47:a2:b0:ce:30:e1:6a:a6:00:d9:
8c:f7:84:37:ab:74:c8:a1:7e:22:bc:90:de:9b:82:
42:25:d0:4a:44:b3:0f:a8:48:e0:38:60:0c:87:76:
14:49:ca:e3:7f:67:b9:98:d1:ed:b1:51:db:6b:af:
76:ac:4e:35:3e:89:58:86:28:3b:5e:37:e9:69:5d:
06:da:b5:b8:2d:e1:aa:5a:2f:ea:f6:e5:80:75:cc:
5e:68:f5:2d:2c:05:94:b1:19:dd:ae:75:cf:52:e1:
8a:22:86:37:ef:55:4d:91:54:c2:e8:27:7e:42:63:
bc:7b:06:0d:ff:c1:41:3d:30:7d:93:84:8f:0b:c9:
82:d7:ac:aa:11:e3:21:b6:38:40:f8:44:a1:32:dd:
cc:74:66:eb:25:05:1f:f2:11:50:28:e2:e3:5e:fc:
8b:99:24:28:2e:97:f4:5a:e2:c7:c3:76:bb:17:a4:
35:d2:b9:54:39:19:b5:0a:df:79:30:1f:bb:09:4c:
05:a1:81:22:9a:b5:63:be:9c:db:cb:5e:ba:06:15:
05:87:a2:ff:7d:35:95:7f:a8:ac:10:e4:82:e3:fe:
31:27:3d:e6:11:52:56:4c:86:37:d2:a7:e7:e3:19:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:95:77:BF:36:89:D7:2C:A6:1A:59:A4:83:B0:D5:E2:17:15:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fa78228-5b75-3682-a6c4-4ca12ac2c525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a9:0f:c6:b0:8f:53:ad:00:f3:85:e4:c4:17:70:b8:56:6e:
1e:fa:ca:8d:b2:79:93:db:b7:1a:2d:27:94:97:e8:ac:d6:11:
8b:ba:6d:47:8f:8b:da:7d:dd:23:75:1f:47:43:65:ff:6e:e5:
c8:da:77:70:22:fe:ce:e7:0a:2d:87:10:07:27:2e:64:7d:10:
93:17:17:ae:d0:a4:85:d6:be:82:92:69:f6:1d:a3:2a:16:20:
8b:d4:a7:02:c7:bc:5f:5f:fb:2f:4d:d2:a4:6f:20:0a:8e:b1:
89:5c:b2:fe:ca:62:4f:7a:05:30:08:7c:fe:09:f1:4c:03:11:
76:e0:96:bd:7b:4c:ae:a0:0a:96:bd:aa:5b:5a:53:8d:68:f5:
6a:b4:96:75:c1:a6:95:be:0d:41:83:3f:23:8a:28:80:b6:47:
1d:61:ca:55:b1:19:8f:01:a4:2d:08:18:d8:cc:bf:c6:c6:bd:
f8:f0:8d:4f:8c:26:cc:de:62:0a:b4:70:a9:77:d4:3b:56:95:
a8:4e:34:a5:2d:22:e6:98:72:c4:27:00:1f:b2:78:1c:f0:0e:
78:fc:fc:b8:93:0e:5a:85:c3:61:eb:eb:e1:c9:14:9e:8d:cc:
7a:2f:b8:21:c7:7a:43:38:e4:94:32:46:c1:c3:7b:bd:6a:5e:
97:20:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:17:50 2023 by rpki-client on console-ams.rpki-client.org