Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f5f3d2-2990-3c4f-963f-dd9291f57fa9.roa
File: 32f5f3d2-2990-3c4f-963f-dd9291f57fa9.roa (raw, json)
Hash identifier: ATdv/tIpBV4SslhWABqYtjd2YKDYf19T7PnWySgSHGU=
Subject key identifier: 58:74:E1:1F:86:3F:AD:FD:83:4D:BD:37:4C:13:D6:39:0B:82:55:3C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314BF99912D4181B7A9BE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f5f3d2-2990-3c4f-963f-dd9291f57fa9.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:bf:99:91:2d:41:81:b7:a9:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e357612b-b3c9-4f30-bda2-60900a5d4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:b5:36:9b:a3:aa:4b:56:4d:91:0f:ca:e2:
9b:bd:51:ea:d2:f0:d7:30:27:c4:35:8f:38:c9:f4:
1d:e5:dc:c9:49:c5:98:17:e2:29:c5:4a:10:31:fc:
8c:2a:57:d4:37:25:4b:15:11:38:a4:91:45:a1:86:
63:94:8c:20:34:34:97:eb:ea:85:8c:35:c1:53:f4:
bd:f1:d5:8b:d3:29:76:ef:c3:bd:4f:55:3f:bb:bf:
c0:b7:70:0d:99:d7:25:66:5f:df:0b:b8:48:ea:6e:
b6:cb:d6:56:d8:a8:05:9b:ad:d2:b5:44:35:99:c2:
66:bd:b5:05:57:1e:b0:0f:a7:9b:42:22:1c:61:2e:
06:86:3f:d1:3f:5a:48:98:ce:a8:8f:10:98:aa:0e:
91:4c:71:e7:91:d8:88:22:3b:99:66:85:c9:14:44:
91:fc:6a:ce:32:9b:5b:30:a9:b8:a0:6a:7c:5e:04:
0a:5c:15:44:d1:83:d2:e6:dd:a6:28:a2:93:08:ca:
52:e6:18:f2:56:9a:79:25:1c:d0:15:0f:f5:8a:38:
54:11:21:f6:49:c6:58:01:9f:5c:f8:46:31:5a:72:
18:7e:77:48:b3:01:18:9a:9d:6d:b8:4d:19:71:4f:
ce:c3:b0:6f:b4:87:d2:df:d5:f9:20:ca:f9:7f:21:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:E1:1F:86:3F:AD:FD:83:4D:BD:37:4C:13:D6:39:0B:82:55:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f5f3d2-2990-3c4f-963f-dd9291f57fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f8:1b:29:e3:89:01:ee:5f:32:1b:65:80:35:04:4a:ef:86:
e4:be:b7:9b:bf:ce:20:f7:ed:bf:02:f3:1d:11:ab:69:12:17:
25:34:8a:f9:07:56:87:1c:cc:89:7b:05:06:96:dc:e8:03:cf:
97:95:24:52:de:61:94:d7:df:0c:ee:71:01:2c:d0:0e:ec:34:
53:34:ef:82:a3:c8:15:3d:74:b4:c4:b3:bc:f4:26:ef:d2:95:
c4:44:80:17:a5:54:d4:ca:86:53:0e:59:e4:22:39:93:26:07:
c0:81:ea:72:1d:07:4f:a5:41:c5:72:f8:ae:6f:85:33:7c:9a:
68:c1:52:04:27:29:f8:32:46:95:97:de:0c:6d:e7:0d:73:eb:
a6:dd:b2:89:2b:db:9e:33:fd:06:f9:64:b6:13:33:13:6e:ae:
ae:dd:26:a4:3f:1a:28:3b:72:80:ad:29:50:34:61:eb:37:d5:
6a:6d:0c:71:b5:79:0d:26:1e:89:99:8b:7b:73:32:59:c1:64:
f2:e9:88:f7:48:f6:39:09:c9:42:1b:ef:a4:c8:98:c1:1a:40:
70:7e:b4:a2:83:86:b0:f7:d4:16:57:f5:cc:39:51:b7:6d:48:
d2:ce:22:f4:0d:20:54:e5:2e:73:e4:0c:34:c1:ab:bd:a6:9d:
01:c5:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org