Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/348889e7-df96-3192-bdd2-ab791a236a4a.roa
File: 348889e7-df96-3192-bdd2-ab791a236a4a.roa (raw, json)
Hash identifier: Qy/V/CGLOErgOBFczQLbWDtiwESsyl1VD2W85pbqSpw=
Subject key identifier: D0:BC:18:5D:16:7A:2E:37:FA:66:AA:C2:33:33:65:FB:DB:D5:94:4B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0043240DA0AD1537A8D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/348889e7-df96-3192-bdd2-ab791a236a4a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 54788
IP address blocks: 204.101.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:04:32:40:da:0a:d1:53:7a:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=9561bb83-2bb1-4e3f-9353-43f835a22bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:64:f6:61:3f:6b:87:c1:95:bb:d3:f4:e4:
4e:aa:8c:13:3f:df:e9:88:90:43:fa:b2:70:8b:d0:
e8:88:0e:f3:35:89:1b:fe:22:fe:1b:5c:45:c3:3b:
a9:1a:6c:12:42:9f:10:13:24:9f:58:26:4e:01:0e:
1a:98:54:35:b6:6d:27:53:e3:d0:54:29:37:d9:86:
9a:3e:fc:01:aa:77:48:06:03:3c:8b:e0:6b:01:1b:
cc:40:e9:7b:5b:c9:86:64:18:cd:28:7b:a1:d0:10:
ce:35:e9:a3:6e:67:28:d6:35:e0:00:92:02:98:78:
e5:30:61:3b:e5:80:9a:35:11:82:6f:00:2a:b2:ba:
6f:15:a8:94:45:ae:64:92:91:75:f5:20:5f:b0:86:
21:72:29:1b:5c:01:82:b9:42:17:e4:a1:b3:62:94:
93:9b:ad:6a:5b:50:f3:7b:03:43:17:12:ca:a8:46:
4f:56:24:fd:e1:e5:89:0b:83:8b:b8:38:79:0c:e4:
fc:84:4a:99:5c:0e:f0:e6:94:85:57:9c:98:32:5f:
30:ea:f1:74:25:8f:70:c3:30:40:ae:64:e7:83:20:
67:e2:6a:d9:4f:c1:bc:d9:b6:ad:c3:6d:e5:ff:f7:
3c:d5:8a:85:52:e4:4e:78:a4:1e:94:6a:85:11:ac:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:18:5D:16:7A:2E:37:FA:66:AA:C2:33:33:65:FB:DB:D5:94:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/348889e7-df96-3192-bdd2-ab791a236a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e7:3e:39:c1:57:64:ba:f3:86:7b:42:be:1e:ad:75:b7:28:
e6:31:fa:df:0b:af:fd:5e:39:a7:f8:b9:f3:8f:d1:6d:01:c7:
a5:4c:7c:ee:3c:13:58:57:2b:05:8b:d4:3c:d6:44:30:26:38:
d3:d6:10:16:58:90:5d:62:2e:e0:4d:6d:1e:8a:81:61:ba:0d:
0c:16:33:b9:80:0b:53:88:fe:32:98:18:8a:70:3a:a1:1f:5b:
5a:e1:e6:f9:ea:5b:68:f5:4a:99:cb:b8:3f:9c:2d:f5:24:1c:
0c:27:eb:77:6e:68:6e:d5:90:bc:a3:ba:99:f0:2b:02:47:2f:
0f:f5:29:68:3b:5b:3d:ad:d6:9b:32:13:c6:b8:a1:99:bb:1a:
c6:5c:8a:db:4a:3a:9a:34:33:85:11:ba:aa:b9:78:ff:87:71:
7c:71:17:ef:6d:d4:eb:23:3b:25:9e:09:db:2d:ab:25:b2:20:
23:61:bb:a0:86:51:d1:3d:ee:0a:e6:af:70:e1:6a:4f:a7:bc:
d5:f1:b2:b0:c0:60:8f:44:08:d8:b9:1e:ba:cc:00:de:dc:20:
7a:aa:87:92:17:4b:f2:c7:7d:ff:39:7b:b6:c4:64:97:09:89:
af:8b:9b:ba:b9:ea:68:1a:6f:09:05:98:93:26:db:16:38:c9:
1e:bb:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org