Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fb1edf6-42ab-345a-9f5e-3578021616a5.roa
File: 3fb1edf6-42ab-345a-9f5e-3578021616a5.roa (raw, json)
Hash identifier: InldFEyFO84IsfibO3KWD9o5YM0Lp6rj9XCbSEnA+uo=
Subject key identifier: 60:CB:13:E4:C1:9A:B7:6A:96:B2:02:38:CC:70:8B:F8:76:CE:74:42
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0DBFE1AEE1752836E7970
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fb1edf6-42ab-345a-9f5e-3578021616a5.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.236.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:db:fe:1a:ee:17:52:83:6e:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=cf99a790-e6df-4501-b5b6-9069c37df0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:62:8a:bf:ef:90:12:5e:c3:34:f7:21:a8:
31:c2:15:98:39:3b:67:cc:f5:07:d3:9d:2e:6e:31:
38:04:e8:2f:e0:cd:aa:8e:21:3a:ed:3d:6b:c0:49:
96:f7:9a:12:8b:02:3c:b4:c0:28:08:a7:f9:70:60:
f1:fb:06:67:89:f6:2a:fc:56:1d:ad:1a:7e:31:df:
9c:cf:97:91:fd:9d:4c:1e:2f:e5:0e:b5:23:af:c7:
bf:a1:b6:dd:ba:0c:52:c4:7a:8f:5e:83:89:26:89:
16:f9:15:2d:a3:28:d2:4f:67:f4:98:13:4d:76:f0:
38:c3:59:c8:7f:3c:98:52:ca:e9:03:a0:41:f2:62:
14:f9:51:f0:e5:e6:5f:99:56:f2:be:20:79:b3:72:
a9:87:e7:82:69:49:d0:e0:fd:45:ed:5c:d5:76:42:
14:ca:4d:49:87:c9:d8:03:fb:ce:46:3e:70:e8:d0:
93:53:37:15:db:77:16:8f:f6:27:57:b0:fd:e8:10:
60:12:0d:4e:ca:46:0d:96:79:8f:f3:c3:46:08:ff:
cb:e8:7f:e0:6a:c4:93:c6:b3:29:7e:72:22:6a:d7:
cf:e5:b6:2d:b7:8f:c3:ba:6b:ef:a9:be:13:bd:2d:
05:7a:b5:e0:29:31:b9:0e:34:07:e6:dc:58:d9:74:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:13:E4:C1:9A:B7:6A:96:B2:02:38:CC:70:8B:F8:76:CE:74:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fb1edf6-42ab-345a-9f5e-3578021616a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:bf:05:28:a0:ea:28:e7:bb:de:9d:7c:d7:b4:d6:65:95:f9:
97:19:bd:0e:32:de:04:15:e1:3a:66:d9:49:a3:8f:49:67:45:
ea:4a:2f:30:4b:b5:a7:f2:54:b4:e8:b5:cc:9e:f2:64:99:2b:
1b:20:11:66:ce:9f:84:d5:22:ab:83:28:df:fb:84:7d:4d:84:
b8:4a:3b:bf:79:7f:14:76:00:97:3c:fc:28:cc:0c:a1:cd:c7:
18:27:e1:7f:97:9c:b8:86:6b:e5:69:a5:b4:eb:e6:3c:eb:ae:
a1:a6:b1:64:8e:13:f6:2a:74:fe:e2:ad:b0:b9:52:75:55:27:
67:24:c7:94:31:98:6c:10:84:99:17:b0:5f:46:99:c5:ff:d6:
92:1c:20:2f:4e:69:4b:4a:0d:c4:fb:70:0e:75:ef:54:40:dc:
b4:f4:2c:60:d4:a4:ec:2b:ea:cc:79:1a:c0:ad:56:40:58:5d:
3d:b3:a9:b8:e9:d0:c8:da:0f:a9:e2:0d:04:23:63:55:8e:50:
0e:8a:29:d2:05:33:15:2c:48:6c:04:71:f4:49:bd:6c:0c:91:
77:99:ed:d0:58:01:80:cc:6f:2c:ba:b7:04:9f:95:af:c7:b7:
b1:7f:f1:8b:4b:22:4b:30:c6:32:e8:9f:4b:97:ac:c8:62:af:
20:d6:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org