Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4194971e-dba1-3865-9e40-2ae114c0babb.roa
File: 4194971e-dba1-3865-9e40-2ae114c0babb.roa (raw, json)
Hash identifier: BUYu7L5rykBOWRg6gfuxgSGSha9GROGzIXYZ+sUDUCQ=
Subject key identifier: 0C:B7:48:3F:94:08:AF:7E:F3:72:7F:BF:16:F4:4D:C0:6B:C0:54:E7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493163CBB19D2B420ED253A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4194971e-dba1-3865-9e40-2ae114c0babb.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 40575
IP address blocks: 209.128.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:3c:bb:19:d2:b4:20:ed:25:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7ae9fba9-3fab-4019-bb6d-4f5e7b7f044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:b8:d1:10:1d:39:68:f7:12:bf:9b:42:b2:
e0:d2:c9:f4:b2:11:9f:70:5c:ca:39:b6:26:a1:80:
51:0b:1e:07:df:2e:f4:ee:75:5f:8d:0f:8c:a0:e0:
b8:ca:11:00:20:27:5d:83:da:92:52:10:2e:a0:30:
69:f8:ae:1a:d7:db:81:d4:b2:7b:28:f4:83:ae:97:
ff:64:a9:9e:7e:1d:14:a6:7b:f3:2d:94:a6:f3:15:
79:a9:1c:af:71:23:dd:7b:e4:16:56:a7:03:b9:73:
60:1b:28:3d:e9:26:05:6e:02:7d:ed:15:a2:41:2b:
c2:d3:fe:be:06:84:7e:bd:8d:78:f4:21:a3:f8:af:
d5:3f:2e:ca:b9:91:e9:9f:aa:5f:90:72:44:31:29:
05:c4:91:8b:b6:88:c7:f6:6a:bc:c4:3c:7d:1e:be:
d4:d3:86:56:d1:86:44:72:d7:59:e3:4d:c6:f1:ca:
69:12:f6:d7:31:ec:b6:a5:d9:cf:67:99:ec:f7:8f:
71:02:18:f2:92:fe:80:0e:0b:5a:2a:d6:cb:a6:43:
6a:ff:ec:b2:e1:01:46:59:80:e7:f2:68:16:78:3c:
1a:45:6d:47:6c:c4:0c:8b:90:50:b7:26:e5:14:6a:
5c:2c:99:7e:30:32:dc:58:e6:c4:86:d1:e3:67:4a:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:48:3F:94:08:AF:7E:F3:72:7F:BF:16:F4:4D:C0:6B:C0:54:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4194971e-dba1-3865-9e40-2ae114c0babb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:23:da:d2:34:f3:b0:c4:e0:3c:53:36:4c:df:9c:2d:a1:ef:
07:5c:44:0e:b4:4b:60:21:de:18:a2:c5:5a:67:b5:74:15:9e:
4b:93:89:3e:07:fa:b3:c5:86:7c:20:c5:b5:c0:07:6b:19:90:
c5:22:f0:f3:6e:90:39:89:83:3b:ea:ad:4f:68:00:f0:01:a8:
36:f9:d4:34:04:88:f9:e5:28:3e:42:e6:ac:7d:50:39:b6:45:
ec:8a:c1:5c:4a:d9:8f:ce:e8:81:a5:89:33:10:0b:d2:64:33:
f1:85:65:4b:2e:53:f5:79:fc:51:1b:db:ce:bb:7c:62:02:76:
46:44:ba:4d:d2:03:37:95:df:31:0d:ef:3e:4f:fc:a9:6d:13:
6a:59:ae:c1:b4:40:02:94:39:49:06:77:af:48:17:92:53:e1:
1b:3b:6e:84:5f:f5:66:d4:32:0e:61:98:a0:da:5d:b4:11:65:
02:28:56:13:6c:0e:21:e4:f4:ab:66:ef:fb:a4:d3:40:92:71:
39:cb:a6:41:ce:9c:88:65:1b:33:8f:84:53:c2:3d:0a:aa:9a:
99:26:fa:2d:d8:87:5a:e4:26:38:67:68:8b:7d:49:49:3b:15:
1f:5e:1e:a1:49:7c:66:af:25:7b:37:1a:40:55:0a:e2:89:ed:
fd:3b:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org