Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4275beab-45ff-327d-bcf2-4dd23b9df5ce.roa
File: 4275beab-45ff-327d-bcf2-4dd23b9df5ce.roa (raw, json)
Hash identifier: +r1JKTBFfG6NA3SCs4VQjtILyGXvKzFryLMnTIaWpFc=
Subject key identifier: 8C:65:79:B5:77:CF:32:ED:7E:78:56:4C:07:D6:FA:32:F5:58:A1:1A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0579E46B68BBD1183B0D6
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4275beab-45ff-327d-bcf2-4dd23b9df5ce.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.47.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:57:9e:46:b6:8b:bd:11:83:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=82700815-c512-4178-a734-4b46cf960456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:76:33:3d:8f:64:a8:79:4b:a5:79:0b:f6:
2f:f7:9c:66:80:30:da:00:b5:aa:5f:5a:12:b6:4e:
ec:62:8b:61:16:2e:2a:04:fe:34:23:5d:6f:8f:5f:
67:2b:55:5e:a3:79:af:73:9d:de:0e:68:d5:bb:64:
5f:31:f6:dd:da:f5:2b:a4:6a:c7:b3:6c:c0:55:37:
9f:25:f5:80:5b:e7:a2:2e:f5:a5:8d:bb:9b:2c:6d:
de:21:36:80:8b:b3:a0:1e:3f:52:29:ac:d1:ee:bd:
c2:cb:c9:82:3a:e0:b2:7a:dc:fa:c5:23:7a:89:11:
ea:59:9a:36:89:cc:cc:44:12:27:45:5e:08:d9:29:
29:39:7c:21:61:b2:33:b9:b1:b2:5d:e9:95:aa:0a:
9b:2a:9c:ae:02:3a:53:6d:06:88:aa:55:b1:14:de:
5a:cf:3e:ea:ba:f2:5d:37:04:b4:ce:3c:1c:5e:c8:
9c:8b:fa:51:16:b5:3a:b8:37:44:e8:fb:e2:07:12:
19:13:80:4f:cd:60:03:77:db:0c:ce:90:00:55:85:
fc:b4:68:56:1c:91:aa:00:29:cc:d1:fc:67:32:23:
99:e0:e2:f0:4f:e9:82:ea:08:d1:85:8b:26:9f:64:
b6:d9:31:0b:7c:27:fe:b9:fc:48:bb:1b:d2:bd:fc:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:79:B5:77:CF:32:ED:7E:78:56:4C:07:D6:FA:32:F5:58:A1:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4275beab-45ff-327d-bcf2-4dd23b9df5ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:08:59:bc:c0:1d:45:f2:a2:84:32:d3:57:f4:b7:83:b8:5c:
6b:78:e9:f3:dd:a5:2e:8e:78:c0:ab:2d:ef:f0:64:80:56:14:
10:1e:11:4c:81:8b:ee:9d:62:be:df:c8:09:86:a7:26:f5:b6:
40:0a:8e:6b:fd:ca:e5:dd:9c:77:34:fc:d5:16:1e:56:69:02:
81:01:d2:8d:10:5c:cb:d4:a1:e9:e3:09:25:28:47:74:90:76:
d1:3e:2f:0e:db:bb:c2:2b:56:f5:0c:13:e4:f4:a7:a1:87:91:
c2:79:58:ef:e8:0d:6c:7b:ae:62:78:cc:de:b3:fe:e7:2e:d2:
bd:db:05:f7:f2:ac:51:19:dd:92:5e:ef:cb:5a:74:8f:01:4c:
62:d0:bc:70:a6:9e:36:f3:46:73:a9:b4:42:d4:2e:f5:2b:e5:
a5:b0:4e:88:e5:0b:b7:86:2a:6e:14:43:84:41:5a:d4:9b:54:
b3:97:91:d2:c1:7c:19:29:a0:24:9f:cb:9f:82:4d:33:19:b7:
88:fa:c2:f7:68:b1:f2:7a:d7:0c:ea:3c:05:92:4b:8a:34:9d:
c0:d9:02:3e:d0:23:dc:85:46:f1:7f:52:56:19:5c:e2:9b:30:
48:5a:d5:91:83:33:5b:06:89:e6:de:02:d7:32:0f:20:8f:d2:
71:f8:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org