Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42821b2e-e1d4-355d-9944-e8b7523c333b.roa
File: 42821b2e-e1d4-355d-9944-e8b7523c333b.roa (raw, json)
Hash identifier: 6qX4W0RhkP/So1GVHMY8Mp8qwVaEkaVJmy7dGCE66Ec=
Subject key identifier: 0D:A2:C9:54:BA:26:1D:F7:53:4C:0C:6A:8B:DA:97:F1:D0:F6:50:94
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314917DDCA6390003DD0640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42821b2e-e1d4-355d-9944-e8b7523c333b.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 184.151.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:91:7d:dc:a6:39:00:03:dd:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=41bdb8ee-ba13-4c02-83b0-dbeadb5b3d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:00:c7:52:91:25:50:3e:4e:20:98:ed:55:
a4:a2:2d:db:cf:61:2f:6e:77:3f:a8:ec:2c:59:7f:
70:7b:7d:b2:00:d3:4a:d0:8e:e2:a3:eb:2d:8e:9a:
74:ad:5a:da:20:d2:05:53:13:7a:47:42:3c:93:f2:
a3:0a:df:7e:6f:58:2d:83:ff:fa:14:e3:d0:eb:95:
74:1d:98:1e:8b:1b:f5:a6:ec:30:75:21:65:57:25:
e7:f7:17:92:91:8a:cf:22:00:8c:9c:4b:e2:44:e9:
1f:5a:2e:d7:5c:a2:1a:6d:f5:ed:5b:6a:e3:54:8e:
76:e3:c5:c5:32:bf:68:06:fe:9f:b0:84:1a:5a:1b:
b5:0b:90:14:1a:04:22:47:47:af:75:a0:f3:f7:d8:
6f:ba:ee:07:be:bb:2f:5b:10:24:72:ee:f2:ed:c4:
6b:9a:18:c2:1c:89:d3:e0:9b:e8:28:54:a3:f1:f7:
4c:ae:a0:2c:0f:f1:6a:1b:4d:8a:7b:7e:26:dd:d8:
dd:e4:ee:2e:c3:74:d6:af:53:95:0d:a6:35:a8:eb:
a0:ae:46:b9:3d:44:56:1c:52:f9:b7:d8:52:4d:1b:
c3:07:ee:da:4a:06:8d:82:59:97:62:4d:09:4c:90:
ec:60:f8:fc:1f:62:aa:88:69:81:4b:51:75:22:d7:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:C9:54:BA:26:1D:F7:53:4C:0C:6A:8B:DA:97:F1:D0:F6:50:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42821b2e-e1d4-355d-9944-e8b7523c333b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:2e:10:10:56:76:40:09:55:aa:56:eb:9e:96:1d:cd:45:d3:
60:1c:1e:02:ce:74:fd:2e:7f:ce:23:64:de:86:e0:e2:df:a2:
88:d5:72:2f:40:00:4b:9c:3c:c5:4c:f0:20:08:53:fd:54:16:
18:eb:59:b1:c5:cd:0b:34:2b:ee:1c:0b:a8:7a:7b:bf:f1:b6:
fb:f9:6a:1a:73:10:21:5b:b3:35:a8:73:70:a6:dc:6c:b4:52:
41:74:c8:69:b4:70:1f:6c:08:7b:38:b4:dc:6e:d7:6e:e7:52:
81:e1:84:1f:85:9d:f2:73:4c:84:1e:36:a9:ed:17:68:b6:52:
e4:30:09:07:a6:cc:a5:83:e0:b9:59:40:9c:68:5e:46:12:ac:
6c:5e:42:c8:28:01:67:ed:70:99:53:23:85:9c:91:40:ab:3f:
6f:ad:5b:ba:b7:d7:58:d6:d8:cf:25:2f:05:42:a0:db:0f:f8:
55:5b:29:e0:2e:3d:f9:76:f2:d4:be:40:c3:da:67:67:b7:71:
7e:ac:6d:b4:08:61:d7:53:a4:09:f3:0d:6f:0a:68:2b:7f:f6:
ca:f4:7c:9e:f7:f1:ee:fd:eb:cb:cb:ed:31:ae:a1:4b:6c:0e:
72:c2:7e:86:77:90:5d:2b:47:57:dd:8c:31:ca:05:a9:78:54:
c1:49:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org