Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4acc20f8-db60-3e20-ab35-8555f468422f.roa
File: 4acc20f8-db60-3e20-ab35-8555f468422f.roa (raw, json)
Hash identifier: jA2oR9a3xpeUNw41/qVT6uQnCKHCiJJs/Mi1Vjglvm4=
Subject key identifier: 81:99:32:CA:09:6E:3B:15:5F:F2:F6:CB:7C:DF:03:83:2C:F4:4F:CD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0051AC474E7975C5A0730
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4acc20f8-db60-3e20-ab35-8555f468422f.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:05:1a:c4:74:e7:97:5c:5a:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=f4d0e3a6-3dec-44ae-b182-fbb8d3906c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:c6:0a:e7:da:f6:67:c3:1f:7e:54:7c:d8:
db:95:65:35:36:b3:b9:dc:11:12:ca:1c:d5:ca:01:
06:38:d8:32:ac:78:3e:61:99:13:9e:ba:e6:3a:24:
57:8f:41:cf:47:41:1d:d2:b8:c3:6e:1a:63:97:af:
dc:46:d0:c4:49:23:4b:cd:82:e3:82:33:49:07:e3:
b6:6d:08:ae:ab:49:18:5f:50:43:17:db:eb:b2:1e:
2a:79:a7:ff:38:c0:3b:cd:ee:c3:c5:57:e1:e8:16:
75:6e:1b:50:52:d0:23:c6:43:9c:02:96:8c:46:9e:
45:00:04:02:41:4a:cf:25:fa:91:db:e8:32:77:b5:
d0:c3:83:82:0a:8a:50:0b:f7:56:a4:1b:fa:74:bf:
78:5c:9d:e2:62:6c:71:c7:05:ed:e9:27:ff:42:62:
69:dd:c1:83:fc:b0:01:d6:a3:44:d2:c3:aa:c2:cc:
a5:35:f8:25:fc:58:1e:34:9c:8e:fc:07:f5:86:cf:
48:64:e8:cb:0a:b4:66:62:d5:00:51:9e:02:a0:84:
e1:cc:18:4e:31:e5:d4:5b:58:bd:2a:52:a0:20:a8:
27:c8:b7:68:d5:2f:b1:fd:fc:8b:5c:59:04:90:4a:
0f:ab:8b:30:a6:7d:28:d8:5c:bc:77:24:12:b8:2f:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:32:CA:09:6E:3B:15:5F:F2:F6:CB:7C:DF:03:83:2C:F4:4F:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4acc20f8-db60-3e20-ab35-8555f468422f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:10:ff:b0:f1:09:2c:25:90:fb:26:b0:81:b7:09:1d:18:63:
f7:c1:b7:fc:12:17:bd:15:5e:a2:88:03:00:fb:56:6c:d9:28:
94:1a:73:b1:d6:be:09:fe:d9:76:10:1a:b8:07:39:de:6a:11:
d0:d8:e0:3d:03:91:78:e0:16:21:11:81:cc:ce:a0:1e:79:de:
10:58:5e:ff:08:dd:57:01:a1:40:58:97:e6:a3:80:5c:2c:84:
e2:78:af:45:bc:92:93:6a:01:77:b1:55:b6:dc:c0:ed:f1:16:
08:74:5d:3a:23:4c:0f:61:da:c0:a9:52:f2:b4:92:28:d8:62:
95:63:44:bd:65:4a:86:0d:e6:11:90:1d:5b:78:ef:12:30:18:
ea:ba:2d:9a:60:f0:7d:fd:cb:42:1b:c6:13:49:26:88:c2:93:
e6:b5:ea:9e:9a:4e:05:d7:8d:36:15:f0:73:a0:09:b2:e5:ba:
bb:69:af:9a:c2:76:fe:11:66:38:b9:b9:21:e6:2b:1e:e3:0a:
49:58:be:0a:e1:c0:ad:f5:0d:46:44:8a:20:e3:78:07:d2:82:
3f:71:63:87:fe:54:c0:7e:da:aa:8b:bb:b3:3d:d6:db:5c:99:
c3:86:bd:97:6e:e1:3b:da:75:65:65:56:f1:43:66:8a:20:d5:
73:90:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org