Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ad02d60-8651-346c-99fe-4e119e4afa14.roa
File: 4ad02d60-8651-346c-99fe-4e119e4afa14.roa (raw, json)
Hash identifier: 5Dzrp5nBUo7Zs/l4Gc61eRF8QDFnC4tdp4PqRF6ErBM=
Subject key identifier: AE:8B:2B:97:A2:98:41:98:BA:3A:0F:3C:74:AE:39:02:9C:F8:0F:8D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB00E225099E9B65B7D25C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ad02d60-8651-346c-99fe-4e119e4afa14.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 32678
IP address blocks: 204.101.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:0e:22:50:99:e9:b6:5b:7d:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=becdbddc-fd1f-4ebb-a395-b46769a5b5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:a9:f1:ef:01:1c:e5:54:3d:7d:6d:59:8c:
9d:4b:e5:38:05:1c:73:c9:67:67:4f:34:31:c4:cd:
0a:fe:57:e0:d4:c2:4b:19:80:f3:8c:5f:5a:59:bc:
ee:71:c6:cf:1a:26:d2:77:5c:2c:cd:c9:e5:ff:64:
07:84:a8:5d:bc:64:d9:2d:16:3a:68:1b:ac:1e:e1:
4e:03:d0:01:c5:69:e4:c3:41:48:90:5a:8b:94:07:
00:66:97:61:4b:a3:f1:da:a7:4c:a1:1d:ae:44:62:
36:66:5d:f8:9e:ac:9b:ad:db:5a:7c:6e:3c:6e:0b:
26:d9:b1:72:c9:c0:a9:40:af:69:39:a9:43:72:93:
99:f5:8e:5d:c3:3c:59:bf:03:50:7c:cd:ce:cd:99:
45:fe:1b:0e:9e:8a:51:86:6e:e0:4a:b0:63:f7:3b:
49:24:3d:6a:ea:55:fd:ac:fa:63:37:c6:2b:28:be:
0b:04:d5:b0:6a:83:26:cf:56:83:dd:33:98:9f:f5:
af:e0:99:20:5d:4e:22:b2:b0:b2:5e:1f:77:eb:14:
5b:2d:93:be:34:59:28:b1:b4:bb:d7:6b:f5:bd:c3:
54:ab:94:8d:ad:ef:0a:92:26:0a:a6:12:40:f1:10:
bd:b6:a4:ca:af:45:ce:db:62:5b:50:a7:2b:5b:6e:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:2B:97:A2:98:41:98:BA:3A:0F:3C:74:AE:39:02:9C:F8:0F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ad02d60-8651-346c-99fe-4e119e4afa14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4f:26:35:4f:fe:8b:71:d1:58:de:bb:0d:49:02:47:2c:2e:
11:54:17:ca:9e:fd:b0:5d:b6:be:23:fd:35:61:f3:a7:c7:14:
81:51:72:24:14:0f:cf:2b:d7:41:62:df:a3:3f:f2:68:40:d6:
b8:cf:84:cf:3c:ae:5c:66:76:28:e4:27:6e:10:95:5a:fb:27:
c9:12:f1:fe:6f:e9:12:9e:d4:fb:18:35:34:aa:52:7c:51:b0:
a9:62:43:17:3c:42:56:20:24:32:7f:3c:86:07:91:44:87:dd:
1f:51:cd:d8:85:ab:76:23:69:2d:4f:74:8e:be:bc:f5:c3:62:
e2:1a:31:55:0c:d1:ce:12:1c:f1:c7:e0:1b:b2:88:25:ea:a9:
ec:c5:0a:6a:96:96:30:80:34:33:aa:33:a0:31:a1:20:62:81:
14:a4:e7:01:3a:66:ce:5e:59:65:48:e2:c7:a0:68:63:1f:8f:
12:c7:4b:d9:7a:94:9b:dc:e8:f3:a4:60:5e:78:88:04:50:68:
31:82:0a:a2:e2:67:a1:ab:cc:6d:b7:e9:2d:06:ac:ff:04:3f:
81:46:70:df:bf:ab:79:51:a6:5a:07:aa:50:26:f6:8e:29:7d:
02:22:d5:c4:13:b9:16:9f:52:7b:36:9d:a8:5f:d1:69:75:5a:
4a:ea:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org