Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b00e7e5-428f-33b3-9933-dd2e35707d65.roa
File: 4b00e7e5-428f-33b3-9933-dd2e35707d65.roa (raw, json)
Hash identifier: YxdNMf2YG36RdT7ZZIsOH5Px5WyxoIa2U8Ky4PA38cU=
Subject key identifier: 14:35:16:8D:10:07:D0:C0:4A:0B:9F:58:E0:52:AD:68:5A:FF:BE:C7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF7505309AD9CA79F00E9A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b00e7e5-428f-33b3-9933-dd2e35707d65.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:05:30:9a:d9:ca:79:f0:0e:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=97d0e142-4671-44e7-a033-e0996aee3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:e7:d5:62:7c:c3:ca:60:c6:ad:d7:cd:dd:
d1:de:39:f9:d6:6a:b8:c7:1f:da:6c:a2:a2:b4:2c:
4b:f4:ab:17:c1:d7:4f:d7:3c:4a:f7:b6:32:e4:b3:
ca:4e:b0:6b:91:83:b7:bb:f8:88:df:25:07:be:75:
ea:39:57:64:ff:db:42:d7:79:06:a3:ad:01:a0:b3:
a5:55:ad:c2:b6:3b:06:fe:78:76:c7:6d:e4:c2:dd:
c7:2a:c7:99:99:97:fa:1e:3b:8e:2f:07:3d:8f:52:
df:45:af:74:c1:fe:e6:21:9a:b2:f6:96:9a:4c:3d:
a4:95:0d:ed:22:f1:0c:f4:34:ae:b8:eb:fc:f0:8f:
cf:73:ce:8c:2b:0e:12:ae:f6:e4:36:11:5d:0d:67:
c4:f2:dc:07:22:47:06:f1:d4:34:88:9f:0a:9c:ee:
57:29:f1:1d:5c:01:13:39:f5:7d:4d:2d:5c:0e:d8:
03:08:dd:76:04:eb:f6:e9:e9:cc:28:87:f5:38:79:
51:d1:61:46:ec:ba:be:cb:4e:f8:5f:ca:94:e4:c5:
b4:d8:d2:60:35:82:eb:20:32:85:ce:33:7e:77:ec:
bb:04:f9:e2:84:c5:35:07:d8:67:98:af:dd:55:dd:
10:df:56:92:24:f6:c2:97:68:ab:4f:5d:59:51:ec:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:16:8D:10:07:D0:C0:4A:0B:9F:58:E0:52:AD:68:5A:FF:BE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b00e7e5-428f-33b3-9933-dd2e35707d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:cf:01:85:f1:37:c8:3c:9f:03:b2:44:82:53:40:49:8d:a8:
c9:b3:43:54:6d:58:46:f0:ed:50:74:b4:ec:fd:9a:9a:ed:04:
86:d1:da:00:d5:31:ca:73:86:7e:de:81:36:a2:10:23:d7:0f:
19:ec:56:6b:0f:2d:c9:aa:3e:6f:79:c8:f3:2f:38:5d:3a:42:
e5:e0:68:3f:32:ad:e9:21:fd:e3:c6:d7:50:aa:6f:07:45:a1:
f8:7f:4e:6e:32:b2:ef:6d:ff:9f:58:8a:e2:86:4a:40:a9:7a:
15:d0:fa:a6:9e:ba:ca:66:d1:5f:79:0b:22:fe:2b:9a:99:2c:
b7:77:d4:6c:93:7d:4f:bf:25:fb:98:58:57:29:50:71:a0:c4:
3b:f5:37:f5:56:55:9d:62:c9:ad:a4:6f:8f:9a:e1:4c:cd:60:
d6:42:93:32:ae:b4:16:4b:48:17:00:e1:65:7e:f5:0f:4d:c0:
ad:e6:c4:80:ae:4c:24:cf:39:b8:56:15:7f:07:64:db:09:3d:
f0:dd:34:58:81:db:85:fe:5e:e0:94:64:05:9a:11:f7:8f:9e:
54:e4:0b:60:73:df:6a:e2:3c:17:b9:8c:b9:c6:27:48:a5:ad:
26:11:93:e0:ae:cb:70:d8:4d:ea:2c:65:10:d6:50:fa:fc:12:
a5:82:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org