Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54c5b63f-a596-3c45-b716-0df03ac72f60.roa
File: 54c5b63f-a596-3c45-b716-0df03ac72f60.roa (raw, json)
Hash identifier: bSDieYGnqNt/AFt5bIkTE0gWC0ZURGXQ5AFehS0lNjA=
Subject key identifier: 67:F3:36:28:95:F6:71:F5:68:F4:83:F5:BC:66:4A:49:3F:59:96:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314E4B6FF930281EA61AD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54c5b63f-a596-3c45-b716-0df03ac72f60.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21724
IP address blocks: 204.101.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:e4:b6:ff:93:02:81:ea:61:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7c4b289a-22b6-4f09-bc2d-b1929f79ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:4a:72:27:14:0f:55:e7:ea:68:54:d8:cb:96:
24:62:b5:52:af:ab:b1:0e:f9:c4:b3:c6:d3:f6:5c:
77:53:b1:e1:12:c3:a1:44:5e:ce:81:7f:c3:60:36:
0c:f9:ac:b4:a4:47:b3:8c:9a:75:68:2a:11:5c:7c:
14:df:37:e6:bc:61:82:ff:09:4c:68:04:b4:7c:b2:
9d:80:21:ae:0b:1f:34:a0:54:6d:5a:c6:d4:8a:c0:
2f:f9:84:f8:2f:aa:8a:3d:3a:8a:4e:ee:7f:cc:c3:
ab:26:dc:b9:4b:10:c4:b2:c9:82:b4:00:04:96:44:
0c:fe:6a:49:39:aa:0d:02:e4:59:06:4e:aa:4a:a7:
a5:2d:13:fe:09:6a:db:72:9c:a4:b6:68:54:dc:18:
b7:41:48:0a:4e:11:e5:52:75:e2:b4:67:c6:d1:e2:
2c:eb:c1:91:d6:32:64:97:d8:7c:9f:ae:a0:c9:3b:
d6:80:92:7a:e4:cc:f8:93:a8:17:fd:f9:02:ea:3e:
0f:5f:60:40:1c:be:77:13:d9:c6:ea:e8:4f:24:91:
e0:9f:64:b2:42:bf:2f:6f:27:02:2b:56:b6:04:ae:
dd:e0:91:19:aa:ef:74:0f:67:c6:d5:66:ed:49:7b:
2c:c0:0d:f8:45:f6:eb:b5:cf:2b:91:19:ee:53:59:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:36:28:95:F6:71:F5:68:F4:83:F5:BC:66:4A:49:3F:59:96:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54c5b63f-a596-3c45-b716-0df03ac72f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d9:84:52:27:20:ad:c8:0d:19:f7:43:c5:2e:8a:0a:b0:81:
47:e4:9d:54:a4:53:be:44:00:7b:0b:18:05:a3:fa:ab:e8:0a:
e8:18:e6:33:91:cb:24:8e:09:3e:7d:7c:e4:fc:32:d9:69:94:
f3:8f:54:05:f2:16:c1:0f:11:5e:66:53:14:94:eb:8e:82:92:
df:ce:53:e2:ca:49:f4:cd:9b:3f:1b:d1:06:79:66:80:74:70:
dc:e0:56:47:d0:82:b9:cf:a8:27:37:1d:43:1a:a5:c8:6d:4c:
62:3a:a6:2a:74:4b:c3:06:a4:36:ac:74:51:08:41:90:1a:9e:
c6:2f:85:20:42:9b:ca:60:45:76:8f:a3:85:23:4a:69:78:c6:
58:84:b4:b4:ae:06:4f:26:12:41:7f:08:5b:ab:f5:53:bb:8e:
4a:e3:38:e4:96:25:e8:4d:d9:09:c2:07:9b:7d:9f:01:a1:98:
a6:f5:30:71:cd:19:21:09:1f:9a:52:8b:47:b3:91:38:b8:d2:
ce:58:19:d5:56:b0:aa:11:df:c7:b9:35:2c:3b:c2:c5:42:83:
6d:17:c9:66:4c:7c:c6:14:7d:4d:ac:aa:a9:05:37:48:3e:7f:
3f:53:4a:27:60:7b:45:83:1a:a5:4a:3e:d4:66:d0:36:ac:b3:
98:1d:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org