Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/586670fc-9b51-3020-8b3d-a26122914f7c.roa
File: 586670fc-9b51-3020-8b3d-a26122914f7c.roa (raw, json)
Hash identifier: F9h0W3oiTl9w+eTVdAzT8DBkfDwA1+j1PR411RX2zCs=
Subject key identifier: A6:63:C5:3C:DC:61:AC:56:33:3F:C0:FE:38:D3:74:AA:90:7B:5D:A3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE643C4C1E6FDCD02BB3160
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/586670fc-9b51-3020-8b3d-a26122914f7c.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 12132
IP address blocks: 216.208.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:43:c4:c1:e6:fd:cd:02:bb:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=9e4c6821-4b21-4507-974a-2fe7e328c1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:7a:99:98:f5:f9:ad:4f:bc:26:2e:ed:ea:
0b:99:2f:ae:14:d9:87:fc:3f:d0:46:34:df:52:4b:
05:13:55:ae:33:50:d3:0d:ee:91:5c:56:64:ba:b8:
b2:34:02:e2:cf:3f:01:5a:9a:aa:ae:00:a8:93:c3:
b7:26:27:ec:73:72:bb:b7:02:19:7f:b0:00:01:db:
1b:f5:69:8f:c0:a5:9a:a9:f1:ef:9d:ce:b7:16:e1:
5e:5c:65:9c:a8:79:3e:1f:a5:54:ac:55:05:5d:60:
7f:11:4a:9d:d3:ac:a5:be:7c:24:33:d3:54:e5:e3:
4a:35:5a:45:5c:05:cc:ff:fc:46:92:3e:7d:95:9f:
63:63:04:cd:12:12:aa:a6:69:eb:ed:66:ef:ef:aa:
4e:7c:77:79:e6:4c:59:7a:6b:48:f0:83:bc:1f:51:
1d:ad:67:c0:1d:d3:1d:21:55:4e:ac:d5:11:11:bf:
3e:c1:a6:ef:f0:cf:13:38:58:eb:22:23:d8:f8:86:
11:99:25:45:1a:63:27:41:80:ec:2a:97:d1:83:3f:
f1:29:fa:4f:08:5d:db:9f:d2:e3:9d:7c:43:e7:3b:
bd:f5:07:b4:b8:38:8f:5f:32:28:60:3b:dc:41:eb:
0b:68:a1:1e:79:fe:19:86:bd:0b:37:3d:5e:36:71:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:C5:3C:DC:61:AC:56:33:3F:C0:FE:38:D3:74:AA:90:7B:5D:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/586670fc-9b51-3020-8b3d-a26122914f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:2c:47:26:5c:66:a6:9b:9a:3a:34:05:2a:de:ca:06:ee:2a:
6c:27:0f:33:09:45:7a:3d:31:1f:57:d4:c2:e5:b8:ef:18:84:
8d:6f:15:59:b3:ba:61:a0:70:82:b4:c0:8e:ed:61:38:de:e2:
d4:9f:5e:87:71:f3:6c:ff:bd:d6:ab:0c:24:df:5e:22:d2:65:
b0:72:8a:7b:ef:89:55:a1:c7:cd:2e:31:a3:ba:8d:34:18:62:
42:ea:06:5e:90:1e:60:d1:b5:ec:9d:f1:bf:d9:c3:4c:ba:ee:
d9:43:d6:85:b4:da:58:5a:c3:ea:af:ab:22:0b:33:60:dd:f3:
ad:16:10:46:50:cc:bd:19:fe:6b:3c:e4:6a:f2:26:99:0d:96:
58:5d:85:a8:33:8a:78:d7:69:67:7c:5f:10:c9:d1:68:c7:be:
35:2d:43:2f:41:13:a3:81:cd:50:db:cf:d2:ea:ca:0a:b7:f4:
bb:53:25:d6:56:21:3b:5d:1c:f3:11:c6:2f:d8:fa:9c:b3:a6:
3b:db:bf:a3:d3:d5:64:63:14:9f:39:96:5c:19:70:11:3c:d8:
c0:38:6c:90:65:c5:9c:25:81:41:30:80:7c:4c:6a:a4:b1:e4:
58:41:f5:75:ff:5a:14:a4:ac:90:17:38:f1:37:dd:3c:76:b3:
d2:03:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org