Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602a0048-e3fc-3875-8dbc-9de23eb01cfc.roa
File: 602a0048-e3fc-3875-8dbc-9de23eb01cfc.roa (raw, json)
Hash identifier: EEAsryjgxwWBsGFP9OYwuWv0DpjAfTdcpiKNc4yyz98=
Subject key identifier: 9B:7B:02:44:B8:BD:8E:A4:57:F5:13:13:D7:C0:4D:35:CD:AE:32:67
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315BC2FF359D0FA4903DA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602a0048-e3fc-3875-8dbc-9de23eb01cfc.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.61.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:bc:2f:f3:59:d0:fa:49:03:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=3a61c3ee-b892-476a-8506-114e6c52bd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:b3:3e:d8:6a:20:32:5b:51:1c:92:f8:b2:
f4:e4:f7:e1:5c:0e:9a:e0:8e:33:bb:40:27:b1:46:
44:d0:bc:41:a3:d5:1c:46:26:48:e1:23:2d:ec:ce:
92:02:51:50:c2:9c:a2:06:1f:90:bb:c3:2f:15:f1:
29:30:ca:3a:b4:0a:8f:f1:8f:f2:92:e0:45:1e:07:
a8:e4:e9:9b:cf:2e:ab:d6:e9:2d:7a:49:5e:b8:74:
e4:30:31:26:e1:51:4b:7e:ef:94:7f:e5:67:e6:11:
04:8a:f9:0f:16:6a:88:df:db:88:e9:6a:ab:69:4b:
e9:c9:60:e9:8d:82:8a:1e:65:cd:d6:ab:97:a4:54:
e1:2b:31:75:20:c4:ae:8f:7a:af:dd:3d:7e:6b:5c:
bd:d3:2c:68:b1:d4:7f:3c:bb:69:a0:f5:d1:88:72:
b1:c8:93:ac:3b:1a:8b:6b:49:b0:85:1b:6d:52:6f:
71:b7:9a:4d:dc:dc:9a:e0:c6:ed:86:47:09:d7:71:
8a:41:6e:36:73:1a:4b:7c:33:86:29:e0:1d:53:89:
a3:e2:c5:56:ed:55:42:61:84:60:55:1c:b9:16:a2:
1a:d8:15:a4:d9:49:ea:db:ca:04:24:10:48:8d:09:
9a:33:01:b5:c2:e6:ac:9c:d5:5e:0f:dc:a5:f9:08:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7B:02:44:B8:BD:8E:A4:57:F5:13:13:D7:C0:4D:35:CD:AE:32:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602a0048-e3fc-3875-8dbc-9de23eb01cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:cc:b4:a4:72:fc:53:09:ff:7a:6c:a7:be:07:f6:fd:a8:8a:
55:1d:72:8d:e7:78:89:12:f5:eb:0e:c4:e7:65:78:5e:f7:de:
44:68:21:fb:4f:4e:d6:5e:d0:f5:d8:3d:0d:8d:2c:6e:d1:21:
39:80:c5:5a:d8:9f:df:ee:6a:ac:80:ad:0d:0d:bf:b0:ed:d2:
15:50:01:bc:3c:80:ae:21:2c:2b:ec:32:fc:b4:4a:77:34:5c:
f2:86:47:c5:eb:7f:aa:03:ce:ed:db:97:d4:2a:8b:1c:7d:20:
cc:46:61:db:61:02:ac:21:e2:3d:b3:ea:26:e7:46:1c:59:19:
00:9d:c1:a8:23:18:f8:4b:03:5d:1f:00:38:42:77:08:d3:db:
e3:5f:32:4b:41:c3:b8:1c:1c:76:34:ad:1b:81:a5:38:c2:28:
8b:31:75:a9:9b:bd:6e:37:26:26:86:32:7e:c1:63:1c:3a:06:
6f:a1:56:dc:e8:9d:db:d3:90:2a:02:09:da:37:97:67:83:c0:
ae:c4:f7:ec:05:dd:9a:e4:94:08:f3:d2:61:d1:e0:54:da:81:
c2:ee:6f:50:f1:5e:8d:07:4f:f5:6f:a1:46:e4:e5:b4:a7:90:
de:c2:46:4f:95:23:8d:d2:5e:b3:d8:77:94:3b:b2:50:aa:19:
b1:09:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org