Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64c178c9-614f-3c4b-b607-037bede519c5.roa
File: 64c178c9-614f-3c4b-b607-037bede519c5.roa (raw, json)
Hash identifier: Cj2JKfLDAjhK4dii/KwGSwoFyFttaaL+TW4APnDC3ak=
Subject key identifier: 7F:C8:98:B0:32:BC:1D:9F:D8:86:5B:6D:66:FF:05:1B:09:B3:08:15
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4586F404DA2A72D190780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64c178c9-614f-3c4b-b607-037bede519c5.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 70.31.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:58:6f:40:4d:a2:a7:2d:19:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=2d80f520-ffb0-414e-a38f-2e2afa510951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:3b:d6:81:9a:ba:b0:22:7e:6f:59:45:9d:
01:ac:8d:76:2a:f6:4e:ac:27:9e:e5:3b:f4:82:d6:
61:0d:11:2f:fd:f3:ce:12:1a:4b:01:b1:0d:92:bd:
52:ff:0c:7f:d1:4f:77:5e:a7:9b:38:16:4b:a3:87:
90:d8:33:30:60:2f:b4:33:fd:a6:f8:5a:61:aa:3f:
c3:21:00:94:5e:ad:2c:fc:e9:0e:51:ba:e5:3f:d8:
7c:25:02:be:fe:af:7d:74:a3:cc:26:99:c7:cc:85:
d5:d9:e2:1a:c1:1f:5b:2c:09:55:95:48:79:b7:62:
0e:9f:59:5b:20:34:01:56:8b:e7:a1:15:c3:40:81:
07:e2:31:0b:22:03:b6:50:c1:b3:d0:f7:d6:5c:c3:
e5:9f:2d:24:f6:b6:e1:9c:27:50:93:87:b8:c1:4d:
ae:c5:ff:c0:87:1f:b8:6b:b9:c8:37:27:76:c5:10:
c0:e7:be:20:c5:ee:18:fa:ed:a1:85:44:78:d6:e0:
88:d6:cb:41:5d:9a:ae:4a:d1:f5:b2:11:34:7a:6e:
99:12:2b:15:2b:60:8b:7d:37:6c:1e:01:b8:d2:82:
f9:39:44:a2:15:7f:64:79:a1:7a:1b:4f:a3:d6:bf:
1d:f1:52:db:b8:a0:d4:a1:e9:d7:b3:a4:b7:22:c3:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:98:B0:32:BC:1D:9F:D8:86:5B:6D:66:FF:05:1B:09:B3:08:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64c178c9-614f-3c4b-b607-037bede519c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.31.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:8b:f2:26:a3:99:ed:8d:36:59:e4:a7:46:5a:ff:43:4f:bf:
7f:21:9b:99:a9:e2:75:17:ae:bf:df:29:e9:46:04:f1:c6:1e:
13:04:b0:56:cd:47:ce:ce:42:c3:30:f1:f2:f0:3a:ef:28:bc:
0e:9d:a6:45:fc:ad:d4:c0:6b:5a:ff:d3:99:f1:ab:e2:32:e0:
0e:2a:48:a6:72:f3:f7:17:93:29:57:10:f5:b1:90:17:8e:9c:
35:5b:1d:8e:49:e9:d7:e6:cf:af:8e:40:c9:ad:9f:e0:7b:34:
1e:2c:c3:ec:29:52:a7:12:e7:1b:9c:11:a1:a0:20:78:6e:c7:
85:4a:3a:69:c2:06:e6:b7:34:a4:92:bf:59:c0:d7:99:d8:5e:
78:a3:f3:ff:fe:d8:a1:a5:93:cd:1c:fc:2f:31:e0:64:67:2c:
7a:ee:a7:34:d0:e3:fd:95:68:4a:fc:20:7c:4e:77:0a:36:f2:
a3:09:9b:c5:2f:4f:01:89:74:53:bc:ae:7a:3f:7e:8d:01:82:
30:58:d4:1a:52:d4:b7:ac:76:6a:66:d2:d0:43:a0:ae:52:db:
b6:bc:b7:21:d2:ba:6b:1e:f6:02:6a:e0:c2:72:95:76:c8:79:
d4:4b:e8:21:3a:5d:bf:78:65:5d:de:08:6f:61:11:21:f6:42:
a4:5c:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org