Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/656a76e6-eb91-35e3-b5cc-71506c90ca30.roa
File: 656a76e6-eb91-35e3-b5cc-71506c90ca30.roa (raw, json)
Hash identifier: MShp7D3UJ3/dA0alqdNG1re8CKnvH3kBadhcnw+8WOQ=
Subject key identifier: F3:AD:B4:D3:50:59:22:FE:F7:8D:1D:D3:73:84:5F:6A:48:98:1A:DB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931368FF119A05479A16E000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/656a76e6-eb91-35e3-b5cc-71506c90ca30.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 50.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:68:ff:11:9a:05:47:9a:16:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=bc1f3d49-6cef-4a54-88a1-a1bb1d9b999d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:99:d4:23:12:d4:75:f0:b0:f7:d8:9a:00:
b8:8f:be:1f:bc:a0:0e:2b:c0:38:ff:86:2e:a8:75:
85:b1:7c:6c:31:a1:70:cc:de:a3:98:c8:c1:b3:e6:
7c:d8:28:b4:2c:9b:45:f0:60:d3:bd:e2:bd:d4:c2:
3b:95:e9:0d:22:c5:49:49:80:8b:fa:33:38:63:03:
95:e0:5e:5e:ef:38:4c:96:81:a6:5d:73:d2:61:9a:
8f:95:a0:b4:6d:b8:5a:92:aa:d3:f7:d1:8a:71:30:
c4:b4:e6:6b:63:11:d0:16:94:7e:37:53:7b:fc:d3:
b5:07:ce:95:7b:10:1d:b5:81:65:55:98:01:21:be:
4d:0a:67:2a:1e:1c:e4:f6:4c:f3:70:fa:4a:f0:cb:
09:93:99:35:f4:b1:94:18:42:eb:76:30:93:a0:2e:
93:44:41:d8:b2:61:0e:10:49:70:25:d8:17:cd:bd:
af:c5:0b:31:c8:c5:2e:4f:d9:f4:e1:0a:02:39:4b:
03:f5:25:9c:85:13:25:9c:38:a0:cd:e0:72:74:b6:
a0:7a:7a:db:a0:a0:09:30:86:43:5b:98:38:2a:26:
d3:d1:2d:7e:a2:90:e8:56:1f:04:47:a9:c0:ca:07:
08:8e:9a:3d:bc:ee:aa:95:91:27:05:d1:c4:c2:4a:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:B4:D3:50:59:22:FE:F7:8D:1D:D3:73:84:5F:6A:48:98:1A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/656a76e6-eb91-35e3-b5cc-71506c90ca30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
50.100.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c4:a4:44:38:b3:b1:1e:e3:49:c4:8f:92:b9:3f:20:03:fb:
d1:82:08:34:9f:11:1a:1e:4f:15:6c:0c:dc:99:e0:25:23:29:
06:73:e9:8a:1f:ef:6d:f5:b4:4f:aa:bf:9d:ec:9e:eb:c8:6b:
9b:98:47:35:40:bc:c2:84:f3:a8:f0:1f:1c:ab:6a:b1:4e:64:
0e:66:c0:e8:3c:b1:85:ce:bb:8a:13:b6:06:5f:84:36:bf:a2:
52:a1:fa:df:34:9e:99:f7:9c:77:59:e7:33:c0:d7:0a:d4:30:
da:6b:99:86:df:ff:5a:f9:c0:53:15:c7:eb:1e:86:30:e3:ce:
52:97:f5:cf:51:bb:4d:7b:e8:6d:c5:bb:18:10:bf:09:d8:88:
d4:e3:7b:9c:8a:64:ef:f7:10:77:4f:6a:e0:16:9f:7e:7e:91:
4b:f7:85:b5:85:e8:95:59:df:e9:8f:92:f4:d3:d7:10:62:3d:
91:f3:34:45:05:58:ad:cd:a2:38:fa:a4:d2:18:03:d9:ad:e4:
65:c4:92:31:c2:cf:09:a8:39:3c:5c:d7:06:fa:01:be:19:91:
15:68:dc:69:e6:01:12:14:88:76:ef:c1:25:22:b1:e8:76:f3:
32:03:8e:00:9c:22:20:e4:47:c1:e2:6e:57:39:a9:c9:47:65:
86:10:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org