Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699e50fa-0622-3726-9dba-7e3f5f66eaa9.roa
File: 699e50fa-0622-3726-9dba-7e3f5f66eaa9.roa (raw, json)
Hash identifier: MDFuuJELOh+aGChWToCqPzpMZc/xk3WNQojVlSPwIqo=
Subject key identifier: E3:3D:EF:28:BC:74:0A:33:AE:F3:FB:27:AB:12:B7:BF:35:AF:18:2A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313DC69316CEFEB80D19980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699e50fa-0622-3726-9dba-7e3f5f66eaa9.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.49.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:dc:69:31:6c:ef:eb:80:d1:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=6a46c204-73a8-4d95-817f-9dd9ade25664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:bf:36:49:52:11:8a:1e:56:43:53:4f:50:
0d:59:06:2e:8a:c1:86:9b:de:ec:19:23:76:41:65:
0d:b2:74:3b:69:17:74:55:03:89:a6:f6:bf:87:9b:
fa:77:27:52:af:5d:a1:da:28:10:0d:4c:60:f1:b7:
08:8b:6c:09:43:6b:d8:4c:c3:20:2b:ac:3c:ca:2d:
10:85:df:60:3a:b1:1c:ef:7d:95:c5:ea:f1:22:3c:
46:32:a0:86:7e:5c:07:f3:c7:d5:eb:5f:fe:af:f0:
4d:71:bd:ab:e5:ca:f1:ec:68:ae:59:02:89:46:44:
c1:e1:c5:77:30:ae:a9:6e:03:ce:69:38:f0:36:ee:
f4:a2:7c:b8:f0:d0:31:a1:af:84:c2:52:31:ce:95:
05:cc:6c:12:9b:cf:23:ca:15:68:d3:78:af:2b:13:
6a:6b:53:af:3f:e6:f5:e0:49:83:ae:83:88:39:39:
34:31:d6:be:db:ec:0f:ae:07:2b:45:40:15:be:28:
b1:0f:9c:64:76:74:7a:7e:f1:f6:1b:d1:bb:83:76:
1e:a6:d9:85:c0:18:d8:28:b3:4c:64:7b:03:0a:cd:
7c:6f:ba:dd:57:49:e1:f5:ec:4e:36:88:65:d6:23:
cb:fd:cb:24:fe:54:14:51:ee:85:5b:26:16:f8:59:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:EF:28:BC:74:0A:33:AE:F3:FB:27:AB:12:B7:BF:35:AF:18:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699e50fa-0622-3726-9dba-7e3f5f66eaa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0b:93:2f:7e:6d:ed:65:7c:ec:b5:f7:0c:40:09:a2:de:07:
f8:35:d6:db:cb:f1:33:b4:4a:d0:f3:89:97:29:60:70:3f:dd:
98:56:e7:0e:8d:7d:94:27:9a:f0:18:ce:18:36:64:ba:39:85:
9d:ea:9f:89:78:4e:18:f7:7d:a8:32:53:98:8b:2f:18:0f:2b:
4a:e9:c5:a1:29:e1:ce:16:31:69:69:37:f8:5e:76:59:ac:4a:
72:70:4a:eb:a8:b9:12:63:24:22:5c:41:c2:aa:8b:ef:ea:b0:
5b:02:dd:7b:0c:a7:1e:d8:4f:78:43:8f:7f:37:94:65:39:7c:
4c:84:de:06:6a:dc:c3:2c:2b:e7:2f:6c:fa:22:3d:ab:e3:ee:
80:eb:60:07:6a:a8:b1:f8:99:49:1f:3e:d3:55:45:4a:54:ba:
7b:e5:8a:d3:83:2f:78:ac:42:f2:2c:2e:9e:e5:47:e4:42:4d:
8d:97:0a:dc:d3:0c:0b:b9:1d:ea:bc:01:af:13:48:a4:50:6c:
5c:61:46:75:b2:14:ff:64:b1:b4:47:bd:8a:3b:40:c7:2d:bb:
ac:a0:d0:5a:45:a1:8b:02:d7:99:e9:ec:c4:70:0b:0b:7f:d6:
b9:d7:08:df:76:1f:5f:59:91:e8:9c:d4:e5:f2:e1:95:fa:05:
bd:14:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org