Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72ddac83-7f10-346b-814d-f8c3bff78af2.roa
File: 72ddac83-7f10-346b-814d-f8c3bff78af2.roa (raw, json)
Hash identifier: yd5oQNvIjv6PE7Rs47XeC1wUJDkxVCLHii7gGFDIMTc=
Subject key identifier: CD:AC:D1:D9:98:2D:BB:BF:09:11:AC:13:68:CA:07:7F:AF:75:07:55
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314DA46FC6590EAA229A080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72ddac83-7f10-346b-814d-f8c3bff78af2.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:da:46:fc:65:90:ea:a2:29:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1175e7f2-9494-4d8f-8e26-87bab49608f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:75:de:bb:1e:31:a5:1a:dd:1f:8e:c3:db:
cb:36:3a:30:b2:3e:36:1a:76:56:37:c8:3b:c4:c2:
d6:25:c9:48:eb:28:0a:ce:03:9a:c9:69:41:c2:60:
c2:8e:84:6c:cb:d3:06:19:2a:16:11:0e:3f:c0:00:
e9:37:cd:e6:32:5e:98:7b:45:40:ba:db:e6:d2:e7:
c5:e9:ff:36:4d:f1:e3:16:ee:75:f2:e1:8c:15:5a:
4b:b4:4e:2f:60:db:06:a8:3d:6d:f1:28:86:c6:1b:
96:ed:06:70:96:56:ce:92:1c:fa:67:e4:52:bd:f4:
26:d8:71:cf:3b:ac:4c:95:2f:32:6a:37:23:d3:ae:
16:76:7f:b2:ac:fe:ce:04:5c:5c:7d:a8:19:ab:0a:
51:a0:ce:57:4d:8b:23:2d:5a:ab:4b:be:43:91:d4:
8e:21:28:98:4e:c4:40:ca:85:19:cf:c6:3b:1d:8d:
25:84:9b:ff:07:f8:92:0e:42:5a:ec:20:78:7f:7a:
51:fb:27:e6:89:c4:23:e7:3e:22:a8:3e:9e:a2:f8:
f8:ed:06:e1:74:8b:66:07:a6:6a:31:dc:52:aa:22:
7f:1e:e9:b9:f7:85:c1:e9:5b:8d:6f:c0:e7:8f:86:
11:ef:ab:1c:f9:54:2c:e1:9a:c5:e4:62:35:90:67:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:D1:D9:98:2D:BB:BF:09:11:AC:13:68:CA:07:7F:AF:75:07:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72ddac83-7f10-346b-814d-f8c3bff78af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:f7:3b:47:3a:3c:b8:60:82:51:58:8d:76:31:6a:ec:91:d1:
d7:ab:62:0a:61:fa:4c:ed:db:ea:4d:18:0e:88:9b:a2:4b:c2:
22:0d:f4:d8:c6:3a:1e:88:61:02:d6:be:95:33:2a:9b:97:df:
96:64:02:ea:15:eb:23:9b:c9:19:d3:07:cd:83:de:4d:e4:f6:
8a:15:5c:b3:3a:43:40:11:a8:a0:d2:88:f7:c8:9c:a9:bd:6b:
d9:44:b5:72:63:26:f2:db:d2:7c:de:6d:34:be:f2:d0:47:e5:
8a:81:3c:e3:a4:b5:e4:d7:eb:96:93:f4:1c:8d:78:ab:d0:7f:
92:90:ed:9d:52:4f:37:d0:ea:0a:5c:c8:be:5f:0f:a1:ce:51:
72:c4:95:a5:92:cf:1c:43:7e:74:f0:27:4b:fc:0d:94:95:5e:
45:34:f6:98:99:1b:78:30:f2:f8:b2:ab:c5:8d:83:b8:3f:a8:
ac:c4:53:11:4d:d4:9d:47:b4:1e:16:a1:c4:a5:37:10:6f:a5:
d6:05:54:d9:42:6e:45:a5:c3:94:5f:39:81:b6:b9:d6:1e:5a:
53:02:96:3a:4a:49:a7:d4:69:44:06:8f:3a:08:c3:25:13:eb:
e2:24:42:17:a1:a6:4e:3b:03:96:20:75:e7:59:2a:a1:78:52:
de:bb:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org