Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a58569e-cec0-3fdc-bbe4-10d535bc680f.roa
File: 7a58569e-cec0-3fdc-bbe4-10d535bc680f.roa (raw, json)
Hash identifier: dw1llBqwHp+pEQLq6h/Q/wafuyPlS9hYL/ntQbRUrW0=
Subject key identifier: 51:52:A4:48:1B:54:0A:A4:9A:55:5E:9E:98:0B:3F:E2:B1:D1:1E:03
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5B053592DA5D9389C5D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a58569e-cec0-3fdc-bbe4-10d535bc680f.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 11831
IP address blocks: 209.139.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:b0:53:59:2d:a5:d9:38:9c:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=36b0600a-96ee-456e-8263-5fd1d7fd52f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:b0:7b:a0:00:26:79:9e:db:2b:f9:43:eb:
ef:03:a7:f9:2d:a5:ad:da:7f:21:b1:18:17:d2:10:
9d:24:dc:16:2d:7c:90:46:b1:2f:ea:a1:21:c8:23:
01:5c:cd:68:4d:ab:a6:41:a1:97:60:d7:02:36:eb:
3e:05:d2:cb:01:f0:f7:79:d9:e1:d6:4b:96:0c:8b:
c3:2c:3f:42:ba:f7:a6:10:bd:84:e9:b4:3c:5a:c2:
c6:6c:82:59:ab:44:ca:73:83:88:76:a0:67:fa:3a:
c7:06:26:29:a9:4b:7a:75:d8:92:13:10:57:f9:b2:
15:94:96:00:f1:55:db:e6:28:8c:b3:a5:c7:e3:43:
16:57:97:81:91:97:6f:b1:79:0d:28:59:fd:5d:f5:
1b:fd:2b:eb:ba:b6:ed:44:53:f2:36:07:f1:a4:88:
b5:b7:55:a2:f8:f4:e0:01:5d:c6:22:72:e6:04:60:
85:d3:b1:22:e3:80:d5:1d:66:94:84:f4:e6:6d:f0:
9a:f6:83:1d:2e:8d:88:b3:2f:f0:a9:b1:c8:5a:1a:
a4:38:7e:f3:67:83:e6:1f:91:32:4f:25:7b:df:ec:
f8:69:3a:93:f5:6a:83:5f:9a:6d:c0:ed:64:5b:d5:
61:fa:a1:38:05:79:75:50:1d:6e:13:ca:6b:16:0d:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:A4:48:1B:54:0A:A4:9A:55:5E:9E:98:0B:3F:E2:B1:D1:1E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a58569e-cec0-3fdc-bbe4-10d535bc680f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:4b:71:b7:3a:3d:13:48:e0:b1:6a:97:59:ca:be:79:43:8b:
d7:2c:52:8b:04:a2:d1:7c:78:38:ca:75:1c:30:3a:6d:23:cf:
90:9e:7d:ae:5e:7d:1d:b2:2d:1f:5e:e9:8e:e6:22:32:e4:44:
e3:44:ab:5a:57:f6:a9:dc:ac:9a:aa:a2:8a:d4:9b:e3:f7:91:
1c:f9:36:10:2f:76:ae:26:af:94:3f:84:8a:85:54:3c:07:91:
5d:4a:cc:b9:65:c4:44:82:e3:0f:9a:73:62:fe:81:6b:0e:2d:
d4:94:52:5e:ce:5a:0d:56:d4:8f:29:a3:20:58:2c:ee:d6:12:
9f:e7:21:63:b7:99:a7:83:69:19:f5:40:5f:a1:93:41:ab:ab:
aa:a0:c7:31:87:24:4f:49:0f:4a:8a:32:08:3a:ce:2e:d2:15:
86:23:4f:7e:8d:f5:0a:24:50:34:01:0d:76:f0:64:83:81:dd:
fa:67:1b:70:90:1e:2d:1d:10:36:e7:5f:1a:ad:ac:4e:15:37:
38:b3:9d:70:ac:a7:17:ce:c1:7f:40:99:e8:88:ee:5e:84:03:
62:c8:1f:e9:9f:68:9d:4e:d8:37:b9:1a:45:fc:f5:99:8c:2a:
2e:80:59:bc:d4:64:01:45:0a:15:e8:f7:e7:56:72:90:ed:43:
61:f1:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org