Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a71559c-fd83-389e-bef1-63cccc27df7f.roa
File: 7a71559c-fd83-389e-bef1-63cccc27df7f.roa (raw, json)
Hash identifier: BwAwvAV0Sj6aKGvCSi6/rzm3lvQz1NqXecsbPFmsOMQ=
Subject key identifier: 6B:91:BD:1B:2B:F6:7E:E7:D1:D4:D0:5C:EE:F9:BC:6E:D7:BB:A9:C2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931614F1084267D634253380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a71559c-fd83-389e-bef1-63cccc27df7f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.236.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:14:f1:08:42:67:d6:34:25:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1fbb93dc-a429-45ad-a8d5-dea04940dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:2a:94:47:ec:63:4c:0c:6d:de:a5:5a:c8:
da:90:98:63:c9:01:55:e4:04:b8:c6:9b:5f:e4:9a:
b3:e0:f8:df:9e:ac:5c:14:68:7c:00:64:3f:db:0b:
da:07:4e:14:96:4f:38:18:05:eb:38:4e:5c:c0:5b:
89:65:ae:a3:a5:9b:b7:82:f7:e1:b3:bc:c5:4f:24:
c2:5b:a7:06:0b:b5:15:c3:34:da:8f:8b:8d:8c:f8:
ab:53:f2:66:54:4b:aa:22:ef:45:35:95:2b:19:08:
e7:de:6a:16:e2:33:2a:ed:32:e1:6c:b7:1b:10:e7:
b6:71:8b:03:13:5f:4a:0c:17:a8:83:a4:2f:4c:ef:
17:e2:09:66:2b:d9:6d:c7:be:26:d6:18:ed:b3:26:
fb:a6:37:41:20:bf:60:e9:00:a1:0c:23:e7:21:9a:
0b:bf:2c:93:dc:58:36:06:84:25:ba:a2:7e:33:b5:
83:06:26:07:b1:84:5c:2b:35:7d:d9:00:48:b9:3c:
b3:0c:a0:df:9c:a8:e9:ba:d9:67:16:ac:e5:13:eb:
b8:14:64:8a:8e:5d:45:aa:7e:08:50:2d:55:75:49:
09:9e:79:72:39:12:12:9f:d5:cf:df:17:78:a0:33:
a7:b1:4e:bc:e2:6c:ae:1a:fa:9a:b6:c5:46:aa:bb:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:BD:1B:2B:F6:7E:E7:D1:D4:D0:5C:EE:F9:BC:6E:D7:BB:A9:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a71559c-fd83-389e-bef1-63cccc27df7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cf:14:79:d8:60:8a:3f:11:55:8d:3c:04:b2:05:2c:e5:0b:
7c:7f:25:e3:01:cc:da:6d:b7:aa:d8:fe:cb:9c:2b:88:69:d7:
8a:c5:e4:5d:95:86:a2:ad:e5:d6:9f:26:be:1b:47:00:62:4c:
bb:d5:88:ab:cf:2f:37:55:44:0a:dd:fa:50:2f:1f:7b:b3:e9:
e6:09:4d:c5:ce:50:d9:e2:b6:e0:1c:1a:54:d9:03:3e:2e:c6:
fc:4f:bb:ce:d7:b8:da:14:54:05:08:f8:a2:69:21:74:58:fb:
98:c8:58:eb:71:13:43:b5:19:e3:37:21:3f:55:6f:de:e4:ff:
dd:7f:9c:f9:03:c1:a9:77:0a:1a:51:7d:d4:32:d1:1d:2b:57:
03:99:fb:3b:85:ca:3c:c0:51:f6:b4:56:3c:4e:76:b5:f5:2c:
ce:85:be:5d:ef:b9:ae:7c:0d:27:8d:2d:0f:f4:b2:9f:69:07:
6f:b3:7a:6d:04:4f:ae:8e:71:9a:3c:15:51:6c:86:7c:15:71:
71:b8:c7:65:2d:3d:a7:ab:63:5f:93:ea:65:82:60:7f:7d:58:
5b:e0:7d:14:ed:ed:4a:36:5c:c6:f9:bf:90:11:dd:68:dd:6e:
35:25:9e:e8:4f:4a:e3:64:f1:13:b1:71:44:bc:2f:87:1f:84:
5e:df:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org