Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ebad682-6b40-3cc5-8884-c27f88f769f4.roa
File: 7ebad682-6b40-3cc5-8884-c27f88f769f4.roa (raw, json)
Hash identifier: 4Se5P2qPAbhlOAFQVMYdBn/+Ji7ulvmlr9aiBl9lVN0=
Subject key identifier: 10:B7:CD:8B:61:B6:26:BD:2A:BD:6D:AF:A1:0C:B4:31:74:F5:14:73
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFBB73F709875E81758980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ebad682-6b40-3cc5-8884-c27f88f769f4.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 198.235.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:bb:73:f7:09:87:5e:81:75:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=73a8b52a-f6bf-4762-9c29-7def5d89fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:98:42:88:43:78:39:c1:aa:90:42:26:05:
8b:24:67:00:fb:64:96:cf:ee:72:6f:e9:c7:0c:bc:
90:4e:8f:4c:2d:4f:35:57:cc:68:f5:78:4f:d9:24:
ce:0b:36:2d:54:1a:71:1d:ea:34:8b:b6:56:a7:32:
b2:5e:83:54:bc:57:44:fc:ea:46:15:bd:01:82:06:
05:85:8e:6b:59:4e:ac:95:77:ae:d8:c0:16:a4:5b:
50:e3:a2:ad:f4:1d:f4:bf:e3:01:6a:81:fb:b3:6a:
ac:bd:74:8d:8a:7c:de:fc:80:7d:7a:79:68:f6:4f:
60:c8:91:1f:58:b3:03:4c:4a:8d:14:83:c6:02:3b:
c8:d1:30:43:f3:df:17:a8:f7:e6:f8:3b:93:c9:14:
dd:c1:1c:73:33:8b:a0:d8:bb:88:85:1c:64:6f:73:
17:9e:30:a8:19:80:2f:de:a7:61:1a:ea:13:ca:f5:
6a:bb:f0:d3:4b:28:15:79:c6:94:c7:3c:64:32:76:
19:91:2c:d1:dd:d5:2c:e4:39:8c:a7:fd:71:f9:59:
b5:ef:e1:ae:76:10:25:d6:d0:ac:61:86:58:5b:5b:
74:a5:c5:e9:c9:0a:62:22:51:b6:c6:82:72:c1:47:
00:a0:13:0b:3f:96:cb:97:f3:d2:b8:1e:77:4b:b1:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:CD:8B:61:B6:26:BD:2A:BD:6D:AF:A1:0C:B4:31:74:F5:14:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ebad682-6b40-3cc5-8884-c27f88f769f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:90:be:71:6e:a9:36:3d:62:49:ab:b1:72:11:90:89:47:a3:
46:e2:10:f9:91:17:37:5f:47:1b:b9:0a:2f:1e:e3:8a:13:a2:
65:00:96:6e:fc:c5:e7:98:83:ef:e1:00:a2:77:c5:fb:65:21:
0d:ae:94:3e:14:3d:10:2e:d7:aa:d9:50:3f:26:c7:37:45:21:
cc:58:39:9f:60:cb:f7:61:8f:8a:29:26:a1:1b:be:77:d5:67:
9d:bf:c3:f7:ed:aa:04:f0:fe:bd:8f:41:0c:5b:72:cb:df:cf:
5c:20:b3:91:c7:58:94:6f:ec:81:f4:ca:a3:db:a1:0d:28:30:
fd:a5:3b:c6:97:07:9e:38:2f:ec:b0:df:cd:83:78:42:23:73:
cc:7f:47:97:91:41:9c:a7:65:a6:a7:98:a9:a1:5e:f0:9c:d8:
71:f9:c1:24:73:d1:7c:07:66:8b:ac:53:45:e8:08:16:76:12:
04:f4:eb:02:0a:e4:b4:cc:49:98:54:6a:53:9c:b3:0a:8c:93:
75:ce:c9:c8:60:28:2b:47:1d:87:04:46:b7:a2:9d:8a:e3:70:
fe:5f:c0:1a:53:26:5c:6c:f2:c4:bb:84:59:79:fb:f4:35:72:
41:38:d3:97:d6:b4:cc:8b:fa:f9:66:20:67:f9:43:8b:3f:05:
5d:f5:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org