Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8635bebc-0873-3c60-b8ac-e1338d653182.roa
File: 8635bebc-0873-3c60-b8ac-e1338d653182.roa (raw, json)
Hash identifier: OhvVAmlIvqaz+AMK7kDMYZg1A8xpQW9eBfGrSWSp0+U=
Subject key identifier: F7:DB:2D:96:2B:5C:7B:10:EF:EC:B2:05:68:A2:5F:8A:88:69:D1:16
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE44290F90F7AF16AACD880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8635bebc-0873-3c60-b8ac-e1338d653182.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 70.28.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:42:90:f9:0f:7a:f1:6a:ac:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=3d90b96c-d58d-4b0a-a2f4-1374cbd070a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:b7:c3:a0:83:82:39:a9:e2:ac:68:f0:20:
8b:da:d2:58:88:5b:80:f4:6d:7a:4e:d5:24:5b:58:
fc:ff:b6:80:3a:3d:d8:0a:45:8f:b8:4f:ff:d8:dd:
c5:2a:a3:4c:1c:c1:13:d9:d1:49:fc:e0:41:4a:fe:
1d:4e:c3:68:ea:5c:a6:25:af:10:e9:13:f9:b2:6f:
b1:8a:8d:ca:70:9d:c1:08:e3:96:73:ca:d0:7f:b5:
c5:2e:85:1c:f2:30:c3:8c:db:d1:40:1b:12:35:cf:
cd:c9:b6:9e:63:55:74:30:53:2f:46:c3:48:79:a5:
cd:74:13:ee:cb:04:96:9f:72:8f:90:0b:65:30:30:
5e:a5:56:5f:3d:21:60:36:db:2d:d4:7c:63:63:a9:
25:bb:10:4d:3c:1d:4b:a9:03:e0:5f:33:0c:b7:c8:
cb:62:08:29:e8:cd:19:28:17:46:76:cc:8a:fd:bd:
27:cb:25:66:f2:a5:52:9b:be:84:55:f4:f2:41:e0:
8a:3e:83:ef:4d:bc:b7:b9:a6:98:5d:b0:35:c9:4b:
00:24:8d:2a:d4:82:53:ad:f5:e1:47:dd:2f:79:20:
81:f0:95:38:87:0a:4d:6f:da:99:73:44:ec:34:67:
87:b8:b3:6f:b6:af:32:92:97:9f:b7:c5:92:8d:18:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:2D:96:2B:5C:7B:10:EF:EC:B2:05:68:A2:5F:8A:88:69:D1:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8635bebc-0873-3c60-b8ac-e1338d653182.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ae:9d:18:2b:8a:68:85:20:ce:06:3b:51:cf:29:55:cb:39:
79:b4:ae:c0:35:78:71:a2:4a:cd:97:98:b4:1d:2a:bd:e7:d5:
88:e6:43:8d:c6:65:43:41:c9:b5:94:6d:3d:03:e0:b4:bc:05:
ce:c6:c9:6d:98:77:53:f8:93:04:f9:0d:8b:d5:20:78:0c:6c:
db:26:56:15:49:5a:b1:8b:41:96:96:81:d6:eb:32:98:0f:20:
b3:c8:9c:44:66:8e:29:fe:62:ed:0d:db:61:03:b1:c4:b9:ac:
bf:92:41:c9:ee:3c:5e:88:a5:8f:94:f5:f0:1d:88:7a:f0:ea:
e5:4a:5a:e6:08:54:b9:9a:bf:c3:ae:2b:ff:05:e0:e7:c3:05:
ec:16:0f:ea:2f:78:20:7f:58:d5:4d:21:8a:3a:ed:5a:1f:4f:
de:4c:36:ba:52:11:eb:10:d7:58:1b:d5:36:8c:b0:85:73:e6:
d6:59:36:64:a6:e6:7a:d9:c5:04:62:cc:df:9a:f0:0e:23:b7:
d9:a8:e2:2e:c9:80:ad:0b:ad:fd:80:a1:f0:d3:d6:a9:07:e8:
8b:2d:a5:e9:d7:4b:a2:b0:41:8d:d6:dd:d2:15:81:26:48:be:
e1:d8:9c:90:b9:e5:a6:70:31:f9:66:27:94:f9:04:a4:18:dd:
84:67:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org