Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/870ef008-7763-3c76-87dd-73088b3fe1f4.roa
File: 870ef008-7763-3c76-87dd-73088b3fe1f4.roa (raw, json)
Hash identifier: /OW3BfeR4q/T2sZgPgeiv44iBJggTyj2YKcDhJdviBw=
Subject key identifier: 66:B8:E3:45:39:D1:64:6A:48:7E:8C:CE:63:F8:BB:D7:22:E0:D6:90
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493150B965490B04034239100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/870ef008-7763-3c76-87dd-73088b3fe1f4.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 2568
IP address blocks: 204.101.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:0b:96:54:90:b0:40:34:23:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=3e26969e-613c-4b70-930e-648751df1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:78:de:79:21:53:00:be:9c:7f:2e:89:95:
87:22:50:2d:09:29:2a:b7:13:eb:d5:64:d6:a0:b8:
c8:ac:3f:6e:82:fb:3c:51:7d:61:d3:b3:b9:a9:79:
40:60:07:44:f0:12:e6:e4:99:10:ce:b3:7e:92:e1:
e6:d0:c0:79:bd:b7:ff:41:9f:3a:9f:08:ca:fa:aa:
1e:c7:46:87:d4:7e:37:78:25:f1:66:ab:0c:9c:3c:
e9:c0:da:5d:9e:46:ec:6b:bb:e3:7c:81:81:54:69:
5e:2b:d9:86:d3:3e:3b:13:76:a2:11:28:ff:29:15:
35:73:c1:51:27:cc:a5:c4:1d:7c:1b:f3:bf:b5:dc:
2a:cb:24:0e:e8:10:92:10:7f:46:6c:23:9b:8a:cb:
82:93:ec:d9:1c:00:20:91:71:97:ad:2a:46:18:b0:
48:a8:b0:b3:65:11:8d:56:3a:c4:d1:72:33:18:33:
e6:79:09:2d:9e:06:83:41:00:d4:ff:63:8a:80:5a:
1b:bc:dc:bb:26:da:e0:80:6a:e6:c5:ba:50:35:6d:
43:58:d6:e3:88:21:f0:bb:89:bc:61:11:e0:1c:2a:
7a:61:9e:d9:cd:3d:bb:f4:67:25:15:c3:e6:19:bc:
34:47:62:7d:f8:b3:cf:23:73:55:3d:ac:39:32:83:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:E3:45:39:D1:64:6A:48:7E:8C:CE:63:F8:BB:D7:22:E0:D6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/870ef008-7763-3c76-87dd-73088b3fe1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:6f:49:f9:a0:39:4b:59:c8:6c:27:fc:d5:c8:dc:92:05:37:
5e:6f:83:ad:55:61:e6:b1:99:b7:1b:ac:c0:7c:87:a3:d0:99:
8f:37:b3:30:d6:77:1a:ed:b3:b5:b9:4a:ae:82:0f:17:ef:7c:
63:5d:08:97:c6:4b:51:d7:14:0c:83:fd:3d:5c:c9:c9:bd:4d:
e4:4c:f4:8f:b1:b4:a9:92:db:14:e5:f0:e9:d5:be:15:07:2e:
7b:a4:d8:7e:21:49:f5:c2:11:7a:bc:67:fb:2c:4f:d3:f4:69:
ec:26:b2:a9:39:2c:b4:9d:0d:a4:97:31:ae:ce:3d:13:25:1d:
24:cb:46:83:d0:2d:f3:11:bc:c3:5d:65:3f:2c:d4:67:26:a6:
28:5b:30:1d:07:ad:be:87:71:d7:13:fe:96:61:93:d9:75:93:
0c:00:15:80:7c:d7:1e:74:9d:63:a1:c7:28:0a:f3:db:8d:ad:
c8:f1:35:ef:f0:7f:93:b6:89:19:a6:fd:4c:fc:18:e9:2d:dc:
c0:14:48:9c:f5:a7:62:0d:46:fe:a5:46:ce:b3:c1:86:8a:80:
e3:f3:ba:4d:e5:a1:8f:60:c9:c5:1b:4d:1f:f3:54:9f:1f:86:
00:4c:07:25:e1:d3:c0:48:11:4c:82:a6:ec:91:88:97:38:10:
18:c5:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org