Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8ba76cf7-829c-3eea-9e09-9aa9c09e468a.roa
File: 8ba76cf7-829c-3eea-9e09-9aa9c09e468a.roa (raw, json)
Hash identifier: BWzuqgwIGd8M5S4NBtO1OxUmgCOSDNRZVRTSiDP03jA=
Subject key identifier: 85:96:D1:39:FA:D2:FA:DE:F7:DC:14:A4:65:D9:5C:ED:8D:89:92:B0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB06ACCA7855EBBCCCA75C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8ba76cf7-829c-3eea-9e09-9aa9c09e468a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.172.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:6a:cc:a7:85:5e:bb:cc:ca:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=5fe50d2e-91f3-4d71-81ec-31a3c56910df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:41:52:8f:91:e7:3d:bd:81:94:0d:e9:70:
aa:4a:05:5b:02:35:b9:a6:04:26:c0:0b:78:a2:61:
c7:15:50:8e:d3:22:f1:2a:23:be:49:2f:29:e7:1c:
d6:2a:d1:e9:01:39:17:4a:49:ef:6f:c1:cf:5a:fc:
ae:47:0f:9f:58:42:bc:24:ec:44:71:87:51:44:aa:
c6:a5:60:41:49:37:00:e9:05:f3:bf:09:cf:d2:c0:
96:b0:7f:e1:06:76:b1:1c:12:49:55:24:21:c1:9c:
78:41:84:e7:c5:ea:c9:af:bf:d7:68:40:4c:c8:de:
dc:51:b1:26:70:b9:e7:2d:ce:fb:3c:75:51:97:a6:
26:e3:60:4d:04:bf:d8:d1:66:1c:c7:09:05:e7:13:
c9:2a:4a:3e:e1:52:30:6b:28:57:ac:e3:ee:3b:af:
d7:36:4e:4a:1c:5f:26:8b:53:d7:75:de:37:5c:f0:
6d:88:79:8e:f7:a9:d5:92:8f:7a:31:a6:8a:cc:e4:
c5:09:f0:ee:8d:de:dd:aa:98:ec:04:56:88:6a:23:
66:93:fb:8d:77:a3:c8:0e:7e:b5:e7:73:ee:e2:4e:
98:79:c2:79:a2:91:56:e5:0d:d8:8b:9b:04:bd:ed:
0a:ce:75:e1:05:3e:06:94:47:cd:82:d5:08:2e:5f:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:D1:39:FA:D2:FA:DE:F7:DC:14:A4:65:D9:5C:ED:8D:89:92:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8ba76cf7-829c-3eea-9e09-9aa9c09e468a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:39:7c:2f:0f:33:33:e2:f1:74:59:07:9e:05:ac:e2:8c:d6:
4b:da:19:9a:01:fe:a4:54:9c:bd:b6:32:d5:03:1c:ed:93:46:
77:73:da:b2:25:02:50:ff:59:3f:d0:d9:5a:01:d7:6e:ae:e8:
12:7f:0c:80:36:cb:7e:30:18:cf:46:25:62:d9:25:b7:7b:77:
46:3a:c3:9e:d8:1e:4b:58:16:f9:31:b2:2a:c7:31:5e:c7:eb:
20:43:98:d3:2a:1f:4e:ee:3a:6a:82:f4:27:5b:f6:47:ef:f5:
b0:c5:b4:d6:e2:68:1f:76:0c:f0:12:fc:72:83:31:99:2a:3d:
e8:53:9e:2a:c2:68:81:31:1d:ac:57:ff:ca:c9:71:35:3c:e2:
a8:bd:22:08:67:ce:36:78:b7:c1:70:2d:8a:7f:eb:21:6a:94:
0d:36:71:f9:16:f3:c3:49:7a:4e:58:17:4d:09:07:4d:57:9a:
2c:fe:b7:84:23:34:b8:44:72:9b:16:9b:bc:63:bf:e2:fa:78:
ef:7e:b6:ca:c2:df:d2:24:b5:c6:a7:06:fe:64:85:c7:93:71:
98:a0:da:57:6b:ac:1f:48:ca:98:49:02:0d:47:68:6f:10:55:
99:f8:30:35:8e:99:95:07:1f:05:cc:9d:c3:66:16:35:00:01:
5f:77:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org