Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91a880cd-2295-395f-bdc4-f99d2dd095e8.roa
File: 91a880cd-2295-395f-bdc4-f99d2dd095e8.roa (raw, json)
Hash identifier: pFK8kGLK28iXLut6JmcEC+m83hUQQl3DAXSgy5Hy0PE=
Subject key identifier: 5B:13:65:C3:D8:BC:77:F3:B7:BE:30:2D:99:76:A4:6F:79:46:A6:74
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFFCD218AB36B13F5377C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91a880cd-2295-395f-bdc4-f99d2dd095e8.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:fc:d2:18:ab:36:b1:3f:53:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=d8dd1223-f321-44a6-a7b0-1d87323bfebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:57:a5:b5:e8:ad:0b:d7:26:68:93:7c:cd:
16:cd:4f:a3:af:b8:cf:54:d6:ea:e2:18:43:dc:eb:
28:9b:36:40:a5:17:e3:90:87:a1:d0:ef:88:22:76:
2f:9b:f0:7b:58:f9:9f:48:bc:8c:9c:20:6a:ed:9a:
3c:9e:79:65:10:66:73:d7:ca:5a:db:77:f1:aa:a9:
35:e2:ea:75:b2:fc:29:64:bb:eb:4d:d0:8b:42:00:
fe:c6:d2:78:59:9d:40:92:94:4f:3a:7f:3b:a3:52:
ab:3c:1c:e3:e8:77:f1:b9:04:90:52:c8:92:2e:ec:
a3:a9:8e:22:38:33:81:51:96:33:db:91:52:c9:7f:
9d:eb:3c:d3:fa:bb:d9:ff:1a:89:db:cb:72:d6:31:
4f:89:1f:a7:f9:ab:23:83:d9:88:e9:81:ab:95:84:
21:49:99:4e:bd:6f:5a:16:9f:16:d1:0d:c0:e1:5c:
5f:2a:3c:9e:fc:f8:e1:fb:0d:eb:a9:aa:d5:a0:76:
4d:ec:f8:fa:cc:9c:44:43:91:00:2c:d3:e9:d3:41:
9a:ab:22:04:66:45:22:b3:ed:de:9d:19:46:c9:c8:
61:af:33:e5:8d:d9:43:93:5c:7b:a9:c6:79:28:8b:
24:c9:ec:50:d7:b1:e8:f2:1c:44:e7:45:fc:bb:d2:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:13:65:C3:D8:BC:77:F3:B7:BE:30:2D:99:76:A4:6F:79:46:A6:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91a880cd-2295-395f-bdc4-f99d2dd095e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:fb:3f:83:35:13:6f:f0:5f:8f:53:62:6d:a7:48:e4:c9:c4:
ae:33:b5:06:f4:57:a2:8d:07:fa:85:4b:fc:19:60:7f:cb:d3:
fa:fd:9e:89:43:36:fd:d2:ff:ad:2c:38:30:82:d3:20:ea:88:
a6:c1:a3:4d:ce:a6:8f:41:3a:66:62:e8:b0:b3:b4:58:e0:62:
5f:f1:0d:95:e5:6e:fd:c0:12:7b:22:12:38:57:7e:71:85:a3:
c2:bc:fd:6f:e8:32:22:4e:5b:17:21:48:8a:3d:74:18:c2:13:
1c:c1:8c:db:23:0e:6f:8b:00:a9:ff:ca:0a:3d:64:69:6f:73:
01:4c:23:2f:d5:df:8e:23:dd:8c:56:30:6c:19:c1:a0:2d:e4:
cf:4b:9a:6c:f2:d5:2e:e6:b1:24:b4:2f:9d:3e:ab:d7:55:e8:
d8:1e:e9:8d:5e:d8:90:e5:d1:53:b3:a1:ec:0f:9e:68:69:7d:
b0:fe:4c:e2:f0:f4:74:64:8d:10:c2:9f:ef:9f:d4:65:0a:2d:
72:74:08:9a:6e:1e:e1:06:39:72:c8:39:39:53:0a:ae:70:91:
3f:4e:cb:ad:b5:9e:63:10:db:0c:c6:da:0a:4a:f5:25:f4:15:
a6:95:4d:07:70:80:5e:11:34:7c:75:65:d4:41:73:5b:84:37:
26:08:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org