Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/943aac91-b245-3cf9-8a7c-a2b71024e8dc.roa
File: 943aac91-b245-3cf9-8a7c-a2b71024e8dc.roa (raw, json)
Hash identifier: /DHEYeGUmglcpimiRytfIApL1X7Z6+3P9PLfzCTRhi4=
Subject key identifier: AF:11:41:D3:81:1B:AA:BD:6C:0E:59:CA:B3:FD:E3:9E:5A:B2:87:B4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4892E62CA72AB94319F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/943aac91-b245-3cf9-8a7c-a2b71024e8dc.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 76.70.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:89:2e:62:ca:72:ab:94:31:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=bb930d15-ec69-4bff-adf0-116b7908bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:ee:95:bc:4e:18:24:1f:3d:68:95:cb:8b:
f1:fb:24:a5:f2:e0:42:17:07:bb:5b:5f:8c:d7:00:
9c:65:ff:40:d4:db:ee:d5:84:16:4f:51:f9:c4:5e:
de:42:4a:4f:4e:87:14:b9:f8:64:e2:d6:ab:b3:b8:
21:65:74:54:46:fc:69:35:6a:7a:be:c7:6f:8f:e0:
21:89:6a:08:5b:1b:d1:73:38:f2:5c:11:3d:15:9e:
7a:18:e3:1b:b0:b3:90:c8:2e:e9:91:2b:92:08:61:
34:3a:2e:4e:84:ee:c8:c7:f3:52:e2:bb:7a:0f:71:
f3:0b:4f:c3:a0:b5:ba:f0:d1:2d:cb:6e:21:5a:49:
f5:14:d1:f6:0f:0e:59:bd:33:1a:a4:5c:5a:61:c5:
80:fa:89:94:67:1c:05:39:b2:06:d7:61:a7:df:d4:
47:dc:c1:00:32:5e:0d:f8:af:16:d8:5f:33:67:ff:
b9:1b:4c:5a:b4:24:9b:30:ee:bd:a1:f1:66:2c:2e:
ad:70:9f:e4:bd:97:93:4a:22:e7:1b:ce:85:47:be:
29:ff:06:d6:f1:44:5b:d9:ad:ad:8d:5f:70:a4:a0:
9f:6a:14:b8:99:a6:76:f7:9c:f2:a7:73:a6:b9:64:
b0:7b:65:7b:b2:32:39:8f:fd:bd:7f:ed:97:43:6f:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:41:D3:81:1B:AA:BD:6C:0E:59:CA:B3:FD:E3:9E:5A:B2:87:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/943aac91-b245-3cf9-8a7c-a2b71024e8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:47:7f:c0:3e:c5:1b:31:d5:1a:26:f1:d7:0e:3c:da:fa:54:
35:a2:b6:f9:78:1f:b9:e8:69:d4:0b:a0:b6:59:43:be:b3:4c:
3b:d7:e1:7c:a7:d8:79:f3:92:52:0b:0b:68:a4:aa:01:d9:3c:
b8:27:34:c7:50:d6:02:45:89:2b:68:31:dd:c5:ee:2b:b0:ff:
fd:af:c7:3e:cf:ce:b1:de:6a:62:ef:2a:c5:96:7f:9a:a7:fa:
89:d3:b9:77:e5:a0:36:38:bc:3c:ae:f1:05:5c:ad:4a:5f:f8:
0b:93:43:a6:37:62:73:0d:d1:c3:c9:06:6f:96:fa:42:f1:d3:
70:3a:09:ea:87:dd:3b:a3:75:3a:4a:e4:70:59:ae:6b:1d:9e:
94:e6:77:90:da:1a:96:a4:cc:15:69:83:e0:c0:e1:17:01:44:
29:cb:44:7f:e3:50:a7:d8:69:ca:9a:55:ea:c2:21:a5:67:34:
cc:a1:75:12:24:88:f0:53:e6:89:17:30:58:a0:37:36:0a:2d:
1f:61:a5:cd:28:b5:1d:27:4e:04:fa:28:0a:1c:bf:7f:c4:b4:
a3:2b:9c:b6:2d:c1:24:f0:39:2a:af:74:ee:f3:e2:62:4c:bd:
15:62:5d:9b:2a:bf:d1:cb:2f:49:b7:71:1a:89:3b:86:0c:24:
21:93:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org