Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b86ba72-7f88-3f63-b876-000d8cce4f35.roa
File: 9b86ba72-7f88-3f63-b876-000d8cce4f35.roa (raw, json)
Hash identifier: s+SmpmSVvEAK2HzoQepKYWaIRmmkZNBTqXp2uVLsjQ4=
Subject key identifier: F8:46:2D:6E:CF:40:EC:94:5C:4F:02:31:9B:B3:2D:4E:0D:7F:29:D5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316306AC9DAC65BF84CB900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b86ba72-7f88-3f63-b876-000d8cce4f35.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 11831
IP address blocks: 209.17.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:30:6a:c9:da:c6:5b:f8:4c:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f4207930-045a-4a3f-b41c-2b5e66b48564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:be:42:32:c5:ca:26:f4:fc:de:12:db:c4:
36:4e:31:5e:f2:74:dc:29:d4:c3:be:7d:e2:6d:d8:
56:67:4f:29:42:6c:ad:69:b7:fd:25:85:f6:92:37:
6a:46:36:03:c3:66:dc:92:bc:18:2f:a2:58:2d:3b:
25:4e:71:7c:95:3f:d8:25:72:39:c0:f5:26:59:b0:
bc:0e:5c:f1:bb:7a:ac:19:4d:58:a2:9d:38:fa:51:
06:e3:7f:c6:a9:72:fc:0b:42:58:6a:db:a0:bd:3d:
74:85:47:c9:c1:b3:29:e8:35:0e:79:f5:48:5f:d7:
79:e7:9b:a5:09:a4:91:ae:71:06:05:ff:f1:09:1b:
2f:c3:37:da:0f:9c:32:f6:2d:c5:01:8c:a3:1c:c9:
58:aa:3b:66:ff:1b:a6:01:b4:75:10:f3:03:7d:9f:
2c:3f:59:c6:a3:9b:6d:ba:bf:9e:65:c8:19:66:8d:
5c:d7:d6:7e:78:1b:dc:e0:9b:34:8c:43:27:8d:8d:
b6:61:b6:02:fb:cd:a2:12:a9:e4:33:66:d3:77:f5:
1d:a9:bf:ef:a7:0e:11:fd:9c:ff:91:0a:ed:91:7a:
51:c8:0c:62:77:96:31:e1:9f:0d:a8:e8:4e:1b:02:
31:c7:0f:6f:1b:7b:11:5a:c2:0f:da:16:59:68:a4:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:2D:6E:CF:40:EC:94:5C:4F:02:31:9B:B3:2D:4E:0D:7F:29:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b86ba72-7f88-3f63-b876-000d8cce4f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8d:b6:3f:5b:ae:96:2c:86:14:fc:cc:99:dd:1b:c8:26:a1:
7f:a2:2c:19:14:0e:c8:a6:ba:6d:5c:1f:06:12:7e:89:8b:87:
57:3f:21:66:f7:99:d1:1b:7e:e3:7e:53:1e:e9:1b:99:e2:b9:
ef:b9:58:d2:a0:8b:21:6f:dd:ce:22:70:47:67:8b:4d:72:13:
05:50:d4:d7:11:f8:3c:49:05:dd:67:1b:21:de:b8:c4:98:07:
0e:5f:ab:29:dc:8f:e8:c2:c2:3b:54:e9:11:5d:55:18:15:31:
f1:28:0f:95:b8:e2:42:b1:f0:47:1b:5b:ab:35:d5:7f:60:09:
56:00:d0:f7:fa:e0:bb:9c:cd:50:96:2f:31:99:69:4d:32:e5:
55:1a:e9:69:51:e8:89:0f:8a:30:80:37:b2:fe:3c:b9:88:fe:
d5:12:a8:44:2a:f3:a3:cd:67:da:76:9e:0b:b3:6e:6b:e0:9d:
30:8e:ec:fe:48:66:e8:47:b0:8a:71:2a:a2:44:69:e4:8b:09:
2e:c4:39:3a:da:ab:83:09:5a:d5:5c:04:04:e7:3b:57:a9:64:
f0:e8:dc:8c:e1:c0:55:d4:72:08:28:73:b9:cc:b5:a7:11:17:
d4:45:7b:98:a7:b6:bf:a3:f8:19:db:ce:6e:9d:42:da:6a:20:
aa:75:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org