Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd38c866-0ef2-34f2-b280-43c70466e8af.roa
File: bd38c866-0ef2-34f2-b280-43c70466e8af.roa (raw, json)
Hash identifier: 2q5o7n1hrDTMoKD5NNXkU6RubouTKa4ZN3+KEf6OSaA=
Subject key identifier: 4F:18:C3:AC:05:5E:89:35:FA:49:6B:6A:13:41:38:51:11:A9:38:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4204516F9B0D8AF254A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd38c866-0ef2-34f2-b280-43c70466e8af.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 69.158.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:20:45:16:f9:b0:d8:af:25:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=65e27ac2-628d-4996-a6e0-db205ab2f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:4a:0d:29:b4:31:81:d4:30:ec:5e:fe:4b:
ea:a9:26:94:31:d6:c1:30:d5:bb:f7:bf:e3:07:1c:
ad:a6:20:9f:21:d9:d4:9c:6f:3d:56:78:8f:0c:e7:
bd:1c:42:92:82:7d:15:17:72:04:a2:10:16:65:fa:
4e:5d:7b:7f:94:36:e3:7b:91:aa:a5:ed:8d:31:3f:
89:b8:d4:90:22:bf:6a:15:75:54:05:cc:69:8d:35:
f0:df:b3:85:40:43:3d:1c:23:db:5e:f3:88:8a:f5:
ac:0f:26:d8:75:27:5c:6b:1a:f5:40:6e:15:7c:5a:
c4:1b:e8:a2:da:d7:ff:0c:a0:44:a2:ea:aa:44:fe:
c2:d9:0b:05:10:f8:30:da:cc:1c:18:1d:a3:71:59:
33:b8:ba:e4:60:a9:3d:ff:1f:69:f7:ff:94:78:a3:
9a:46:d2:29:ce:0f:23:88:46:69:39:65:84:ce:84:
25:e7:42:8e:e1:dc:29:40:3b:f6:7b:31:82:26:ce:
a3:e4:ac:0e:7e:3b:40:fa:4d:f4:80:e3:3b:48:15:
34:8b:e7:1e:42:84:9d:e9:77:61:14:ea:35:4e:e9:
a0:02:9b:26:b1:71:03:05:4e:f4:9e:a0:92:51:4e:
5a:cb:fa:b0:09:a1:32:a2:49:91:a4:ad:01:99:e9:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:18:C3:AC:05:5E:89:35:FA:49:6B:6A:13:41:38:51:11:A9:38:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd38c866-0ef2-34f2-b280-43c70466e8af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
69.158.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:43:3f:eb:a7:a1:f5:a7:f6:27:26:5b:b5:77:3b:a7:35:74:
38:45:71:64:85:c8:aa:35:c8:97:1b:49:a6:d0:9c:21:f9:25:
ba:94:84:59:71:18:19:ff:84:5d:89:b4:e3:04:12:30:9c:cf:
ff:90:31:44:7c:73:7a:18:7d:59:f7:bc:f1:86:b5:f6:65:31:
d8:0c:bb:c4:f7:dc:f5:16:91:5c:fb:55:7b:c8:5a:e6:63:3a:
4e:9e:4f:6a:60:27:b1:6c:f4:47:c7:46:0c:58:59:18:22:47:
16:d6:a3:49:bf:29:3a:c6:cd:53:b0:96:5e:8e:46:22:bd:8e:
1b:d6:14:e4:81:0c:e2:c2:02:01:74:0d:27:dd:e2:d6:f1:6d:
f6:0c:07:53:04:a0:ab:1b:f6:f5:32:07:55:25:61:db:07:53:
15:4e:78:75:64:f4:08:12:0e:aa:48:7c:bb:e2:97:e2:71:71:
0d:d6:58:ab:30:f5:ed:69:e0:0f:1f:7f:35:0e:f3:77:5e:8b:
da:37:4a:60:95:20:25:d1:a6:dd:c3:66:c1:1e:e9:c9:62:a7:
f4:9c:23:51:2b:6c:e2:df:b3:3a:7a:6d:2d:33:6c:29:cf:de:
da:23:66:c3:c2:39:99:ff:56:29:9a:fe:f7:eb:0f:34:ca:98:
94:bf:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org