Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c42f2109-0437-3b41-a331-5f2c7deb2f09.roa
File: c42f2109-0437-3b41-a331-5f2c7deb2f09.roa (raw, json)
Hash identifier: OOqSvgCR3Wckh7M9QtyrDv3czSAj8ttpR6K0Zp0Rm/8=
Subject key identifier: 23:6B:7F:BF:C3:82:8B:E8:2C:A5:2E:5B:46:F1:1C:BB:A0:24:8F:3F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314A3536EF164184D9AA140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c42f2109-0437-3b41-a331-5f2c7deb2f09.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 184.151.156.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:a3:53:6e:f1:64:18:4d:9a:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=9d496f52-7a94-48f9-8a67-e20f5ef6afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:13:d2:82:d5:ec:1f:c2:de:76:dc:36:ca:
82:e8:60:6d:81:de:46:f0:43:5d:70:4c:ab:8e:ea:
86:02:3c:44:f8:34:c4:ed:04:1b:b2:85:c7:64:b5:
60:79:ed:b7:11:8d:ca:ed:17:ff:dd:70:56:bc:db:
f3:dd:0a:83:dc:cb:57:73:8e:a4:c9:de:cc:b4:db:
5e:df:35:46:9f:2d:0d:95:89:d8:a7:2c:21:dd:ab:
1b:2b:d7:7f:bb:18:10:d1:85:ba:3b:d4:2f:eb:15:
3a:84:39:65:2f:fe:ae:cf:bd:42:ad:88:89:3a:3f:
d6:29:39:fb:65:08:52:17:6a:0e:e0:94:9f:d5:0e:
f9:fe:72:58:3a:d5:6b:ff:ec:0f:ea:f8:de:ad:5d:
24:85:d8:f3:03:55:ed:3a:c3:4e:22:fb:27:82:85:
10:21:cc:c4:0c:59:be:f4:e9:aa:37:31:73:51:54:
d0:77:e8:b3:66:30:87:e2:11:64:a5:a8:e0:52:df:
d0:18:82:0f:98:39:4e:d5:69:d3:70:90:8d:4d:52:
58:9c:f6:fa:d6:10:5e:b7:02:e0:6d:39:29:9b:e0:
49:ec:16:1a:d5:47:18:c8:8d:68:e3:bd:6d:78:c4:
1d:a7:50:29:f9:cb:ed:4d:a3:61:50:aa:11:e4:96:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:7F:BF:C3:82:8B:E8:2C:A5:2E:5B:46:F1:1C:BB:A0:24:8F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c42f2109-0437-3b41-a331-5f2c7deb2f09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:7a:0f:a6:d6:9a:08:ba:c6:2f:e3:51:71:3d:b2:07:a4:5c:
20:7f:b6:10:74:9b:96:8f:ca:28:36:05:66:98:19:bb:4d:ec:
0a:85:a6:4f:fb:5a:6d:2b:7c:20:54:e7:40:70:11:5a:e6:5d:
fd:1a:ef:a0:f0:97:aa:25:9f:38:da:63:0d:25:d4:2c:4b:a2:
5c:49:99:bf:49:67:0b:6e:a5:29:17:95:95:d3:0a:99:0c:a8:
0e:27:d3:ce:c6:f1:75:3f:12:09:cd:1c:1a:a2:d3:23:e0:ac:
98:d9:44:3a:22:b2:86:ae:42:1f:e0:2c:17:b1:73:bb:6d:a8:
40:8e:00:b3:6d:9c:35:b7:51:9e:81:ec:9f:6a:83:6a:c6:a1:
54:56:e3:ea:aa:b9:90:94:ed:4a:54:1a:df:d0:98:e3:13:9f:
7a:10:20:f4:6a:52:27:b9:9f:72:67:94:d7:d0:47:cc:b0:e1:
de:7d:2c:bb:a6:ff:f2:79:f0:8a:c7:7c:ce:24:79:3d:33:9f:
db:86:53:01:57:e4:06:f5:3d:53:92:48:43:ba:d0:c6:05:c8:
a3:2a:4c:8e:fe:7d:e5:0a:5d:02:70:5a:9d:d3:17:66:04:e8:
1b:fc:19:2b:55:e6:3c:db:0b:98:c1:4f:76:42:82:3b:0c:51:
51:1f:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org