Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbe3e29f-298f-35e2-83f6-5806691a419a.roa
File: cbe3e29f-298f-35e2-83f6-5806691a419a.roa (raw, json)
Hash identifier: 3rFjgpAtagTZb4EoKiR3hCE3Q5BDzGecor7Akz+oR1s=
Subject key identifier: FE:83:0E:17:C7:E7:48:1B:18:59:43:B3:D1:30:47:56:18:79:44:FE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0DCE59FA437BE4B83D980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbe3e29f-298f-35e2-83f6-5806691a419a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 207.236.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:dc:e5:9f:a4:37:be:4b:83:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=b1e01e8a-312a-4d75-9d77-0e94d33397ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:05:75:d3:7b:5e:0a:a0:a8:93:60:58:1e:
b4:eb:47:48:4e:3a:08:72:bf:bc:7c:98:4c:05:d7:
58:72:b4:5f:8c:94:76:fe:84:77:1c:9b:9b:20:9c:
5c:17:8a:7d:c6:55:4d:e3:b9:6d:54:8a:75:92:64:
ef:75:6f:87:59:f0:a5:73:84:55:0c:da:8b:98:53:
5f:b7:0b:8b:c1:b0:80:69:0e:8a:09:15:0e:78:43:
35:ed:2d:bc:6e:4b:f0:25:34:9d:7f:e5:59:12:0a:
45:ca:be:29:f0:7e:18:56:f4:35:31:a6:74:6a:48:
3c:ba:df:01:75:db:1d:0d:5b:43:37:6d:d1:cb:3f:
5f:82:4b:11:07:7f:a6:04:c8:91:08:84:9f:d2:f5:
b5:a3:be:3b:61:50:fe:ba:73:f5:59:c0:d3:57:48:
28:71:3d:d0:70:0c:97:07:52:f7:47:1c:82:b2:de:
b7:f8:0c:64:81:c4:0d:f1:7a:0e:24:1f:5a:a7:e3:
c9:40:dd:4d:99:8c:c5:c3:cc:64:41:69:76:b1:58:
9c:e6:30:c3:37:9b:fa:64:53:01:7f:ac:f7:3c:6a:
27:45:65:a8:28:7d:b9:a7:90:93:19:18:94:e3:b0:
7a:35:1e:2a:bb:75:37:14:a3:8e:f4:16:8f:30:92:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:0E:17:C7:E7:48:1B:18:59:43:B3:D1:30:47:56:18:79:44:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbe3e29f-298f-35e2-83f6-5806691a419a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:35:dc:bb:81:d1:55:fb:a0:34:e8:6a:39:0d:ba:87:64:4d:
1b:72:ab:29:19:2a:5f:20:31:85:a7:f2:f5:17:44:7d:fc:e9:
f1:35:8e:48:57:3b:0b:f0:ed:9e:e3:0a:6a:99:9f:4c:56:a6:
1e:1e:74:0b:f9:80:0a:ba:8b:eb:f2:e7:e0:dd:1f:c8:82:c0:
eb:c6:d0:38:a5:63:f6:96:46:f2:8d:e1:1a:2c:8c:7d:27:b5:
b0:31:23:23:30:41:a2:6c:df:d5:3a:a3:4a:14:fe:43:72:92:
9d:f7:df:a6:ba:63:95:c0:e7:a4:d3:eb:2b:dd:13:0a:ac:da:
46:37:11:78:10:d3:36:83:d6:bd:15:13:6f:41:da:5d:e9:ce:
a2:ea:a5:dc:47:ed:d9:90:b5:d8:79:1c:be:07:16:58:bb:9f:
4e:bf:89:3d:b7:f2:6d:7b:81:6a:66:ca:fa:39:51:47:e9:d0:
4a:ff:04:45:e8:04:93:f7:f5:a3:dc:62:c2:1a:55:ed:98:51:
8e:39:f8:2d:c2:52:7d:71:97:29:9b:12:67:cf:19:57:40:5c:
a4:66:9b:11:c7:ef:e6:ed:b6:72:92:68:67:86:29:44:a2:86:
30:19:43:dd:ab:b3:af:ce:be:77:b9:5e:2e:9f:8d:84:eb:5f:
b9:fe:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org