Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbf5cf74-8aeb-374b-a0f6-9fde351ead8d.roa
File: cbf5cf74-8aeb-374b-a0f6-9fde351ead8d.roa (raw, json)
Hash identifier: PtSzSs4+unM5ETXLxFhDG7e8bwgwwOlOLnQw+nYCLpA=
Subject key identifier: D3:26:B0:84:3C:AA:13:ED:5E:7E:D1:E7:86:99:BF:26:4D:73:3B:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFF2FF47D266C1D2E1F040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbf5cf74-8aeb-374b-a0f6-9fde351ead8d.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 204.101.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:f2:ff:47:d2:66:c1:d2:e1:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=2e64f480-f0af-4628-b6c4-4171297f2ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:ad:27:fd:d9:ad:80:52:31:04:69:89:aa:
48:fa:43:3e:34:bc:99:3f:18:1c:5c:5c:3c:16:c8:
dc:02:8d:90:f1:34:29:bd:9b:3f:06:b4:6c:c7:4c:
84:f1:b7:16:38:16:8b:13:f7:0f:ee:24:f7:af:ce:
e5:c1:41:d9:30:19:52:ce:b6:25:05:c3:cf:a4:b0:
7a:6d:2f:e3:1b:23:05:62:95:df:f3:0b:87:ae:15:
18:43:29:b1:ac:8a:a8:0f:3d:f8:67:07:92:26:f0:
79:37:84:1e:b8:75:9e:c3:6c:ed:e3:39:2b:32:e6:
d2:c0:40:fd:6c:97:60:c0:02:1d:fb:8b:1a:ed:8a:
21:a2:9f:cc:3e:63:51:d7:8e:c1:54:6c:86:ea:6c:
e8:a6:08:15:42:44:87:e2:58:86:a4:68:d6:f1:f6:
cf:83:bc:f2:96:cf:67:78:48:c1:82:a0:2a:ff:64:
35:0f:fb:4d:b8:d1:26:2f:65:47:e6:c2:b2:79:fe:
24:e1:29:2b:91:3d:d8:0d:06:44:0b:4c:0d:be:67:
82:71:30:f9:ed:9f:01:86:bf:a5:f4:14:16:f6:8f:
50:06:49:77:58:78:df:21:53:4f:e0:a6:05:69:54:
e4:0c:80:7d:c0:5a:01:ca:8e:b7:89:50:87:6a:56:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:B0:84:3C:AA:13:ED:5E:7E:D1:E7:86:99:BF:26:4D:73:3B:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbf5cf74-8aeb-374b-a0f6-9fde351ead8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ae:ff:78:68:f8:01:7a:76:fe:75:68:2e:0a:70:35:7a:c0:
a6:e8:09:f5:df:f5:44:df:44:d9:98:87:09:48:fa:fc:31:ef:
46:09:dc:20:18:ab:db:b0:0a:cb:de:79:31:cd:2b:15:56:e9:
a7:d6:d3:a0:8f:13:56:9c:c9:10:25:6a:77:88:34:8e:92:c9:
e1:c2:39:dc:b0:c4:4d:b6:db:d3:b6:92:16:a0:dc:df:dd:7e:
da:a5:eb:44:05:90:c4:f3:b4:28:d1:8d:eb:0a:32:8c:c0:7a:
16:bc:13:ba:6c:19:54:75:41:30:c4:25:a3:5f:de:20:e1:b7:
3f:cd:7d:09:35:b2:fc:61:56:25:99:f6:aa:20:78:80:44:72:
da:ad:d2:be:4b:d7:09:7a:5f:b6:93:b0:e8:2e:75:29:38:a5:
6a:2d:cc:f0:c0:55:22:9f:10:b3:17:b1:b9:20:a5:64:8f:fd:
44:80:7e:6f:ab:c8:de:79:91:a8:d0:14:0c:56:9b:00:8b:06:
7f:c3:fe:5e:77:db:e5:cc:3d:e0:29:79:bc:06:b9:7c:c4:96:
7f:f7:4f:99:de:77:d7:17:c9:61:35:c3:b2:5c:c0:22:c2:cc:
7a:3a:93:da:5f:9e:4e:1d:3c:ea:9a:38:81:a9:10:22:92:6b:
ed:e7:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org