Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d51f4927-a9a5-3277-bf6a-63977f1843a1.roa
File: d51f4927-a9a5-3277-bf6a-63977f1843a1.roa (raw, json)
Hash identifier: OP4boUum8EKm/6FUdoXT+AJ7Dj+VcchvM1M1E9CDc7Q=
Subject key identifier: D5:0F:87:F7:90:80:79:5C:9A:4F:35:89:7F:1C:49:7A:41:C9:9D:23
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB026BBE6F35C946C627FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d51f4927-a9a5-3277-bf6a-63977f1843a1.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.47.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:26:bb:e6:f3:5c:94:6c:62:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=709160f3-01ec-412a-8940-56aa4af93eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:16:33:dc:cc:cd:fd:49:26:a0:5f:ce:04:
7a:f7:56:85:b6:88:e7:5b:df:66:80:de:fa:e8:54:
27:76:5d:08:b5:47:63:d7:6b:29:36:7f:3d:7d:ae:
64:56:02:d6:68:da:b3:eb:64:b2:f0:53:78:03:34:
63:1d:37:7e:75:59:b7:0c:90:d9:07:19:bd:75:ba:
54:2d:04:39:15:a2:e8:8b:ba:53:86:d8:85:d5:ba:
81:86:84:45:a5:9f:df:69:5f:41:be:90:5c:52:30:
27:5b:b9:12:e2:bf:5f:83:66:1a:7c:87:50:21:47:
24:8c:aa:b5:33:f9:b2:52:a7:6c:a9:22:3a:75:fb:
b1:3a:d9:82:09:01:ce:76:bd:61:78:69:26:f1:ea:
5d:ae:41:fa:38:1e:35:6f:69:9a:ee:b4:a0:5f:34:
4c:30:6b:f1:7e:e1:9f:07:ed:4f:5e:cd:b2:3e:6e:
8c:a3:94:32:19:d3:af:16:90:a6:0e:7c:f5:a4:e3:
dc:d7:d6:2a:a9:3c:49:6f:34:5f:3c:3d:44:d3:d4:
34:8e:a2:4f:b9:a6:0b:36:e0:84:76:28:c6:9f:4b:
10:88:b8:33:cf:25:69:cb:bc:d1:23:71:c0:55:49:
04:68:3b:e7:e1:31:a3:e6:56:b7:5c:2f:4b:55:f9:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:87:F7:90:80:79:5C:9A:4F:35:89:7F:1C:49:7A:41:C9:9D:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d51f4927-a9a5-3277-bf6a-63977f1843a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c7:5c:ef:0c:d3:82:03:a3:71:2f:30:36:7a:ae:3e:91:b5:
82:a6:94:49:5e:40:8a:86:cc:67:52:15:d1:59:8e:d2:77:b5:
ab:fa:03:21:4f:d9:35:c5:6f:57:d6:ec:80:68:8b:30:f0:23:
61:b6:0f:e3:7e:68:e0:55:37:8d:1c:04:6a:d3:4e:fd:9d:11:
b1:3b:04:63:6e:26:58:d9:b2:a6:19:80:b1:56:01:b4:b7:a4:
4a:1f:93:7c:92:55:35:bf:5f:ee:2a:3d:fa:f2:6e:2c:31:35:
e3:78:6a:81:ec:25:f9:51:e9:57:b4:13:7d:e5:1a:61:c2:1c:
36:00:bb:98:7d:e2:9e:f3:1e:0e:d4:fd:96:4f:b9:f3:3d:fe:
18:c8:e9:e0:e8:08:2e:65:ba:bf:e5:93:5b:6d:10:40:82:48:
92:61:ab:2c:0e:fd:ca:43:ba:32:4f:14:5a:59:b0:4e:ae:34:
69:1a:4a:d0:8a:94:94:22:39:f0:ce:40:f3:d7:18:92:5a:c9:
e0:ea:09:3b:0c:3f:d0:5f:b2:0d:93:d8:98:32:18:e0:e5:b6:
ce:6e:0b:98:16:1b:bb:92:89:9d:6e:ae:13:02:f9:f8:c3:e8:
10:e8:82:23:66:ca:4c:f6:6d:26:c5:4f:b1:89:34:1a:3c:18:
c3:ba:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org