Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d72f84f2-6166-3a0d-aa1c-85e1616e7ffc.roa
File: d72f84f2-6166-3a0d-aa1c-85e1616e7ffc.roa (raw, json)
Hash identifier: bxq3wQ24hlnVisUCttcVdu2B1r69kIyBaLDZGg0qHHg=
Subject key identifier: 03:E6:56:23:4F:AE:5C:78:19:A3:17:DF:EE:A1:B4:ED:0F:71:5B:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931583E0675A307A4C712380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d72f84f2-6166-3a0d-aa1c-85e1616e7ffc.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.172.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:83:e0:67:5a:30:7a:4c:71:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=2b14b220-20d4-40aa-a79c-d7ff071872d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:66:f6:d7:98:9b:8c:fe:69:7d:88:3e:82:
09:11:c1:90:2a:bc:c3:8d:4c:84:00:14:fa:df:95:
84:8d:b2:9d:29:c8:f7:ae:6a:8f:53:65:d5:a8:45:
97:7a:fd:e1:7f:f3:ac:49:be:4b:c6:19:20:e0:ee:
13:05:f6:64:4e:21:95:de:e9:a9:fb:8a:b8:f7:b6:
3d:bd:52:15:28:1f:36:94:4d:dd:e9:4f:ec:fb:47:
ba:e1:56:7c:49:63:67:29:42:9d:b6:42:92:ed:f4:
39:32:e7:98:ce:25:5d:32:ab:32:3d:64:be:dc:81:
f0:f3:ce:af:e6:cf:7c:4c:4b:66:10:86:61:3c:bc:
31:8d:45:d3:b9:c4:9e:5d:84:ba:ab:98:41:7c:47:
87:09:18:b4:e3:f2:fa:1f:d1:30:ea:a7:8d:24:a1:
7f:0d:1e:86:81:b2:46:65:07:e4:48:4b:70:bf:9e:
48:c5:30:73:32:42:a2:e6:17:89:1a:d3:7e:f9:a7:
a5:f0:0d:7c:9c:9d:00:42:7c:e3:ba:8a:db:99:e7:
a6:45:2d:59:ed:25:68:ce:3e:cf:2e:a8:fe:c3:09:
37:db:e3:3b:74:f7:cf:64:f3:0b:b3:63:35:21:23:
69:36:9f:5d:c5:ac:66:57:ee:18:b5:07:c7:f4:ad:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:56:23:4F:AE:5C:78:19:A3:17:DF:EE:A1:B4:ED:0F:71:5B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d72f84f2-6166-3a0d-aa1c-85e1616e7ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:97:40:e2:16:0a:b9:45:0c:d7:30:e8:e2:8c:c4:bf:d2:c0:
7a:16:60:3b:96:d5:63:75:4f:45:2e:63:ce:7b:41:5a:49:ae:
6c:f6:68:86:5a:e1:37:01:0a:e9:d1:cb:6c:eb:e7:2a:96:f6:
24:7e:01:55:ea:8f:f2:23:3c:48:ee:09:88:18:6d:de:c8:52:
bb:7e:b8:80:65:87:b9:31:87:1c:72:c0:a3:a3:80:36:4e:7f:
cb:34:3c:2a:91:90:eb:71:76:73:ac:4f:de:f1:bc:2a:63:17:
83:74:10:4c:61:6a:84:be:fb:66:48:0d:35:fc:9d:ac:08:a9:
75:10:81:02:ea:d3:ef:83:06:99:89:43:a7:d8:41:ef:d1:78:
6e:f8:f6:d2:d1:68:c6:bf:20:e0:d1:c0:ba:3d:ee:a3:04:93:
25:21:3a:be:6e:fe:b7:5e:42:b7:9a:01:75:82:c9:c7:76:30:
e7:48:48:f5:cf:b5:3d:ff:bb:cb:c8:57:85:46:71:05:ba:24:
21:1a:eb:11:de:89:27:92:d2:49:26:3e:ec:bb:6f:02:e4:36:
85:b7:b2:23:c9:16:ae:86:2c:a1:ac:01:6a:e9:45:4f:b4:71:
0d:7e:16:05:d7:b5:8f:db:23:d1:56:c8:c0:4c:f9:22:29:73:
11:09:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org