Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d888baff-fad1-3145-a01c-ba2f1748711c.roa
File: d888baff-fad1-3145-a01c-ba2f1748711c.roa (raw, json)
Hash identifier: wUPrLyt8GTH6EK/SHG0ucgY4KyRLUnmCsU+yFrYJyEk=
Subject key identifier: 19:D2:5F:09:20:71:22:13:83:6C:B6:BB:07:4E:59:50:7A:F8:9B:BD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931578F0F813F5A0F2028DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d888baff-fad1-3145-a01c-ba2f1748711c.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.47.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:78:f0:f8:13:f5:a0:f2:02:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e51d5a53-2c80-4a35-99ba-446b08f0cf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:27:8b:48:f1:3d:0a:71:46:62:1a:e4:68:99:
ed:a8:cb:33:8e:4e:c1:07:ed:dc:f1:28:0c:71:96:
4f:12:eb:7a:36:a5:81:48:db:d5:a6:54:a4:40:89:
86:ad:13:ff:54:1c:f9:81:f6:fb:91:32:3b:e1:30:
b3:fb:e1:37:80:c1:82:97:43:d8:bd:99:6d:02:66:
78:fd:08:0d:5b:01:01:f6:a3:be:49:7b:7c:b1:95:
80:36:6a:0c:64:a7:ea:aa:d3:37:98:2a:46:21:5d:
0d:7a:5c:e9:1c:29:f1:19:22:66:3b:d5:41:da:c8:
1d:0a:8a:a6:81:a6:6b:16:2f:77:b4:9c:99:aa:f4:
73:55:a8:7f:1e:1f:c1:74:85:27:55:1c:06:fb:9a:
b9:12:78:da:72:7c:d4:37:7a:00:b7:c5:bd:b7:7d:
8a:ce:e7:f7:10:76:8c:93:02:f2:b7:f9:be:6f:8a:
ba:ec:7b:f7:64:f5:7f:41:69:71:ef:a0:cc:12:b6:
80:2d:71:54:d7:50:02:2a:18:e5:f0:d7:06:be:1d:
ec:89:88:46:5e:b6:a3:48:e4:d6:0a:25:6b:34:ab:
59:8e:99:86:a4:2a:36:5b:64:59:35:b5:15:a9:fe:
03:bc:ed:e9:0d:24:44:4f:fc:4e:8f:d3:49:3f:e2:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D2:5F:09:20:71:22:13:83:6C:B6:BB:07:4E:59:50:7A:F8:9B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d888baff-fad1-3145-a01c-ba2f1748711c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:7b:a3:dd:92:f9:94:e3:8f:99:a4:50:f1:62:d3:71:56:5c:
c1:9a:84:90:ec:c8:ac:c3:a8:80:ae:13:ca:d5:e1:22:34:da:
a7:08:9a:0a:6d:09:ce:29:bf:6f:f6:8c:61:f1:a1:1d:c3:68:
77:e3:55:0b:dc:a1:ff:28:1e:d2:4a:14:a4:9e:ad:6c:05:76:
40:ed:46:2b:b5:fd:d2:c6:e1:9c:2a:1e:8e:55:15:ca:45:a6:
bd:73:06:98:6e:ae:d9:08:2e:57:b7:a7:8e:18:69:5b:00:4f:
02:10:fa:49:02:0c:9c:47:be:29:88:5a:e6:59:42:96:a3:a1:
6c:40:23:52:ec:ee:f4:2c:1a:9c:a1:4b:96:ab:3f:15:5e:b0:
6b:80:b6:03:04:c6:99:3a:4f:31:98:00:fa:5b:97:01:43:81:
88:13:7e:15:9a:3b:2c:d1:e8:32:67:fe:93:80:26:6a:b9:70:
31:92:93:9d:2a:e6:f6:6b:69:d4:87:ee:b8:f7:cb:76:a6:de:
df:ce:b7:3b:b6:57:93:7e:28:d8:79:06:2c:99:7c:10:19:c5:
f4:9d:16:4b:1b:d5:bf:1d:0c:7d:41:b9:22:39:76:a1:e4:54:
7a:4f:28:44:56:a1:dd:dc:0f:f4:65:64:71:96:24:1b:91:a3:
2c:7a:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org