Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da4ace2c-88d0-390c-9454-bb2f945324d1.roa
File: da4ace2c-88d0-390c-9454-bb2f945324d1.roa (raw, json)
Hash identifier: +dwp41pzFR6yrxDoXEqgHB4Fct8PWOl6Xu5uJ5MM2WU=
Subject key identifier: 3C:DD:69:BE:EF:B1:2C:75:5F:0C:EB:C8:B3:F7:88:09:F4:8F:28:A1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE51AF7E5A5C60D43FB0700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da4ace2c-88d0-390c-9454-bb2f945324d1.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 184.151.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:1a:f7:e5:a5:c6:0d:43:fb:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=525b9a2f-bcb7-4b36-93b1-ff727b532a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:5e:19:03:48:75:b7:90:9b:19:25:94:83:
ef:b3:d3:5d:3c:84:23:7b:44:d6:14:7d:8e:07:68:
c0:a4:26:da:91:45:dd:85:07:f3:62:16:b7:e1:fa:
00:d3:b9:68:40:10:e7:43:89:77:bf:ed:e9:dd:c9:
d8:8b:e2:95:2d:20:0d:10:b3:3a:b5:52:66:fb:3a:
1d:9e:59:a6:25:23:79:f0:b7:32:1a:6e:cc:c1:18:
43:8a:1f:fd:06:ea:6b:dd:8b:db:88:a8:eb:bf:3d:
25:be:43:64:b5:af:05:ae:f3:9c:ed:c1:6c:b0:69:
6a:95:28:2f:40:29:58:d2:ae:a3:05:6f:21:74:db:
6b:c7:c9:11:47:74:39:08:86:bf:9d:66:17:fa:ce:
7f:1e:a5:27:74:bd:44:ed:ff:32:bf:e2:ef:46:08:
d0:4c:49:66:59:bc:92:a6:d7:0d:bb:27:b2:91:1b:
f8:3d:0f:c2:1d:94:0f:20:e3:ee:83:20:78:ce:5f:
72:ad:bc:18:ac:d2:5e:7b:0e:4c:3a:65:4c:a9:03:
15:92:6a:74:0c:42:2b:44:1d:68:82:f8:c6:a1:66:
44:a1:3e:42:bf:f4:0a:5f:f0:36:59:df:c7:70:ea:
10:4e:ff:f4:1b:55:11:f4:94:94:2e:82:12:be:c2:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:69:BE:EF:B1:2C:75:5F:0C:EB:C8:B3:F7:88:09:F4:8F:28:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da4ace2c-88d0-390c-9454-bb2f945324d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2d:07:3e:c1:89:35:38:8c:76:fb:e4:f9:0b:6c:03:0d:b0:
26:59:fe:f2:2a:c0:13:9e:9c:b6:15:6e:b6:18:17:e9:b1:0f:
05:fa:72:f3:b9:3e:d4:a9:73:76:91:c1:1e:45:c7:50:c2:f2:
77:5d:c3:92:32:ca:4a:fc:24:2e:b3:8e:14:a8:6b:4b:7f:19:
2c:75:9f:75:72:e0:b4:2f:fd:f5:78:e6:d7:50:6d:e1:bb:2f:
01:7e:8e:cc:fa:27:1a:fa:aa:95:ff:a5:0e:3f:ac:4b:77:d7:
b1:3c:22:14:ac:74:05:13:ec:09:f0:1e:0f:49:ce:fb:20:97:
20:eb:24:78:68:9c:5c:78:d0:c1:be:29:bd:2c:00:4a:e3:6d:
fc:c0:b0:29:eb:1e:b8:01:6b:83:d9:76:ff:67:41:1a:4a:08:
50:e2:99:60:a7:18:92:b4:17:9d:61:21:02:5c:e1:c4:b0:90:
ed:b9:e8:48:64:3e:97:c0:4f:14:eb:68:85:97:a3:ae:ff:34:
71:63:ce:10:bf:9c:2c:b3:21:6d:cd:82:8e:80:d0:92:12:99:
4c:ab:9b:ad:7d:6d:2c:f5:32:16:9c:57:d4:04:1e:ad:49:e8:
b1:42:c7:11:a2:cb:6c:cc:df:9c:e3:f1:52:6a:76:56:e2:e9:
e0:22:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org