Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc66ace4-6e4b-3082-bc03-2b547cc7db03.roa
File: dc66ace4-6e4b-3082-bc03-2b547cc7db03.roa (raw, json)
Hash identifier: pvJ4xzBlL6ZLVC3wXNXBD6zLfCFb8qnnxj5WD/BJVZc=
Subject key identifier: A9:43:E5:D4:F0:60:6A:D1:09:77:6A:03:14:3D:D0:28:C7:51:34:D1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF7630BC9BE270AF3A77D380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc66ace4-6e4b-3082-bc03-2b547cc7db03.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 15321
IP address blocks: 216.208.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:76:30:bc:9b:e2:70:af:3a:77:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=05ef9c89-558e-4b7a-a7f6-b1b2066a692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:5d:04:fc:ff:8c:64:7f:41:b1:dd:eb:6c:
a3:22:a1:23:00:8c:1d:ac:2f:a5:88:f3:ee:3f:e5:
f6:0b:6b:8f:c4:1b:a3:91:04:22:20:0a:d8:d0:f0:
34:ef:30:19:fa:30:a1:bf:0f:99:8d:e5:d7:2b:53:
87:70:d1:d9:25:1d:56:0c:8d:17:f6:39:76:29:47:
87:1e:d6:7c:35:c4:4e:30:29:9f:c2:15:9a:99:d1:
92:e5:84:24:c6:6d:de:52:6d:4b:db:0a:e6:e9:e8:
5e:2e:24:fc:44:1c:83:b3:9e:4e:47:18:4c:3f:95:
80:b7:a1:0b:8b:9e:f3:ed:66:ba:dd:cb:16:d6:cb:
93:bc:28:96:b1:24:03:a1:f5:02:ac:bf:14:bb:f4:
35:6c:0e:2d:f3:9f:8e:3f:15:62:82:9e:67:6b:7e:
c2:a5:9b:eb:62:ae:8a:65:b6:96:a8:1c:d2:2e:ea:
67:9e:fe:6e:f1:97:f9:e4:50:e9:05:ff:86:1f:6b:
d1:25:02:2c:32:9d:5d:de:3a:8f:76:23:1d:0a:5c:
16:37:d7:8e:73:c0:44:7d:3a:ac:7e:8c:53:79:3c:
02:07:24:64:06:e6:77:5e:25:0d:fa:92:6d:62:e0:
b0:34:5f:bc:50:b5:05:24:58:24:39:53:44:f2:8c:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:E5:D4:F0:60:6A:D1:09:77:6A:03:14:3D:D0:28:C7:51:34:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc66ace4-6e4b-3082-bc03-2b547cc7db03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ae:6f:9d:bb:8d:f9:48:0d:2a:8d:f1:c7:12:4d:ba:f6:ba:
83:03:a2:7f:24:2d:8f:c0:bb:83:0e:09:a5:6f:80:53:a6:91:
77:ae:3a:90:ab:64:a7:33:22:32:7a:1f:b8:2b:86:ce:8f:2c:
13:1e:ab:07:9b:33:9c:46:8a:45:c6:39:62:a3:d9:14:c3:0b:
99:ae:e5:07:d1:12:f2:df:1c:25:3e:2b:48:cc:fd:9f:55:13:
88:9c:0c:1b:a6:56:4c:bd:ca:78:36:00:17:d5:bd:c2:f9:7e:
49:53:6e:e8:aa:8f:34:bd:6d:d3:55:d7:5c:f9:54:a1:12:47:
ce:ab:2b:d2:04:2c:26:67:32:c0:24:48:67:b4:b2:b0:a6:b4:
bf:55:ff:7d:e2:01:72:01:5d:44:17:a8:1a:58:c6:54:12:f1:
10:39:f0:0a:97:d7:07:b7:88:99:03:42:be:ca:d9:99:c3:3d:
aa:f0:ed:fc:6f:c6:42:64:7b:a7:94:11:b4:3f:fd:55:4a:1a:
31:d6:d8:a3:1e:ac:75:ec:f4:83:24:93:7b:82:86:cc:88:e9:
2b:77:50:f2:d7:ea:63:51:c1:09:a9:3e:65:42:56:2f:8d:02:
28:f6:6b:00:17:43:a3:22:31:2e:3c:29:25:cd:cd:31:24:aa:
63:c3:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org