Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de4a0e54-bcfa-3128-976f-d00229c25ade.roa
File: de4a0e54-bcfa-3128-976f-d00229c25ade.roa (raw, json)
Hash identifier: um3k08hrMewooMMFkxxLVsbsU72hcFp6BvPuwuR6QMo=
Subject key identifier: 64:97:C3:C6:03:A4:63:E4:40:D6:0E:16:E4:BD:8F:F0:19:89:59:09
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE52E85A4A5E744FAAF3940
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de4a0e54-bcfa-3128-976f-d00229c25ade.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 184.151.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:2e:85:a4:a5:e7:44:fa:af:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=9824d66e-2e44-4c08-a332-0bbba96b7120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:c0:18:81:a1:b1:63:33:12:d8:ec:54:b4:
ad:aa:d2:c4:7b:d4:d6:b4:d9:ab:73:4f:c3:54:2b:
dd:10:81:f5:40:61:a1:ac:2a:dc:7a:b9:00:d5:bd:
fd:3a:40:e2:4a:71:07:50:e2:27:96:4d:a3:11:0e:
f8:9c:d6:f7:61:11:75:90:53:6e:a8:28:2d:e6:f0:
26:ec:e2:36:ab:e6:9e:03:d1:4d:59:e0:8c:46:b9:
dd:0a:ca:28:73:51:f0:26:09:b0:4e:f7:f8:40:0d:
d8:b5:db:4a:e1:29:1a:f1:80:60:cf:fe:72:b5:81:
b1:33:c8:fc:8b:24:00:75:0f:35:4e:c5:64:04:d4:
03:8a:cc:0d:ab:e6:c4:aa:73:a5:1b:ac:be:4c:7a:
32:a2:e1:a4:16:39:b8:8d:0a:d6:ee:28:f3:47:34:
62:16:b8:c5:c6:c8:14:d3:1e:89:08:12:83:6c:d1:
e2:89:b6:88:a0:0d:7a:53:81:01:af:a7:8d:c4:39:
34:07:69:eb:f9:72:af:31:b5:0d:7a:72:e7:ed:ee:
65:e6:18:93:a7:f6:db:ec:4a:be:99:28:87:ff:5d:
a7:e3:8e:7a:38:b4:45:21:fd:45:6e:d0:6a:63:16:
78:e6:3b:cd:ea:4a:27:79:7a:46:5b:a4:82:74:ce:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:C3:C6:03:A4:63:E4:40:D6:0E:16:E4:BD:8F:F0:19:89:59:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de4a0e54-bcfa-3128-976f-d00229c25ade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d2:43:e1:32:7f:40:a3:44:45:24:0f:10:2e:f1:71:33:2f:
f2:96:8c:ba:e5:e0:76:66:53:5d:d3:44:ca:d1:53:6d:d9:cb:
30:37:61:94:5d:39:21:41:03:a2:10:da:d5:3b:f7:0f:26:0a:
25:1f:00:44:da:61:2c:91:5b:62:6e:f6:b3:6d:ce:5f:34:86:
23:fd:e2:7c:4d:c9:ce:70:e5:c6:ea:e6:4e:0e:59:b5:65:c0:
a7:9a:fb:db:f9:a4:d9:51:9e:12:07:9b:9f:85:04:8c:b2:f1:
9d:f8:75:14:98:6e:a6:f8:ff:14:79:7f:69:ce:5c:d4:2b:17:
13:fb:50:19:43:1c:ad:9b:b4:ac:4a:96:00:ab:bb:0f:56:4d:
f3:4f:f2:37:80:c9:d4:9a:90:0a:94:26:61:ca:1b:b6:ae:8b:
5c:de:c4:13:8b:65:85:12:62:6d:02:ed:aa:dd:e3:15:f6:95:
2e:e2:c4:09:67:2e:db:34:03:6b:f1:c4:73:ac:8b:e2:37:da:
17:95:d5:fc:7e:62:16:fb:e1:be:d9:0e:f6:5b:c5:c9:b8:28:
c4:60:26:f6:40:6b:94:e8:e0:03:a2:50:07:4c:6d:2c:c0:67:
a9:9b:e7:25:a9:59:d4:82:41:18:25:a9:c7:5a:a0:e7:8f:ad:
4c:bc:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org