Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0a7251-c02e-3e74-b448-81fe5c94680a.roa
File: df0a7251-c02e-3e74-b448-81fe5c94680a.roa (raw, json)
Hash identifier: a95qHhzoLFiFlmUrNJ5xHfl04sNWZgwzo/ugPds7ZL0=
Subject key identifier: 61:82:3F:20:F8:60:75:ED:69:66:E4:87:B7:EB:8D:D3:EA:07:96:56
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE62791A17F648C956CF700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0a7251-c02e-3e74-b448-81fe5c94680a.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 216.208.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:27:91:a1:7f:64:8c:95:6c:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=30689ec5-4f34-45d1-bf14-8b00f9ed692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:2a:6a:f0:a2:15:0c:e1:4c:18:0b:49:de:
71:11:c6:9c:61:e9:c9:32:7c:01:e7:3d:3d:f2:ec:
f0:f1:e6:55:9b:61:0e:b3:11:20:21:ee:08:47:1c:
9a:d3:2f:a0:3d:14:5e:1e:54:80:19:5e:aa:19:f8:
33:71:f1:04:67:ac:0c:c6:6e:7e:0f:57:d7:5c:08:
8d:20:69:36:e2:0a:09:db:fa:59:f1:7d:5a:89:53:
4b:84:6a:cb:b3:95:f6:36:77:4c:81:4a:db:d5:47:
a4:8a:ad:49:b8:0c:78:c0:e2:cf:b0:15:28:9d:47:
09:36:bc:30:1f:03:c0:69:60:30:c8:f0:71:73:51:
48:63:c3:d8:61:53:55:ed:0c:f0:b5:ee:68:e0:8c:
0f:1e:10:7d:a8:91:a5:4f:e2:6d:fb:86:e9:6d:02:
59:64:6a:e9:99:f9:b5:a7:db:0f:6a:00:6f:d4:45:
13:4e:bf:11:e1:64:fa:14:48:24:db:9e:85:ae:f1:
44:3d:7b:4d:43:39:40:07:cb:c6:63:4d:2f:f4:41:
20:f8:9f:2f:1c:ae:12:1a:d7:0e:be:7a:ae:f5:19:
f5:4f:67:e7:5e:dd:ae:52:63:9e:bf:1a:1b:48:14:
5b:af:8a:48:68:2a:71:3a:9a:fd:4d:82:21:62:6e:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:3F:20:F8:60:75:ED:69:66:E4:87:B7:EB:8D:D3:EA:07:96:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0a7251-c02e-3e74-b448-81fe5c94680a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8e:72:43:b3:74:5f:5f:13:7a:cc:93:41:6d:dc:98:25:dd:
28:b9:46:ac:46:5c:65:03:1e:e3:2f:2a:82:e5:85:24:07:9d:
2a:e3:6c:9a:b0:e6:3c:8a:3e:8f:26:a4:3f:a7:f2:ac:08:a9:
89:90:bb:3e:ff:a7:a6:89:0e:b0:8b:02:f6:47:00:4c:b1:b0:
9e:fc:16:64:59:9d:ad:a3:ba:53:80:8b:fe:03:f2:3e:30:24:
ef:51:41:63:77:4d:ed:c2:45:74:09:a6:4a:90:5f:1c:19:db:
80:2f:8d:f7:bd:92:4b:7c:10:6c:60:67:e8:10:e9:04:e1:a8:
b6:da:05:e4:36:7b:0b:28:8b:0a:a7:57:2a:56:39:53:cf:59:
2b:0e:54:42:61:0c:e3:c6:5d:2b:51:3d:53:da:78:8e:fb:53:
f0:0c:37:4f:72:99:ab:d5:0b:c0:34:d9:03:51:15:de:c5:61:
dd:fb:3c:40:86:b7:de:5b:e5:bb:30:eb:e2:9e:76:bb:eb:33:
b7:5d:0f:d5:3b:eb:ab:aa:ea:f1:f6:a9:e5:51:d2:2b:7e:af:
f0:6b:2a:9e:19:23:da:a5:e7:6b:d0:c1:be:ef:d6:4b:39:ab:
07:2c:88:27:7b:bb:09:e4:24:8d:47:9c:0b:59:e8:d9:85:a5:
18:9f:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org