Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e03efb86-3e88-3247-9890-85a7867765c1.roa
File: e03efb86-3e88-3247-9890-85a7867765c1.roa (raw, json)
Hash identifier: lI4Eoy8I467eb8KAmGUy2IVThPFMSjo5nhwFredDg/o=
Subject key identifier: 8F:32:4A:00:24:8B:77:A9:39:69:56:34:0F:3D:61:F4:DA:31:37:85
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB09BB7BB99217E21FE2980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e03efb86-3e88-3247-9890-85a7867765c1.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:9b:b7:bb:99:21:7e:21:fe:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=18363103-312c-47f3-a761-f60bbe9a78a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:c5:f5:93:09:f3:43:15:23:5b:80:21:19:
95:55:d7:06:c1:56:23:cc:06:54:86:97:c8:bb:1a:
98:92:d0:39:e7:0f:6b:2d:79:ce:bd:35:3c:af:a1:
1d:cb:dd:03:8f:59:5d:5d:6e:b9:47:6b:32:db:a4:
d1:9b:c1:0f:8d:f5:07:a7:84:67:fd:24:07:cf:df:
38:8b:3f:9f:bf:05:f1:9c:f1:8b:ee:6c:d4:98:4e:
b9:b5:89:a1:ca:7b:ce:dc:08:f6:25:92:6e:3c:74:
c0:79:b5:df:a1:38:ec:d0:ac:11:21:70:c9:3b:76:
66:7f:4a:13:ab:50:a9:69:5b:8d:81:98:46:af:89:
f8:65:04:53:af:b7:6a:bd:1d:c7:df:27:a1:f8:d9:
be:68:55:f1:a4:e8:b5:a2:c3:83:85:f3:07:ac:ff:
12:65:52:ab:e8:2e:ae:37:f9:fe:32:00:81:8e:b2:
d7:48:f4:70:81:81:47:d9:03:de:ed:74:8a:d5:c5:
be:dc:ef:74:cd:c2:ad:79:d8:93:4a:e0:29:a5:dc:
d3:7a:5b:69:16:68:7e:62:30:ee:68:e2:60:fb:29:
4e:2b:69:db:ec:33:60:13:8f:ea:89:7e:b2:96:3e:
48:68:74:d6:c9:3f:51:ee:b4:ca:43:0d:1b:6e:55:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:4A:00:24:8B:77:A9:39:69:56:34:0F:3D:61:F4:DA:31:37:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e03efb86-3e88-3247-9890-85a7867765c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e4:b6:1e:5a:3a:44:a9:82:2c:bb:20:e0:f5:48:bd:cd:38:
89:64:c1:08:67:86:b7:3e:42:9d:84:86:57:27:30:60:5f:5a:
ae:fe:29:94:95:7e:1c:a3:e5:82:c4:6f:15:7a:c2:ac:19:3f:
39:7f:d0:ae:be:4d:e2:ed:29:0e:83:01:b1:51:26:59:be:2c:
45:52:cd:0a:b9:41:ed:64:b7:84:72:f0:ff:39:9b:18:c3:15:
c0:6d:86:e8:04:0f:f9:d6:a7:18:11:99:bf:89:57:c4:6b:ad:
0d:32:2e:2c:39:94:9a:b7:66:fa:4d:a7:a7:6e:07:b5:b5:5c:
40:23:35:da:8f:0b:84:5b:d4:d7:22:cf:92:7e:26:27:c5:87:
59:bb:69:50:17:09:73:ea:fd:3b:08:cf:21:f2:10:32:67:8c:
65:dd:a4:d8:f7:3e:22:82:27:aa:1f:96:26:63:8d:e6:75:2d:
33:e4:2e:fb:56:37:ca:aa:73:49:1c:b9:58:c4:34:00:9f:26:
5d:c4:77:2b:c0:8d:e1:d3:fe:6e:bf:7d:d1:e3:af:da:3c:b4:
1a:22:4e:09:aa:1f:e7:d2:77:3f:5e:7c:c2:eb:90:2a:44:04:
3e:f4:44:fa:0f:58:1c:ca:c4:29:ab:4f:9a:75:eb:54:15:54:
78:bf:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org