Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea77c770-ddcb-3dad-ab00-49aea2bb68b7.roa
File: ea77c770-ddcb-3dad-ab00-49aea2bb68b7.roa (raw, json)
Hash identifier: jrPtnyaY5IHifzE5N50bn5x5YlPIrPKrCgrzlHJLnhM=
Subject key identifier: 0E:71:16:8C:9C:4A:87:D9:43:51:BC:78:3B:79:05:A3:FE:89:1F:E5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931487086F238F255602D140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea77c770-ddcb-3dad-ab00-49aea2bb68b7.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 184.151.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:87:08:6f:23:8f:25:56:02:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=877bb823-7bdc-46f1-9775-ce8078951f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:c0:bc:68:86:e7:6e:90:dd:f5:c4:4c:b2:
9d:f5:df:ad:50:06:59:37:34:83:d5:3e:59:ab:9c:
6a:2e:90:e7:d8:e3:b6:a6:81:28:17:e8:b7:3d:12:
c7:b5:3e:73:81:31:9c:cf:e2:69:69:da:ca:07:fc:
3d:61:7a:dd:91:fb:d0:09:73:90:2c:93:20:a4:0b:
28:5a:83:81:b6:08:8d:7c:e9:aa:52:cf:5f:c8:62:
4b:59:df:4b:fa:a1:ef:67:54:a1:80:78:13:6c:30:
92:6f:1d:87:3f:47:a9:00:1f:11:ff:20:09:80:2b:
f9:4d:09:75:b4:ef:9d:8a:0a:46:f4:c2:02:59:3e:
0b:9f:44:23:66:85:6d:a2:1d:d4:17:b9:5a:2c:aa:
3b:ed:43:65:13:57:e3:5e:e7:1e:2e:26:71:66:57:
11:64:87:9a:06:26:25:93:b5:ee:27:3a:ab:83:4f:
32:91:73:0c:43:1a:95:e9:04:0e:20:5e:9b:8c:61:
55:9a:71:c3:85:91:1d:06:de:35:38:fc:8e:ba:e2:
27:15:7d:ce:c9:7e:0c:01:a1:a6:9f:06:e4:31:67:
24:da:bf:ca:89:4f:63:02:7f:ae:22:25:41:8b:53:
db:e5:ef:11:90:6a:06:d0:09:f6:19:2d:51:fa:13:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:16:8C:9C:4A:87:D9:43:51:BC:78:3B:79:05:A3:FE:89:1F:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea77c770-ddcb-3dad-ab00-49aea2bb68b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d8:72:a1:3b:60:b5:08:65:29:90:ac:2b:6e:76:e1:a9:48:
78:5a:b8:b5:53:46:0a:f9:54:6f:de:b0:5d:31:c4:31:24:3c:
b3:32:a4:74:32:43:54:d3:de:7e:77:21:ff:e3:ce:e0:50:18:
a4:f4:e2:83:08:f9:54:6d:68:e4:75:52:13:1f:ae:a6:99:f9:
55:c8:9d:d4:fe:5a:cd:c2:a4:a1:d6:60:6c:7f:b0:7c:ef:31:
43:2f:2f:27:7f:b4:3a:bc:a2:78:bd:be:87:93:44:ac:8f:96:
dc:95:6f:56:64:b1:54:fc:7a:62:b1:86:26:a8:f5:0b:1a:da:
c0:b8:27:b6:f5:34:c9:f0:a3:ef:c9:5e:ef:3d:f3:b0:cd:45:
4e:03:d0:ad:29:c6:40:49:a4:e7:cd:9a:da:a2:6e:80:8d:52:
3c:98:f2:ac:cb:d4:20:ac:74:34:c5:b8:2e:fe:5b:54:4e:83:
bf:b4:d4:3f:36:a1:c8:13:60:8e:8a:a7:15:a7:58:1e:29:ab:
6c:a0:78:2e:12:75:70:9c:9a:cf:77:98:2b:81:d5:c9:f7:a4:
a9:5f:29:b6:b1:47:a2:4a:d9:e0:14:c8:d8:97:f4:7c:65:f3:
50:2b:e5:34:d9:d9:ad:c5:98:88:4e:e1:3e:30:cc:fd:2b:a7:
cd:aa:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org