Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0f27479-f237-3e20-91dd-69f3bf645075.roa
File: f0f27479-f237-3e20-91dd-69f3bf645075.roa (raw, json)
Hash identifier: U9BIS7ClwhHjs+lLue8ReI+sKHmCSzrIliumwdKEGHo=
Subject key identifier: 10:08:2B:29:85:27:7A:8F:D1:C6:69:8B:F2:CB:C8:42:C4:5D:9C:9F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB967C94B483904F87800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0f27479-f237-3e20-91dd-69f3bf645075.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 198.235.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b9:67:c9:4b:48:39:04:f8:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=d154e8d7-c91d-4803-96d2-31c23483bf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:1b:01:87:85:3a:a1:54:b2:66:2d:de:ee:
9f:32:54:95:62:02:4a:03:46:ab:56:38:c5:ec:8d:
4b:59:eb:ca:48:24:93:a2:4f:33:57:c5:20:fd:94:
6e:2f:63:b9:25:9f:c3:4e:35:19:db:1d:dd:8e:23:
fc:f3:f0:7c:f7:90:f6:58:4a:19:fd:0b:47:4e:38:
e3:56:ee:e6:ad:48:1f:73:6b:87:21:60:0d:b6:8d:
49:44:8b:7e:f1:e0:d8:3f:cc:3f:4d:5e:12:08:37:
d2:c3:4e:6d:df:0e:3a:3c:1f:5e:ac:92:59:56:44:
79:24:21:85:b9:81:77:66:35:2d:37:ba:08:aa:98:
8e:ac:69:37:03:84:b8:ef:a8:d5:51:8b:65:d9:2d:
10:b5:62:8f:3d:ed:85:a4:ec:b7:6e:a3:f6:6a:85:
bd:fc:5d:78:5c:f5:46:4c:40:41:f5:c2:a8:85:60:
4d:38:dd:ae:0b:9b:28:d6:83:8f:07:c3:9c:c0:28:
7d:82:13:e3:7f:3e:bf:3d:ff:1d:4e:84:e7:ba:08:
2a:5b:66:ed:54:5f:bb:2f:54:45:79:fe:7e:76:31:
ef:f5:35:6b:31:46:38:16:ac:5b:58:e6:16:5a:7c:
41:32:a4:18:b0:33:01:da:0c:2b:36:d2:2f:09:fe:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:2B:29:85:27:7A:8F:D1:C6:69:8B:F2:CB:C8:42:C4:5D:9C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0f27479-f237-3e20-91dd-69f3bf645075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5e:5e:59:43:5d:17:04:b8:15:1b:d4:7c:a4:f6:56:a8:5f:
6f:ed:b9:50:c6:cf:34:a9:78:09:b5:b4:0f:2d:37:1f:ae:1e:
fb:77:22:d3:c0:15:8c:9a:cf:35:70:82:86:80:ce:9e:2d:fd:
49:82:a1:43:8a:ee:9c:a1:e1:1e:e4:47:fa:22:39:71:bf:ab:
77:97:11:6e:ac:34:c6:18:6a:5d:4e:b9:f7:5f:dd:a2:b7:ea:
d1:0e:12:bd:52:4d:5e:9b:1c:5e:95:67:9f:f6:c5:c4:b4:04:
5e:8f:6a:d1:5f:ec:08:3f:48:d6:8f:06:36:d9:44:6a:b7:bc:
c9:a5:2a:f6:9a:9e:35:5e:24:bb:bc:12:25:87:d3:8a:85:cf:
e9:0b:55:c1:85:74:62:e3:9c:e3:d8:77:65:ce:6a:bc:15:21:
32:f4:41:6e:c7:1d:1b:3b:14:ad:38:a8:cb:04:27:4b:6f:b7:
d4:a3:c3:f8:53:46:9c:a0:1d:79:e5:4e:b5:c4:72:28:cb:a8:
95:11:52:0c:c3:d0:0f:ce:95:21:90:fe:3a:c1:bd:80:7c:92:
c7:06:17:9c:1b:fa:07:7a:cb:ab:a2:8d:65:ff:23:ed:2b:67:
e3:17:18:c3:9d:e6:eb:53:e8:8a:8f:67:84:8a:25:70:66:c3:
6e:38:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org