Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2b99f2f-d15e-394e-848a-e614d8461fea.roa
File: f2b99f2f-d15e-394e-848a-e614d8461fea.roa (raw, json)
Hash identifier: feGT9a26SE6yj1zaXaYdZztfO7aKhx8jVIaaImS2r04=
Subject key identifier: B8:A5:99:F7:3B:F1:DA:45:E4:4E:38:60:55:17:EC:E1:F4:FC:46:95
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE548FAAE203456D904C280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2b99f2f-d15e-394e-848a-e614d8461fea.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 184.151.200.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:48:fa:ae:20:34:56:d9:04:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=f7a50f16-914f-49d2-9220-d1d14ebc9d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:cd:d4:9e:ef:57:40:b2:1f:71:cd:63:7c:
24:31:5c:ad:4e:c5:b2:ff:80:5c:5c:6a:3d:30:a0:
bc:d4:75:7e:c0:fb:2c:cb:d1:97:85:3b:e4:4a:56:
39:93:41:fb:8a:53:bb:93:f1:d1:6d:4f:cc:1b:32:
8a:c7:c4:6a:36:02:5f:7b:d6:0f:f0:c5:02:87:0b:
27:d4:41:3d:4a:37:7d:0f:49:ec:40:07:8b:00:5d:
6f:1b:90:50:8e:62:d4:67:6f:77:f3:d9:c6:d9:08:
51:c1:44:45:e6:f3:ad:dd:9f:e2:d6:24:10:11:d5:
28:d9:6c:aa:e0:40:49:a8:10:5a:03:ec:e6:3e:e0:
a2:5c:3d:93:37:f3:b7:fa:95:aa:41:fc:b8:cf:b9:
93:f5:0a:c8:41:f5:1f:b2:4f:d9:d9:ce:bb:1c:3b:
72:20:77:00:2b:62:53:c0:24:f6:6f:00:0e:ea:43:
95:36:f4:55:61:c1:3f:24:22:c1:3a:3a:44:64:2d:
f1:4b:83:56:06:3f:84:32:b4:5c:91:2e:e7:cb:f5:
79:b1:85:a3:3d:36:90:a1:d0:08:d0:8a:e1:de:62:
c1:76:20:7d:72:51:24:04:1e:e0:56:5d:72:3b:69:
98:65:8c:35:94:72:94:8d:40:80:67:59:bb:a6:ed:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A5:99:F7:3B:F1:DA:45:E4:4E:38:60:55:17:EC:E1:F4:FC:46:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2b99f2f-d15e-394e-848a-e614d8461fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:19:f2:04:d9:61:90:27:89:22:21:09:2a:fa:eb:7e:06:97:
a0:7c:ea:42:42:b8:ac:c5:7d:e4:ab:45:aa:6f:13:57:47:67:
c2:a9:64:4a:b5:31:f0:a4:d5:06:ed:0d:17:8e:23:80:fc:0b:
38:34:b1:e2:10:fe:06:d8:41:88:0e:15:94:9e:9e:fb:76:3b:
95:99:38:74:f0:b7:93:aa:7e:58:c5:55:e4:a2:02:9b:88:fc:
7b:a7:be:d4:53:41:cc:2b:33:e1:86:f4:19:84:34:9c:2f:f5:
81:0e:e5:9b:2a:06:38:cb:4f:d8:9b:83:5c:07:94:c3:c2:97:
7e:a0:80:a4:11:85:6a:19:be:0e:59:42:92:f3:bd:16:77:d6:
0c:2d:37:3f:14:04:23:f0:b6:e6:34:7c:b9:99:1e:9c:d2:20:
a4:ed:99:a4:17:aa:84:f9:ff:58:13:69:b8:0d:47:f3:ec:c8:
d2:a0:5f:b5:1c:71:ab:5c:f0:39:12:53:df:a4:c6:da:65:81:
05:7b:2d:57:26:92:41:05:ad:89:98:c5:5a:83:53:0b:6e:02:
1f:d7:9c:c2:bd:12:12:31:1c:46:de:ee:df:5e:4f:e2:4e:75:
bd:be:3c:bb:b6:a4:46:e0:74:f0:78:6f:e0:fc:71:a3:4d:24:
cf:79:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:16 2024 by rpki-client on console-fra.rpki-client.org