Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc08a670-3158-3793-b2cb-7039f4b4d202.roa
File: fc08a670-3158-3793-b2cb-7039f4b4d202.roa (raw, json)
Hash identifier: jw64kLfBj90rwn7rvzejyY69RfJ1eEjxyua5wfw27q8=
Subject key identifier: 51:C3:94:2E:64:C3:B0:4D:1D:86:D2:C5:A5:DA:73:84:E9:5A:4E:3B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313CCBFCB4F1141F733CE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc08a670-3158-3793-b2cb-7039f4b4d202.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.28.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:cc:bf:cb:4f:11:41:f7:33:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e24c3e6e-38fa-4ab4-b47e-e4ad7f287f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a2:22:69:ad:37:6c:f3:4d:f5:b9:06:63:1d:
a2:24:4d:85:b6:6d:8b:a8:f1:17:7f:ad:f9:fd:a3:
f5:eb:4d:d1:68:27:f5:b9:16:42:a0:53:26:df:17:
ad:03:6b:3b:45:f2:4d:27:d7:ac:50:af:de:1e:ad:
b9:ee:19:b1:55:c8:5c:d7:da:83:fd:ca:b1:89:7a:
cb:c7:14:dd:97:90:41:96:aa:27:ee:29:b4:02:f1:
6b:04:c0:0f:fc:38:82:e7:dc:8d:92:b8:43:63:bf:
ba:39:9d:62:b0:e4:b7:51:a7:00:57:2a:95:89:ed:
6d:d8:c5:4d:bc:7a:59:7b:39:3c:ce:a8:43:79:fd:
cc:7b:c2:ca:fd:bb:d5:f1:ea:a7:35:cc:c4:46:ed:
15:fc:47:5a:3b:2f:0a:2e:99:93:7c:fd:40:07:9d:
c2:28:11:e4:c0:df:c1:bc:bf:73:4c:1d:74:30:8d:
e9:f9:81:b2:da:25:5d:12:e9:9a:27:44:9e:e2:cf:
07:a0:ef:9d:b8:a9:ac:46:df:26:f0:bc:50:de:9e:
91:57:f7:45:0b:a8:ac:e2:13:83:f8:29:e2:95:d1:
41:fd:6e:47:47:61:64:60:16:e5:26:64:1e:b1:d9:
58:39:c6:27:5b:7d:6b:dd:3d:dc:85:b0:ef:81:16:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:94:2E:64:C3:B0:4D:1D:86:D2:C5:A5:DA:73:84:E9:5A:4E:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc08a670-3158-3793-b2cb-7039f4b4d202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:42:bf:2e:19:45:3f:23:bf:1c:17:11:5d:0b:ca:09:14:0f:
65:25:4e:c4:e3:c6:ad:52:ed:6e:ed:2e:60:ec:c4:ba:4c:10:
ee:0e:f7:8e:e9:70:71:96:45:c5:3b:30:e3:22:a4:56:ef:6a:
08:2e:ff:a8:80:00:bb:0f:8a:bf:c9:36:cf:2c:dd:3d:cb:8c:
6c:82:db:46:3a:74:56:60:03:24:1c:43:ff:2c:57:30:c6:f5:
04:d7:ef:0f:35:80:41:33:5a:47:b1:1c:c3:8a:d1:31:32:64:
cb:af:c6:6f:33:78:92:28:31:12:23:3c:1e:ea:d9:07:92:fe:
fd:85:06:b2:89:7a:08:ae:80:e5:17:cb:5d:0d:ad:05:12:10:
e9:e3:30:af:e3:b4:80:07:df:59:38:88:2f:ad:98:b6:be:8a:
4e:6a:26:ae:17:3a:6c:71:cd:3e:bd:c7:a0:ce:39:c7:0e:1e:
38:fa:55:69:5d:c1:5a:96:98:7d:c3:ea:2f:6e:53:f6:aa:e7:
05:8a:47:0e:93:96:70:15:9d:32:ed:d6:8a:c1:71:c5:e2:48:
75:9d:23:2f:11:9a:2c:09:ea:bd:17:c2:d9:ab:76:3e:8a:26:
de:1d:28:54:0a:32:ea:ad:4d:10:50:bc:ee:73:2e:11:ce:45:
61:f8:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org