Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd300aea-a751-356f-bfb0-4aeab4d00c74.roa
File: fd300aea-a751-356f-bfb0-4aeab4d00c74.roa (raw, json)
Hash identifier: S3DuusmFrE65HIbGVQchTu7LXAWfXzJ1PuvOo0pwuA4=
Subject key identifier: 70:37:A8:BF:EC:9C:65:0C:34:50:6F:C4:4D:1E:12:29:30:BB:43:D8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316536D5B1CA5669BC1D100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd300aea-a751-356f-bfb0-4aeab4d00c74.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 209.226.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:53:6d:5b:1c:a5:66:9b:c1:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0fae31cf-f321-4759-8d30-d888154cca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:72:65:c6:a2:1e:64:c5:c1:0a:db:22:c2:
87:a6:fc:85:b8:df:6a:0d:ac:c4:78:e3:c3:a5:29:
54:c7:da:ce:c3:54:e5:99:e1:52:71:b7:2b:09:29:
c2:79:7f:26:72:83:bc:4b:a8:53:de:56:98:70:fc:
29:86:b2:c2:7e:57:42:e8:61:1d:da:88:03:3c:78:
cf:29:0d:5e:a3:4d:7c:4e:53:4e:d1:b9:3b:e1:98:
2a:04:4b:6e:b2:8a:3d:2d:dd:9a:dd:b5:a1:fb:f6:
6a:eb:17:fe:18:47:c0:be:ab:7d:1e:bd:16:5b:1d:
dd:61:92:6e:6c:5c:85:4f:dc:08:e8:34:0b:bd:26:
ac:97:45:86:83:c5:e2:92:6f:5c:b4:0a:7f:8a:65:
7e:67:8d:33:ec:37:94:ac:12:78:bd:8a:74:1f:bf:
eb:0b:74:b0:83:73:db:87:2d:50:be:9e:80:af:40:
58:61:79:41:5f:d6:5e:71:69:11:2b:6d:25:23:61:
56:af:0d:31:be:3f:d6:be:40:97:09:f3:38:ad:fa:
b1:6f:d3:30:04:3b:63:1d:7c:29:74:84:22:f9:0b:
fd:ce:0e:cb:57:e2:e4:35:e5:77:60:bc:3c:6f:9c:
97:9c:6f:ff:58:80:00:02:6a:de:c2:df:e7:1d:c3:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:A8:BF:EC:9C:65:0C:34:50:6F:C4:4D:1E:12:29:30:BB:43:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd300aea-a751-356f-bfb0-4aeab4d00c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:22:3c:8c:e3:d5:cf:44:e3:e5:21:c9:07:1d:50:cd:6b:6d:
37:6e:a1:31:03:ab:d9:28:6f:66:4f:ff:41:14:ac:50:ef:c3:
6f:1c:69:e2:06:fc:22:ef:e2:3d:05:90:58:17:fc:4b:03:ec:
e0:79:79:da:86:3e:61:3e:a9:76:de:98:7a:ad:2a:8f:9f:c9:
16:2e:1b:05:cb:67:90:13:55:62:3b:bf:fa:38:80:0a:31:31:
c4:b2:6a:a4:b3:27:85:eb:1a:1d:96:8c:02:1a:ca:c9:cd:3e:
d3:56:b3:0d:bb:e4:20:da:be:15:5c:80:8d:a5:c8:4a:97:3c:
39:06:64:0b:7f:fe:65:77:99:ce:fe:d4:8b:5f:c1:db:12:58:
88:ba:e7:70:24:23:e3:10:79:0f:de:6b:34:42:d0:c5:70:54:
67:cf:e8:57:97:87:b0:20:ae:5a:86:1e:13:03:07:df:fd:38:
e1:81:b7:27:97:64:5a:44:83:36:d1:4f:b1:62:84:5b:55:21:
17:82:c0:6b:6d:b7:d5:b1:7d:a8:13:fd:d4:7b:61:c2:86:03:
f8:98:fe:7c:cf:dd:d0:ae:b9:d1:ac:74:5a:d0:9e:0f:ac:30:
40:d2:de:ce:d6:d1:19:01:82:91:7b:e6:a3:7d:7d:98:4d:a3:
30:58:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org