Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02422228-00f2-35ea-8872-72d2e0798a25.roa
File: 02422228-00f2-35ea-8872-72d2e0798a25.roa (raw, json)
Hash identifier: 5x48IB5lNrbUj3wsdQhJfmJSA4hF3CTWuWRsKuiEwyQ=
Subject key identifier: 94:7B:77:5F:93:B3:48:72:C5:8E:8D:ED:B2:1C:22:17:2C:53:C0:22
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF74D81BCC1A1158C4E24D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02422228-00f2-35ea-8872-72d2e0798a25.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 40282
IP address blocks: 66.38.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:74:d8:1b:cc:1a:11:58:c4:e2:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=6d3b53a0-8d52-435b-9eeb-39ba8f2592f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:09:94:2c:bb:ee:78:eb:85:b2:2d:ce:8c:
83:65:f7:11:29:86:f1:df:38:ef:85:d1:75:48:10:
da:fd:fa:50:15:0f:e9:2b:55:ad:f6:4e:a8:51:cf:
26:ee:d3:58:e5:82:52:f0:d4:6e:e1:32:37:0b:70:
f5:7e:35:f8:00:09:83:9b:3b:b5:53:5b:12:b4:69:
68:50:ad:ee:87:2d:e7:0a:be:e4:c0:50:b8:24:e3:
2e:16:9a:92:eb:22:6c:ae:9f:7e:a1:6d:5f:ec:ca:
1e:5f:ca:32:7f:67:fb:5c:90:fd:a1:f0:dd:93:d9:
54:92:01:d8:2b:cc:14:8c:13:98:ab:5f:4a:99:27:
67:9f:f3:cb:d9:42:9c:d6:ea:e0:0c:23:88:a5:62:
69:8b:8c:2d:9b:c2:e8:62:0c:6e:65:d1:d6:1a:65:
e5:a5:e4:29:8c:0c:c5:0e:e7:74:f1:c1:cf:2b:d6:
63:87:ab:24:6a:9f:cd:7a:c9:6a:00:ff:26:7d:2a:
e0:26:20:36:84:51:7a:86:84:d8:b4:48:43:10:1a:
2f:cc:d4:71:a1:2a:10:7a:1f:b4:60:a3:06:94:a3:
b3:50:24:ce:18:df:14:e6:2c:77:43:47:38:a8:93:
08:2e:c4:66:63:a6:fc:79:02:62:46:64:d1:d0:ac:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:77:5F:93:B3:48:72:C5:8E:8D:ED:B2:1C:22:17:2C:53:C0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02422228-00f2-35ea-8872-72d2e0798a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
66.38.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ca:10:81:1c:45:91:b2:d5:8b:9d:af:50:54:f7:5b:81:5d:
84:dc:6e:cf:59:c0:8f:ec:4a:d1:45:3a:bc:59:a6:e1:78:73:
1d:41:a7:54:1d:02:7d:b5:50:d0:a0:45:fe:ba:5e:c8:f6:6d:
82:f4:d4:69:5e:49:50:cf:b4:36:3e:0c:ef:44:c0:27:c2:ce:
97:14:ab:66:b4:08:1f:d6:be:05:2a:b4:63:05:19:11:5e:77:
bf:f0:81:33:cc:9a:65:45:4a:62:e6:51:5e:d1:54:fe:98:4c:
7c:a5:c3:98:7e:b1:a9:0b:28:cc:91:34:14:88:28:26:c0:b3:
23:02:6c:3e:9a:81:08:b6:d5:02:13:10:cc:a4:7f:68:6a:3a:
d7:55:c1:3f:29:ef:5f:a0:b3:e3:cb:6e:a1:73:6a:9d:a5:fd:
b9:21:8a:cb:61:a9:3c:9d:da:05:b2:94:15:11:68:2c:00:81:
a0:2d:d2:cb:1a:77:26:6a:f9:42:cc:3a:01:58:81:c8:7b:18:
73:51:28:09:b9:53:5a:3c:8a:10:38:e6:cd:c4:7c:68:f8:0d:
59:1b:b4:2a:1f:2b:96:02:a0:70:31:f9:cb:27:db:bb:bc:85:
ff:d8:5e:95:42:f2:1f:2d:14:8f:f7:2d:b0:d9:fe:7b:13:7e:
84:be:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org