Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059b9195-7515-38b8-aacf-939fe472bbdd.roa
File: 059b9195-7515-38b8-aacf-939fe472bbdd.roa (raw, json)
Hash identifier: P0/EzNSDfRF3bAEljVh1C/PmLmUZJLXk1qj/ycgFDLY=
Subject key identifier: 3A:55:B6:94:BA:78:63:38:2E:C5:F4:22:FC:8D:72:FB:6E:EB:FB:61
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315D3CCE553A8528A4D2580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059b9195-7515-38b8-aacf-939fe472bbdd.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:d3:cc:e5:53:a8:52:8a:4d:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=c89290cc-f26c-4bad-b73d-4875a513378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:39:66:28:9a:3c:ab:f6:82:11:b1:e0:5b:
56:33:55:7a:ac:d6:36:bb:bc:90:97:30:2f:54:ad:
dc:11:ad:a7:27:cb:c3:b7:56:cb:b2:f9:c3:0e:10:
72:c0:9b:33:fb:ef:d9:e8:e1:c9:42:4d:57:05:5a:
06:e4:e7:98:26:0b:19:59:89:eb:0e:4d:c9:7f:a9:
ea:41:15:34:9f:86:e2:60:5e:83:b6:68:8f:ec:14:
9a:83:b5:3c:77:f1:76:aa:7f:4d:91:59:d5:cc:b4:
89:eb:91:e5:56:94:6c:45:43:ee:5c:77:7e:d8:20:
8c:b0:70:75:c7:97:eb:45:b7:ec:ed:50:07:06:8a:
f5:b2:e0:07:36:a3:71:61:01:68:73:d5:84:70:cf:
e7:9a:20:38:c2:1c:a6:5e:b4:d2:83:89:f9:5b:94:
33:bd:c4:ab:9e:eb:9e:d1:0c:55:fb:2f:4f:89:99:
d6:46:a4:33:46:2f:05:f0:f1:88:3a:18:05:b5:b3:
e8:22:91:df:54:f9:75:ac:99:93:29:9d:2f:59:eb:
6f:35:60:17:ce:ef:6f:71:f2:b0:3e:fb:7a:54:01:
d9:6e:32:e3:92:58:4e:44:47:52:44:a8:4d:6e:b0:
8d:0f:b5:84:4a:84:de:eb:51:02:9f:51:a0:98:e2:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:B6:94:BA:78:63:38:2E:C5:F4:22:FC:8D:72:FB:6E:EB:FB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059b9195-7515-38b8-aacf-939fe472bbdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:a0:48:59:db:85:38:b4:3b:52:25:38:a6:af:ef:e7:99:d1:
1f:9c:14:ed:ef:36:aa:c3:25:e7:f9:f7:5d:6d:ac:98:8b:5e:
28:99:66:45:bf:99:27:4b:63:25:a9:cb:88:5d:77:b2:88:f3:
54:f9:24:7f:10:a4:e2:fb:52:d8:e3:69:c4:ea:16:73:a5:9d:
e8:53:39:47:b4:f1:06:ff:7d:f6:86:4b:85:4a:5c:23:8b:68:
f7:ae:5a:e6:8b:bb:d7:9c:7b:13:0d:c0:80:cc:09:e4:d6:78:
36:cb:a8:f5:f7:a1:58:6e:be:1f:6f:d5:37:80:c4:26:5d:67:
dc:1b:13:c5:59:fd:cc:ab:c4:f3:9d:7d:a1:a5:92:7b:81:ff:
ab:d9:bb:7d:4f:08:dc:e3:66:07:5d:52:29:51:11:70:ec:7b:
37:01:84:1e:86:ac:98:9b:9e:77:d9:c5:f6:d8:b4:99:af:5e:
f1:17:8b:13:6b:3e:86:5f:05:a4:e4:9b:cb:8c:90:3b:ab:67:
ed:ed:59:6c:ea:6a:d4:45:95:fd:50:de:a3:92:8f:84:b5:fc:
34:b5:ec:39:95:18:88:6b:41:a6:19:ea:b7:8c:e7:ca:29:a6:
ea:f8:3e:84:96:d4:ae:c5:22:42:e5:56:ed:72:eb:71:41:aa:
48:4c:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org