Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/070d8702-d2b9-3cef-80c1-a448a2fe4b0c.roa
File: 070d8702-d2b9-3cef-80c1-a448a2fe4b0c.roa (raw, json)
Hash identifier: PtzxBqR31L1odG6WshS/lLJ2YBva54v9vartyM/Gg9k=
Subject key identifier: 75:6F:BC:AC:58:61:A5:14:D2:8F:42:99:48:2A:AE:A5:54:E1:03:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF74FC372D09E8CD10A15E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/070d8702-d2b9-3cef-80c1-a448a2fe4b0c.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 70.24.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:74:fc:37:2d:09:e8:cd:10:a1:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=1a6a2fec-b7dd-42af-9984-c55c4ec84f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:e2:e2:41:b9:65:01:c2:64:a0:e3:ab:70:
d8:3f:96:f0:b6:2a:e6:7a:1c:7d:65:e7:7f:e0:18:
c0:ae:62:8a:1a:fd:f0:4b:be:18:40:f6:e9:aa:96:
4f:db:6e:18:6c:1d:80:c3:45:85:49:84:ea:72:68:
aa:df:8b:bd:b5:b7:a0:02:66:0d:10:f5:92:dc:f1:
42:f3:a4:8c:64:87:13:0f:8d:30:28:e4:9b:be:ab:
10:49:54:ef:d4:fe:7d:ba:d2:f8:af:ef:fd:71:74:
30:7d:3e:45:3f:54:b2:df:60:4e:1d:a2:31:85:5d:
c1:df:72:c8:43:e1:87:fc:03:7b:74:19:29:aa:62:
2e:08:6c:de:d8:2b:2c:10:ff:7d:6e:6d:c1:49:9a:
b0:a4:9d:e7:3f:34:f2:0c:59:4a:f7:08:28:9b:7b:
f2:31:db:2f:f1:77:51:8a:b5:53:2a:f7:0d:77:20:
e2:1a:5e:28:a0:f0:c6:66:09:10:19:3e:6d:4d:5a:
3d:5c:44:03:7b:62:48:90:bf:10:4c:c6:32:ef:b9:
ef:29:5e:10:01:ca:9b:31:ef:71:75:63:39:c9:70:
6b:12:4f:55:06:6d:cd:eb:ac:58:af:2d:89:53:c2:
f6:5b:28:af:40:77:2e:60:63:3d:5d:70:dd:7b:23:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:BC:AC:58:61:A5:14:D2:8F:42:99:48:2A:AE:A5:54:E1:03:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/070d8702-d2b9-3cef-80c1-a448a2fe4b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:fd:c0:54:bd:a0:22:0c:75:68:53:a3:04:6e:4c:0a:1b:ae:
83:4c:07:d4:64:e7:fb:6e:a9:8b:5f:0d:cc:24:d6:0a:f5:f4:
b5:4e:74:99:97:6b:0a:71:2b:2a:f5:2e:74:d0:a5:7f:eb:ef:
d8:92:a1:cf:c0:b5:0d:ae:1a:9c:55:93:ac:f7:f2:da:31:c5:
a9:fe:41:28:4f:fb:10:61:2e:69:07:cf:43:49:06:18:6a:e6:
e8:78:57:d3:db:7d:2b:19:75:f2:01:e6:e2:17:b8:a2:9d:d9:
77:37:2d:f6:28:4a:bb:69:7d:22:90:76:8c:a1:9d:84:60:cb:
65:37:64:0c:36:19:8b:ad:a6:e7:d5:2a:be:f8:2f:d2:06:f6:
65:34:f1:00:35:a3:d1:ea:5a:29:6e:79:1f:a0:5a:e1:77:4e:
8b:66:8a:ba:3b:b8:be:f3:e4:f1:46:b1:1b:6d:7e:fc:fc:0b:
4b:c7:6c:2a:3a:b6:53:2a:f2:0a:76:c1:7c:f4:ef:96:33:16:
ad:88:dc:d2:32:c9:62:f9:40:fc:63:ea:7f:12:42:ab:a2:15:
ac:64:99:65:6c:9e:98:a9:04:26:5e:c3:29:ba:e9:f9:3b:b9:
8a:e4:b2:13:9d:cb:16:a9:c9:0d:45:ff:bb:4f:fa:5f:3e:1a:
ac:65:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org