Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/074a0eb4-55ba-39df-9f74-7808df045a00.roa
File: 074a0eb4-55ba-39df-9f74-7808df045a00.roa (raw, json)
Hash identifier: dXI69vzAuweZ8Niw275lhR9LR3yk3RDMvhsnE0z1Ucc=
Subject key identifier: A5:06:F7:01:A9:69:A0:B3:21:2B:47:3A:CD:92:C0:98:7E:AE:76:FF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5AA424283E57E48842780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/074a0eb4-55ba-39df-9f74-7808df045a00.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 40575
IP address blocks: 209.128.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:aa:42:42:83:e5:7e:48:84:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a3e11936-b3fb-4a76-865c-c328d39e62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:c3:52:58:34:23:0d:ca:7a:1b:2d:06:1e:
eb:02:2e:38:c5:15:04:03:73:20:1e:4c:73:ea:7f:
99:e6:25:cd:e3:6e:2b:9f:ca:71:de:87:7b:96:34:
84:c6:2a:21:92:ab:23:25:02:e4:05:12:c1:06:9e:
ee:e0:cc:d5:da:67:bf:4c:0f:17:13:f7:25:fb:e0:
fe:c7:e9:eb:92:a3:2a:0e:e6:b3:7c:68:73:bc:fd:
33:83:5f:f8:74:09:82:78:4e:78:b3:0e:03:7b:a9:
48:93:8b:18:b2:9a:b7:0c:d7:6c:e0:d9:be:4f:1f:
16:88:9e:5e:33:f5:bd:01:ac:11:63:49:6b:fc:e1:
b4:53:9b:89:bb:e9:d2:9c:37:d6:f5:c7:16:b8:13:
d2:35:22:41:98:09:5f:54:24:f2:da:66:33:d6:6f:
cd:f0:a4:7e:06:4b:c9:52:7f:46:94:19:3f:a3:2b:
62:eb:d3:f4:c2:67:ed:ed:48:85:57:b6:78:26:8e:
19:6c:10:ee:1f:b8:d5:17:37:98:7e:ff:61:3a:e4:
ee:65:d0:75:17:a2:53:7a:f9:e1:28:76:fd:2f:b8:
5e:7b:99:35:e6:a4:34:f2:2c:d9:32:a2:df:bc:00:
7d:58:1f:f0:b7:c0:da:25:ce:1a:92:dd:bb:fe:85:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:F7:01:A9:69:A0:B3:21:2B:47:3A:CD:92:C0:98:7E:AE:76:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/074a0eb4-55ba-39df-9f74-7808df045a00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:dd:fa:2e:d7:2c:f3:f9:90:4c:c0:b9:9c:af:12:69:70:38:
f2:d8:ec:de:f4:9a:8a:b4:6d:ac:aa:24:1e:bd:7f:5a:49:41:
9f:87:91:31:1b:b5:28:1a:71:36:dd:39:02:e9:ef:a8:20:64:
5e:22:ac:8d:fa:cc:0a:d9:f5:7c:3e:cb:16:0a:58:93:41:14:
17:87:f1:71:10:10:14:62:fc:1d:f3:b7:e0:60:b2:68:6f:b4:
c5:2b:8f:99:02:7c:e5:59:ea:dc:34:2f:dc:d0:21:62:af:3d:
c9:c9:46:93:1e:6a:2d:fe:4b:2b:09:e7:26:dd:cc:ee:ce:05:
87:24:46:83:48:59:9a:85:69:9c:7b:3c:16:0d:1c:4f:00:4e:
2d:5f:f6:8c:8a:c7:8e:b8:a8:e2:9c:6d:d8:a9:7c:9b:3c:b4:
57:27:ef:a6:ea:91:7a:31:db:ad:8a:c0:52:29:39:30:06:cc:
92:fb:ca:59:67:c4:76:0c:f8:e8:f6:22:77:84:12:35:95:ab:
30:72:78:62:45:f4:b4:f0:a8:ae:66:b6:ff:fc:76:c8:53:2c:
c0:c7:b1:ff:ad:f1:9b:39:00:44:45:de:fa:ac:13:39:ca:0e:
f7:6e:2c:48:0b:e7:52:c5:88:2c:70:31:31:6e:1b:b3:44:4a:
21:88:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org