Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bc5a0b3-be43-3c87-b46b-e4eaeb22ae3f.roa
File: 0bc5a0b3-be43-3c87-b46b-e4eaeb22ae3f.roa (raw, json)
Hash identifier: oOq9geEycwAUlKO7xFoTKwHDGZa9xUvIu9xjjtawit8=
Subject key identifier: 73:BE:F6:C9:1F:B9:03:F2:B4:2D:58:1D:F1:CB:37:F7:CC:4E:26:2F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFF5BC341455E311287560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bc5a0b3-be43-3c87-b46b-e4eaeb22ae3f.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 25946
IP address blocks: 204.101.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:f5:bc:34:14:55:e3:11:28:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=219c7d49-2137-4860-8e6b-38cbda81c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:b2:6f:c2:37:f6:47:62:10:1f:15:b4:7b:
a2:43:d2:6d:a1:92:0d:d4:08:5a:16:17:d5:52:b3:
cc:b1:e7:a4:1d:7e:27:53:cc:57:7c:f9:9e:a0:b2:
a3:db:0d:aa:a8:cc:d2:b6:51:d4:1b:d9:98:00:8e:
57:8f:bc:32:fd:17:66:19:9a:4b:5d:c2:65:bb:96:
ec:93:18:11:f0:32:71:89:8f:16:89:41:14:f2:b1:
b3:60:4f:68:19:d1:6a:19:41:1a:ba:d5:b0:a5:6e:
f8:45:ca:a5:3f:41:cb:15:df:2e:1a:20:7b:a1:aa:
02:a3:4d:3e:b7:1b:59:50:4e:94:9b:2f:7e:3b:a6:
72:af:bc:eb:f8:38:55:62:18:1b:88:9d:f0:1a:3c:
e4:20:c0:bd:6f:8a:3b:f5:7b:19:eb:98:ab:e7:8f:
03:5b:c3:91:76:93:73:6c:3c:ee:7b:35:fa:12:a4:
f8:ab:fc:8e:15:4d:d8:a2:89:e0:01:b1:8f:ce:d0:
47:ed:17:fe:39:36:22:d2:5c:4e:07:92:6d:e0:06:
07:03:d5:28:b6:b8:6d:9d:91:af:0e:84:21:9d:5f:
c3:7f:2c:8f:72:c0:0e:43:cb:33:d7:6e:8d:16:57:
71:72:5f:1d:8e:fc:e8:60:9d:35:9b:97:44:8f:85:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:F6:C9:1F:B9:03:F2:B4:2D:58:1D:F1:CB:37:F7:CC:4E:26:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bc5a0b3-be43-3c87-b46b-e4eaeb22ae3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:57:95:ae:94:17:7b:41:3e:a0:27:3c:4c:90:71:0a:0a:c2:
9a:2d:89:46:d3:21:3e:ed:e5:d9:86:d9:f6:89:82:8a:98:8e:
80:d6:09:ed:7f:97:ab:82:69:93:73:16:d6:6a:42:4e:0e:c3:
96:d6:78:86:18:5a:28:4e:9d:99:4b:bd:d1:cc:2d:42:c8:1c:
8d:ae:25:1d:cb:5c:db:25:e4:ed:85:a6:3c:44:f8:5e:0e:16:
4c:0a:56:6a:cf:7c:dc:df:4e:3b:f6:a5:d1:4d:be:58:b2:0f:
37:42:b5:de:c9:94:ce:a1:48:55:91:86:c1:24:2d:57:58:d0:
d2:8e:48:d4:40:35:52:86:10:24:fe:32:8a:f7:df:24:6f:63:
20:fd:91:ab:69:1f:b5:81:47:2a:c9:44:c9:47:c4:3b:b1:43:
5f:08:a7:46:24:f8:43:1f:11:7d:29:c0:bb:8d:7f:37:e1:ca:
f1:1c:b1:6b:3c:1e:3f:46:93:24:65:cd:b7:cf:13:4f:73:f7:
bc:5d:c2:18:db:49:a1:96:65:a7:ae:58:89:e8:e6:79:38:90:
01:cb:41:76:af:c7:17:1d:82:e7:60:ae:50:07:5b:bc:1e:48:
8c:bc:e3:96:67:6c:80:cb:e4:3c:a1:f2:0d:7b:af:8d:08:eb:
17:07:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org