Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bce7d89-aa41-3eaa-92ac-8a51a3c8b86a.roa
File: 0bce7d89-aa41-3eaa-92ac-8a51a3c8b86a.roa (raw, json)
Hash identifier: 8yN+TkmeKD1/SXghSmNqQw6UatLEwZz2XjxOdUvTY+8=
Subject key identifier: DA:C3:46:7B:06:DD:2E:FB:8E:92:D3:79:A6:D8:A6:11:D0:7D:6F:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844204F0727419B64CB9C294210
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bce7d89-aa41-3eaa-92ac-8a51a3c8b86a.roa
Signing time: Tue 05 Dec 2023 12:00:00 +0000
ROA not before: Tue 05 Dec 2023 12:00:00 +0000
ROA not after: Wed 17 Jan 2024 05:00:00 +0000
asID: 12132
IP address blocks: 199.243.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:4f:07:27:41:9b:64:cb:9c:29:42:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 5 12:00:00 2023 GMT
Not After : Jan 17 05:00:00 2024 GMT
Subject: CN=d4f34e1d-96a5-494f-a28d-0ce65d5176ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:79:66:38:90:e0:3a:cd:61:a1:14:c0:21:
ee:b1:79:46:39:ae:cd:f0:36:c0:fb:1b:3a:75:b9:
5a:1f:75:3c:d7:4a:1b:75:15:1a:08:6d:c3:64:77:
c5:2f:61:06:78:e2:aa:81:fc:9c:80:79:f0:85:05:
90:b0:fa:cd:5f:f4:f2:0d:be:f8:7a:d6:de:8d:b0:
6a:bd:18:bc:33:30:9c:0b:c6:ae:30:95:ba:c2:93:
36:63:4d:73:0a:e3:43:34:c8:3a:92:a8:2c:fa:52:
fd:a9:99:80:15:04:79:8a:fe:10:76:e4:e0:e2:e8:
46:89:d4:cf:90:e4:d4:fb:93:d9:f9:7b:1a:16:21:
89:fd:07:7d:33:6c:d3:70:29:08:64:47:10:7a:75:
de:0c:64:f2:c4:ee:2c:fe:63:da:cb:9b:10:b9:2c:
07:a6:6c:00:a7:2f:bb:5c:5b:98:17:e9:08:d7:5a:
33:77:57:0d:e3:89:01:e1:4f:d2:e7:f4:0d:b9:c4:
b6:1d:95:2b:99:6d:b5:a7:e1:46:9c:17:e2:16:a4:
2a:2e:57:9c:69:85:5c:c9:6f:dd:ee:27:96:34:8d:
3f:ab:93:67:5a:01:fa:55:e9:40:7c:1e:6c:45:b4:
22:84:26:66:5a:a9:31:cb:55:45:ec:bf:bb:3f:c6:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:46:7B:06:DD:2E:FB:8E:92:D3:79:A6:D8:A6:11:D0:7D:6F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bce7d89-aa41-3eaa-92ac-8a51a3c8b86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:dd:93:75:de:f6:7a:28:5a:6f:a7:35:fc:2b:b4:a6:2f:b7:
28:79:5b:20:0b:dd:aa:8d:5b:c8:8b:ca:d9:27:a7:33:80:b5:
d4:8f:63:15:93:e7:00:3a:1b:4e:7a:99:c4:64:37:62:22:76:
cb:c8:04:98:f4:72:e6:64:15:94:59:16:29:85:37:35:19:f6:
55:cb:2f:4c:cc:e2:37:86:cd:18:03:8c:81:d3:c3:81:62:67:
ea:26:1b:7a:59:48:a4:aa:c6:fa:0f:a7:d7:97:7c:cf:2a:c7:
d5:f7:ac:fb:11:0e:c9:1c:75:b9:5c:ee:e5:77:a4:13:50:9a:
ff:f0:33:03:66:a3:4f:0c:31:18:e7:3f:47:d3:3a:a8:ec:6e:
6c:13:0f:10:08:74:e6:75:1f:5d:ae:ff:32:a8:89:99:3f:e5:
0b:3a:bb:4a:d9:65:bc:27:8c:66:8e:14:b9:86:57:d1:79:5a:
87:9f:7e:5e:af:05:94:bc:cf:e6:fb:38:c3:42:75:85:34:7e:
4e:6f:9d:0c:0f:12:d7:8f:ae:bc:46:2f:0d:05:8a:fa:d1:0f:
d6:db:1e:e1:87:5f:91:ee:74:f9:5a:c8:c8:f0:3c:fc:3a:51:
35:b5:ae:b5:fe:61:6d:12:d4:e3:3e:48:a1:ef:21:52:17:d1:
18:50:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 06:41:16 2024 by rpki-client on console-fra.rpki-client.org