Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c473cac-7f6b-3d17-8ab6-8b1138374585.roa
File: 0c473cac-7f6b-3d17-8ab6-8b1138374585.roa (raw, json)
Hash identifier: 5or6gpcfSpqBLZ2ankwCwTGAi22paNgoYrnaSUvmnSc=
Subject key identifier: 0E:5D:4E:08:6B:37:83:95:72:FB:B2:4B:03:E0:C5:29:CA:BF:2A:07
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB01E8B0F0B78A611E6FB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c473cac-7f6b-3d17-8ab6-8b1138374585.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 204.101.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:1e:8b:0f:0b:78:a6:11:e6:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=7c4c06f6-cf06-42f0-8bd7-55ee1e5b9337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:e7:d2:76:c7:c5:45:26:9b:89:a1:cd:45:
8c:44:db:ad:b1:45:c3:36:7c:49:81:dc:2a:28:30:
4e:4a:0e:85:54:9f:eb:8e:47:7e:47:92:13:6e:4e:
9c:6d:fa:b9:c4:d7:eb:38:e3:d9:5e:83:f1:61:3d:
d4:31:bb:79:ec:8a:5e:4a:f7:c6:f7:b6:1d:6b:c6:
a0:e0:14:07:76:c6:0d:f4:6f:1d:6b:35:ca:2e:bb:
0b:ef:00:29:bb:5f:8a:c3:b8:88:4b:b0:ed:bf:d2:
52:d2:0b:62:a8:1c:1c:5a:7f:80:51:75:2c:c4:f6:
5f:24:10:f9:f5:20:d7:51:2f:25:41:1e:09:cd:a0:
fc:ac:7a:46:d8:ad:68:d6:06:9f:ae:d5:82:db:67:
9c:e7:b9:7e:a6:38:2a:7e:98:c6:1a:c8:81:d8:a9:
77:e9:64:87:ad:89:49:52:df:d8:68:1e:9b:4e:66:
85:77:71:6c:d9:fa:6a:5c:48:8d:89:39:3a:d9:5c:
12:58:b4:1d:1f:78:65:72:f0:54:3f:26:30:88:29:
1d:5d:3e:37:ad:77:e5:85:82:a7:0d:e4:54:34:dd:
b6:c8:41:7e:ac:55:71:65:8e:75:cb:cf:fd:4c:7c:
81:c2:2c:ed:30:35:28:38:27:a7:03:b9:16:f1:1e:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:4E:08:6B:37:83:95:72:FB:B2:4B:03:E0:C5:29:CA:BF:2A:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c473cac-7f6b-3d17-8ab6-8b1138374585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:6c:1e:2c:fc:5b:1e:6c:54:c7:ae:3b:79:b5:72:d9:ce:95:
6c:a7:c5:3d:4b:d1:85:a3:f3:43:b7:4c:fa:c4:4e:a5:c6:ca:
9c:26:fb:e5:68:20:db:de:32:29:f2:a3:1b:92:09:52:d0:08:
4a:59:2c:02:68:3b:12:25:dc:a7:6d:ed:b5:50:c4:c4:21:0e:
d5:32:e6:9f:67:5c:3f:1e:fa:97:f6:6a:ce:c5:7c:20:04:4c:
92:90:a5:75:74:72:a2:66:96:6b:87:c2:f9:93:52:9e:c4:7e:
d2:47:38:f3:da:99:f0:ef:7e:77:0a:47:94:01:b6:82:dc:1d:
bb:73:d5:08:5f:21:2e:3e:33:86:3d:ca:4b:65:c1:6a:22:73:
35:ad:07:fc:b9:bb:bd:3f:c5:a7:c9:85:f7:e8:43:13:3d:a8:
2c:cc:98:48:9e:75:cf:15:40:12:34:b1:09:77:2a:8f:d7:5e:
5d:b7:03:76:3c:ad:92:66:02:40:81:04:66:af:a9:c1:95:36:
e3:0f:f1:b0:48:54:74:83:75:cf:23:7f:bf:3c:18:73:23:a0:
b7:e5:c9:dd:0a:6e:3f:db:4d:53:3f:d2:fd:8b:5d:49:0d:2c:
40:f0:c5:ef:75:06:9f:05:5d:23:10:7c:24:79:28:11:c5:01:
a7:63:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org