Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c97522c-17bf-326b-9d50-38166244c6d9.roa
File: 0c97522c-17bf-326b-9d50-38166244c6d9.roa (raw, json)
Hash identifier: lyp463UFgvHbuh+znj2vtjJpNnbdIK/Aa/eIgJhAbRg=
Subject key identifier: 6D:C2:DE:A5:D0:57:FC:C6:CE:1D:BB:21:EB:82:15:ED:BE:EE:DF:A1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE435D6F2AE2886E5AE8800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c97522c-17bf-326b-9d50-38166244c6d9.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 70.26.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:35:d6:f2:ae:28:86:e5:ae:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a5a790c2-9cf2-4405-86a5-8defa7a49dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:4b:8b:ea:44:d6:6c:67:fd:d5:60:e5:b0:
61:41:6e:b2:74:7d:f4:49:48:59:10:13:8c:e0:ed:
40:03:a8:37:a3:2e:da:ba:da:55:17:49:ee:3b:a8:
f9:76:28:46:2f:b0:87:22:a3:78:fb:ad:6c:b0:95:
5f:68:66:44:bd:06:db:79:ba:8a:ec:c1:1a:7a:a0:
c6:8d:b2:40:03:2c:71:74:0c:6e:fc:3f:f1:57:06:
d2:ad:94:fd:d4:5c:00:0c:ff:30:3c:f1:4a:f8:75:
67:1e:e1:0e:39:86:6d:b6:51:96:92:a4:49:53:82:
cd:ef:a1:b2:9d:25:bb:28:92:ea:93:48:b4:9b:00:
8e:af:e1:63:d4:a4:bd:65:5f:dd:2c:01:00:62:82:
d4:ff:e3:70:d0:c1:c4:da:4a:1f:d8:a0:3d:ad:39:
74:1e:6d:2b:a9:c2:30:ef:44:54:eb:10:25:19:45:
af:19:8e:f5:c1:b2:f0:86:45:49:29:35:8f:fa:b8:
2a:73:b7:6c:08:ba:ee:ee:69:1e:f8:d1:90:d2:cf:
00:1a:f6:8c:1f:b2:ad:fb:1e:f9:41:b2:95:05:ee:
f3:64:c6:f9:77:ee:8b:c4:9f:bd:c1:43:1d:23:83:
2c:aa:2a:13:45:96:e0:a1:33:c6:99:7b:ae:96:7f:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:DE:A5:D0:57:FC:C6:CE:1D:BB:21:EB:82:15:ED:BE:EE:DF:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c97522c-17bf-326b-9d50-38166244c6d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:aa:b3:18:c6:6b:7d:e5:6e:73:dc:28:3e:b9:63:e8:4a:0e:
28:cf:e2:cf:e8:9f:dd:e3:86:b7:86:90:f6:99:d2:04:d6:ee:
3f:3e:fc:6a:70:15:8e:7f:fa:37:64:5e:4a:68:ac:bc:83:ab:
c9:db:c4:e0:ef:07:0e:a3:b9:7f:3f:ff:9b:cb:1a:ba:6b:89:
90:65:6e:1d:e1:00:5d:f7:ab:fd:5d:c8:10:2e:4d:a1:57:56:
aa:bc:db:df:3d:07:54:9e:5b:fb:97:1b:48:cf:be:7d:c1:16:
66:47:02:7a:a1:92:c5:83:85:11:65:d7:50:af:c1:1d:c5:8e:
01:74:c6:a3:dd:46:bf:32:43:b3:ab:0c:fe:3d:9d:b9:85:bd:
e8:dd:91:76:3f:3a:75:d0:19:26:af:db:c7:ea:b3:4f:2e:c7:
99:e7:81:a8:9a:5b:4f:61:f2:b3:ff:b4:3a:7c:74:46:84:a5:
89:fd:44:e9:35:bc:7b:8a:b6:0d:2b:79:34:a4:ca:2d:75:fc:
c6:9a:32:05:aa:3e:aa:cf:59:8e:67:17:65:f6:ba:91:38:bc:
3e:9c:b4:64:da:c3:56:59:6d:47:a1:6e:61:ea:08:62:f2:1d:
bc:e6:1a:a2:26:f6:0f:c4:e9:9d:26:e4:fd:31:9a:c0:3c:f9:
56:86:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org