Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f78e262-a316-331a-881a-1a74fb250949.roa
File: 0f78e262-a316-331a-881a-1a74fb250949.roa (raw, json)
Hash identifier: Gd2gqdl1Au4gTZw+9E6SljZC/D8Iyg2WhKoYznfx6K8=
Subject key identifier: 59:EC:2C:63:8C:1A:13:AA:E3:E7:AE:5F:1D:BC:D4:66:9C:12:D4:BD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0115BEA0733EB8CBBA240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f78e262-a316-331a-881a-1a74fb250949.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:11:5b:ea:07:33:eb:8c:bb:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=41cb49d1-b14d-4638-a884-3f329c511f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:b8:9e:3a:86:bc:8e:6e:e6:2b:c4:a7:63:
1a:c6:86:f1:fe:55:b5:3a:a0:28:b1:b3:af:8c:90:
02:f7:ed:49:5e:3e:1c:c0:f2:5e:20:f5:61:57:24:
b9:ac:cc:b6:4b:6d:71:12:be:7a:df:8a:1c:82:be:
5e:3b:48:1a:8b:35:94:16:a4:c9:1c:52:81:13:af:
1c:7c:65:80:a3:12:68:35:ea:3a:54:a9:e9:5b:9f:
1b:1d:92:04:7d:ec:9d:d7:2c:96:fc:b2:e2:32:72:
4b:30:7d:2b:54:8a:8c:96:0f:dc:1d:24:b9:76:49:
15:6b:67:3b:e6:cb:00:90:c1:78:72:fb:f0:e4:31:
e2:83:e7:6f:2f:a5:97:83:cc:9c:e1:f9:8c:2d:05:
7b:2b:e3:1a:e6:5d:54:94:ed:43:e4:f7:3b:78:43:
1f:df:46:87:74:d1:44:d4:a0:1c:48:4a:8d:99:89:
5b:a6:24:63:ca:5e:35:84:90:0f:fc:7b:62:b8:88:
29:3b:fa:34:1b:22:f5:c2:3c:29:58:50:18:fc:d8:
fa:33:15:37:c3:23:33:6d:ab:99:d5:ff:58:5b:6c:
67:bf:22:ea:1e:4f:09:ab:6c:70:35:12:22:b0:73:
b8:53:c2:db:96:82:3a:bc:82:41:db:96:eb:77:ae:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:2C:63:8C:1A:13:AA:E3:E7:AE:5F:1D:BC:D4:66:9C:12:D4:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f78e262-a316-331a-881a-1a74fb250949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1f:70:90:fc:a3:0e:10:d6:32:d1:33:77:e9:67:06:7a:7a:
35:e2:b1:91:cc:02:a4:75:ee:00:1b:d5:5b:6c:ed:56:74:34:
d4:0d:fc:a2:4f:e6:0d:8c:e1:4c:84:41:65:14:ed:23:ef:17:
d0:39:85:1b:5b:f9:08:33:fb:67:65:31:2e:2e:20:7a:75:fa:
56:0b:d2:8e:01:d0:77:d9:e6:44:8b:d2:78:54:a1:3c:9e:a5:
d9:b4:84:3e:c5:54:cc:f2:80:18:e0:eb:a8:e5:f8:60:6d:45:
3b:6c:1e:73:b0:c9:2d:ff:2a:9c:e5:a3:a2:44:b3:25:32:70:
14:64:51:3e:e8:5b:96:c5:ad:df:81:21:5a:ef:61:9e:d5:f2:
38:0c:58:9b:e3:25:25:c4:c2:07:02:24:bc:43:00:87:17:d8:
7a:3a:a5:14:2b:61:a0:b8:70:38:dd:e6:45:e6:7f:24:20:9f:
49:a9:83:a1:b6:be:8b:e1:44:41:d7:2d:28:e4:b7:38:29:54:
2c:34:e3:11:3f:05:b5:63:a3:b0:eb:ea:41:d9:68:bf:35:46:
2d:0a:56:18:e5:1e:fa:af:c2:55:58:69:b7:7a:7e:66:e4:02:
e1:37:01:eb:8d:68:a9:45:09:70:ce:41:aa:ea:3d:21:1f:5f:
e7:a7:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org