Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10668906-9957-39bc-be45-f9d35d9befa6.roa
File: 10668906-9957-39bc-be45-f9d35d9befa6.roa (raw, json)
Hash identifier: jmwrxqbmYJuRl8EGwcWoS3U9CM7YpxM7CWmjw/v6Wac=
Subject key identifier: 28:B3:D8:B9:83:A5:0B:F3:C1:73:DC:6B:78:33:F3:1D:46:BA:5C:0E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315001D33C9D5165951DCF1
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10668906-9957-39bc-be45-f9d35d9befa6.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:00:1d:33:c9:d5:16:59:51:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=92ec9f2d-b092-4697-bcbc-bc9e812c10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:c0:7f:6e:90:40:b1:56:67:08:a8:c3:38:
74:02:d9:e0:62:cb:62:e5:7f:99:e8:96:d1:88:5d:
ca:39:5d:29:77:22:33:46:e5:2e:28:4b:9d:be:fb:
aa:b4:a0:df:5f:89:03:42:23:c6:1d:62:22:1e:73:
a1:25:19:32:67:29:b4:d8:e7:16:1b:d2:b6:c0:da:
33:29:df:d1:90:20:5c:24:41:af:d6:68:5d:69:63:
78:24:9d:bc:d4:10:e0:b9:c3:ca:1a:49:0d:64:88:
41:b8:02:39:32:ac:81:d7:4d:7a:11:d6:b4:46:c5:
74:bf:ab:be:28:7f:1b:b4:bb:80:06:e3:3f:dd:82:
61:28:1f:00:05:47:f6:c2:70:3c:10:a3:b0:fd:4b:
06:a6:d5:3f:ff:62:90:9a:05:f5:a2:bd:62:47:75:
6a:cc:a6:49:7b:b2:28:52:97:70:15:cc:8d:39:e1:
c3:d1:97:6b:95:72:5a:4a:79:0c:c2:07:83:97:4b:
4a:5c:9f:9b:9c:e0:57:08:49:23:75:10:8f:59:4e:
05:bb:9a:c6:5a:f0:c7:0e:70:ee:d7:73:f2:bf:89:
23:08:f8:36:67:d7:05:6b:8d:59:1b:88:74:ec:ab:
d0:47:f0:a9:dc:d5:8f:d2:3d:d3:bb:53:bc:97:cf:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:D8:B9:83:A5:0B:F3:C1:73:DC:6B:78:33:F3:1D:46:BA:5C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10668906-9957-39bc-be45-f9d35d9befa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:69:1c:de:c4:82:03:26:6e:1c:1b:a3:14:0b:28:f4:d1:e7:
d8:50:8b:44:22:66:fa:63:1a:2b:c7:98:da:d0:e6:42:80:29:
11:77:c4:d3:3b:04:5f:5c:71:29:f9:01:82:1a:ce:6e:6d:b9:
80:ff:30:a9:b4:f8:b3:e9:22:2a:73:2f:37:0a:77:99:41:29:
a6:2c:2f:3c:00:31:57:bb:54:a9:a2:01:9b:bc:5e:9e:7c:2b:
e8:96:32:4b:4a:dc:ef:fa:9d:e4:4f:79:ec:3b:e3:32:df:e7:
99:da:87:95:99:73:c4:3e:74:e5:90:17:08:dd:d0:28:05:32:
8e:b1:c3:42:9a:c6:9b:eb:4f:50:41:61:15:ff:7d:c9:cd:92:
80:95:86:9f:5d:01:1a:82:db:02:bf:22:e6:3e:2e:5b:79:ba:
03:6b:2f:6f:b4:ef:08:ab:39:96:13:2d:49:05:f2:0c:38:56:
d0:f0:d4:b9:2c:b0:c5:38:e5:6d:6d:35:d2:26:84:0c:83:cc:
ae:d6:da:86:20:24:30:31:83:ac:a7:29:c6:32:cb:02:a3:a6:
0f:39:4c:45:b0:bb:df:15:ed:57:09:d8:95:bc:fe:68:b5:f4:
db:76:b8:e1:69:a0:ec:aa:64:51:99:6f:87:14:17:5d:51:94:
08:f6:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org