Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ac1041-563d-35d3-a496-894b882c9deb.roa
File: 10ac1041-563d-35d3-a496-894b882c9deb.roa (raw, json)
Hash identifier: dF/1FityYuVvGQ7VPtsrYFPvoKAOp34Lycd2jVkAIqE=
Subject key identifier: CF:61:39:76:87:CA:78:7C:9A:D0:3C:7E:3D:AD:58:26:BD:2E:7A:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFEDF6B69E859456408A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ac1041-563d-35d3-a496-894b882c9deb.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:ed:f6:b6:9e:85:94:56:40:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=1166355a-0621-4521-b047-0e9a221bbe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:a8:ad:c5:84:a5:8a:ff:dd:3d:d2:11:2e:
75:aa:6a:09:c3:f9:24:b2:90:5a:51:43:40:c5:3c:
e1:6d:76:9b:77:57:5d:fb:ef:09:e0:28:66:b1:c2:
cd:b7:ae:f2:da:32:12:30:f7:93:fd:12:81:09:fc:
ed:79:d6:72:5b:8c:33:9a:7b:f2:84:db:7d:a3:54:
11:36:77:4e:66:12:78:3a:94:c2:0e:1e:9d:d7:d4:
78:3f:42:8e:b8:10:56:0d:7c:97:e9:fe:ab:82:18:
0e:33:c3:e7:94:62:6f:01:d0:9e:80:df:88:5d:c2:
bd:f2:ca:02:5c:7f:b9:ac:e4:5c:b5:2a:fc:6a:4d:
1c:98:7f:44:21:56:d4:38:35:5c:57:23:c1:21:ea:
46:45:39:b4:d8:43:a9:0c:eb:45:fa:57:48:c7:90:
c4:dd:84:90:c9:04:1d:d6:1e:b1:e5:25:ed:2e:81:
d3:c0:60:4b:9f:49:c6:d9:73:e7:12:fa:25:9f:cf:
3d:4e:4c:b1:9b:6e:b0:59:0f:ca:1d:39:c0:f0:79:
7a:15:7a:73:69:cb:e5:f6:fc:ca:99:dc:94:8d:39:
f0:b1:c7:a8:c4:36:20:62:ac:e2:16:68:20:75:9d:
97:cd:a5:21:56:17:ee:f9:51:6f:a0:3f:7b:78:93:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:39:76:87:CA:78:7C:9A:D0:3C:7E:3D:AD:58:26:BD:2E:7A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ac1041-563d-35d3-a496-894b882c9deb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:eb:25:77:bc:b7:f2:ee:7f:81:72:67:af:fc:fb:c7:02:1e:
30:3c:ef:0e:82:84:6f:7d:75:4d:b7:3a:54:f4:30:7e:0a:a6:
f7:41:77:54:72:00:22:96:ba:ef:68:08:21:9a:c4:77:18:90:
4e:1f:58:ec:8e:3b:47:ab:e8:8f:9e:08:04:d0:c2:16:da:03:
cd:49:40:e2:11:0b:e6:49:de:d5:f6:40:6d:75:73:4e:9c:05:
38:69:c4:97:5c:b3:93:b1:85:5d:f8:73:75:d2:7b:8e:2f:57:
0b:f9:af:0b:f5:d6:8f:f8:2f:a0:54:81:b1:a2:e9:8d:99:c7:
8c:48:11:71:af:e7:fd:0f:52:bd:3c:7a:5b:d5:de:7c:f9:d3:
52:69:fd:b8:11:9a:76:35:f5:68:a1:ae:5f:63:36:9c:f7:96:
87:ad:dd:a1:8b:17:12:83:e6:81:02:73:d6:2e:f8:8d:0b:26:
aa:b9:5c:0a:4c:06:4c:94:2b:ad:01:19:41:9e:c3:c9:06:aa:
ad:06:3b:49:12:68:de:e1:32:3d:b2:92:07:1b:e0:0c:61:b2:
e7:7e:a8:85:29:cf:12:d4:b2:1e:7c:31:dd:54:03:b8:dc:7f:
b2:f5:fb:6c:0e:b7:7f:b5:25:64:5e:86:85:d2:cc:8b:c9:b0:
00:70:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org