Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/11930f25-e819-3036-a5a7-737baf7096ef.roa
File: 11930f25-e819-3036-a5a7-737baf7096ef.roa (raw, json)
Hash identifier: 2HPJiWIZx3KDZC1Klg7/LqAKiPwBxhQybd/xNNfFCRk=
Subject key identifier: 09:06:BC:56:30:4E:68:20:D7:D4:D3:D2:87:8A:0D:12:6A:5C:87:28
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314001AD6FC3246BE281300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/11930f25-e819-3036-a5a7-737baf7096ef.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 76.70.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:00:1a:d6:fc:32:46:be:28:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=da30c001-0236-4115-9217-2878f5415b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:4a:78:2e:bd:ea:9a:bd:9c:04:51:09:fb:
a5:56:4a:4b:74:d9:c5:c1:31:ef:ab:b1:ca:b9:a8:
11:12:37:a2:1d:a0:c5:f0:b2:83:9e:55:5d:dd:9a:
53:18:c6:60:c9:06:0c:de:c2:c9:0a:fc:49:bb:48:
72:ec:07:11:c9:68:40:29:42:11:ac:dc:20:3c:71:
98:ac:2c:ea:ae:26:3f:d3:27:c1:ce:3a:7a:8e:a1:
b4:41:7b:f7:f6:20:53:29:a2:c9:ef:37:73:15:1e:
ac:cf:f1:1c:19:c1:e6:60:d5:39:a1:d9:d2:ae:34:
e3:93:dc:bc:79:58:47:97:26:11:56:44:4e:ba:f2:
36:1b:19:f8:10:88:31:86:ab:50:8a:6c:49:c3:ec:
59:04:73:77:d4:a2:9b:02:1c:c6:c0:04:b4:72:cf:
d1:2a:41:25:92:8d:b7:8a:e7:36:3a:b8:ae:b5:aa:
36:ac:e6:7d:fa:0a:45:eb:5f:68:20:78:99:b4:fd:
57:35:93:b9:a2:d5:b8:cc:53:f2:6b:32:cb:a6:14:
d5:3a:b0:f9:a5:6e:a1:4d:5d:0e:dc:1b:38:41:f8:
0f:5d:b4:ba:a6:98:3e:e1:73:bf:34:34:5e:8d:77:
ed:21:8d:4d:b9:b3:f8:bf:9e:bf:35:e6:23:b3:9a:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:BC:56:30:4E:68:20:D7:D4:D3:D2:87:8A:0D:12:6A:5C:87:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/11930f25-e819-3036-a5a7-737baf7096ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:81:e4:91:09:7f:5f:ed:77:7e:d0:bc:ed:f1:e8:34:ea:d1:
23:ce:3e:63:51:97:09:82:a4:14:cb:69:c8:c4:b0:a1:07:2c:
61:76:50:28:0b:74:ad:f3:8e:fa:4d:9e:79:35:1c:bc:21:16:
d2:e4:6d:17:6e:91:4d:77:a5:a7:30:e4:9c:80:56:73:9f:31:
4d:77:bc:40:1a:3e:b9:84:b9:dc:65:0b:c7:98:1d:b9:cc:61:
70:33:bb:49:c0:3c:0d:7b:54:b6:ae:cb:fc:20:da:7c:15:45:
73:1c:51:f6:e8:a7:dc:72:4f:32:9e:e2:0b:72:25:32:58:5d:
83:c9:60:e0:78:06:1c:11:7e:86:20:60:d8:dc:58:21:9f:0f:
37:57:79:ff:c1:92:2a:f9:f3:c2:19:55:19:07:1f:8b:a1:a0:
e0:f9:0e:bf:fd:74:2d:ee:55:79:85:9f:83:b5:98:db:26:18:
8a:02:b6:de:1b:ec:7e:ea:02:6f:7f:a8:46:f5:08:e6:b2:a0:
50:d6:09:4d:57:66:da:34:4b:1b:39:31:25:b8:60:b1:b1:af:
e8:77:de:eb:dc:e2:a4:13:1b:f5:54:66:b4:c4:c9:c9:2c:a9:
b1:6a:af:aa:e2:14:a3:e9:d0:12:75:d9:03:19:b8:a6:14:c6:
17:be:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org