Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1207e900-2424-3628-86c5-86535e04361b.roa
File: 1207e900-2424-3628-86c5-86535e04361b.roa (raw, json)
Hash identifier: ICrbXw1pLkoLJbD+JStU6VrHTfO6S/gprBe8+D4hA6w=
Subject key identifier: 91:63:94:D0:F9:17:9C:89:F1:ED:5E:78:D3:0F:9C:F1:81:D1:C6:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5447F97B0CA57117CAB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1207e900-2424-3628-86c5-86535e04361b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 184.151.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:44:7f:97:b0:ca:57:11:7c:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a0c7fb3c-8783-4224-a670-535f840ce445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:72:09:db:36:53:b7:65:ea:7e:e3:44:b0:
4f:15:5d:7a:21:bc:3f:0c:4c:40:bb:b8:60:68:5a:
e9:80:5c:79:17:e4:ff:bf:8a:b5:94:6c:3f:c8:dc:
e4:ea:cf:81:3e:89:6d:f1:77:1d:33:30:7e:3e:e6:
37:fe:9c:de:9a:44:3b:47:2c:8f:fc:03:19:5b:b7:
18:f7:ca:7e:ba:cc:5a:95:f5:02:bd:f5:4b:0e:bb:
be:fc:72:71:bd:9f:2e:7a:ff:f2:4e:33:b7:fe:b3:
e1:41:09:bf:90:f2:cb:0e:7c:e1:2a:2d:0d:db:6c:
c8:74:11:c4:38:f4:3a:d9:35:04:f3:a5:ee:a2:9c:
34:4f:d0:4a:a4:c4:05:03:ae:68:b1:4c:3d:42:b1:
8f:61:87:b0:75:d9:f1:ab:83:97:f5:51:2a:54:b7:
0c:3a:e4:a7:a9:14:b1:9e:0f:5a:10:3e:2f:5d:57:
9c:d1:7e:54:1c:33:f6:9f:e8:dd:0a:65:d8:e1:8c:
2f:e9:fa:5f:b4:66:90:51:05:cb:01:f7:cc:b0:1d:
dd:63:fc:1a:7a:15:9f:f8:57:b9:ba:b3:04:11:cb:
16:ed:78:a8:4a:2d:d4:55:38:ef:f0:6a:a4:2a:e6:
61:7a:49:b2:0d:f2:e3:1d:76:14:d5:22:8f:06:d0:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:94:D0:F9:17:9C:89:F1:ED:5E:78:D3:0F:9C:F1:81:D1:C6:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1207e900-2424-3628-86c5-86535e04361b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:4b:c9:5c:6c:3c:ba:0a:5f:57:19:cc:1c:df:4b:f4:fb:b1:
5a:e3:2d:44:a8:f8:3a:52:7c:a0:ee:cd:27:7d:e1:a5:e9:d7:
62:0a:b2:02:5e:f7:1a:2b:fb:e8:ee:02:cc:73:58:f9:4e:00:
b6:66:b5:98:32:a6:1f:17:3b:24:c5:d6:37:67:8a:17:9d:9b:
4c:9b:85:ee:00:5f:2a:55:80:fa:c1:b1:d5:17:50:f4:83:29:
21:a9:62:80:8b:41:59:82:0a:82:dc:08:01:6e:64:5a:cf:3d:
b4:e5:30:ac:cf:9e:16:e3:9a:d7:d8:c9:43:6a:9f:88:58:a6:
4f:16:65:29:55:bb:4d:4d:1f:29:67:e2:b5:5e:0e:db:7f:7a:
dc:28:be:9e:45:68:ec:f1:a7:8e:8e:53:a5:ba:21:55:b0:8e:
7a:24:58:fc:78:0e:ef:70:a1:cd:1d:2f:0a:5f:be:31:eb:9d:
ae:52:2e:85:7b:8a:0e:bb:b9:08:70:80:b4:c3:f5:bd:26:76:
1d:90:1d:70:c5:03:68:d7:2c:53:83:b1:90:2f:b9:8a:83:5d:
17:58:dd:48:c4:04:d7:20:4f:62:ea:cf:ff:2c:57:98:85:2d:
29:b7:b2:21:e0:d5:32:22:95:5a:55:4c:d6:ac:5f:c7:25:b1:
67:ed:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:21 2024 by rpki-client on console-ams.rpki-client.org