Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16fc9c72-afd1-34f8-9f62-bf732ffc9250.roa
File: 16fc9c72-afd1-34f8-9f62-bf732ffc9250.roa (raw, json)
Hash identifier: Kp0Jo3dIsx/rQEGoOJe/WuMUTqx++9/GzPk6jD+i4bQ=
Subject key identifier: 4F:DD:34:54:12:E9:F1:F4:37:F3:BE:1A:3F:B3:2B:86:E6:86:BB:C1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314EB173985388046EE8490
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16fc9c72-afd1-34f8-9f62-bf732ffc9250.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 33017
IP address blocks: 204.101.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:eb:17:39:85:38:80:46:ee:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=97365d21-51c9-4395-bb7f-c755d3b0943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:e1:4c:98:b7:cb:9f:89:07:e4:1f:f5:11:
0b:7a:05:30:09:55:2d:da:76:f8:51:68:54:25:1d:
73:87:46:dc:a9:af:ab:da:d1:71:bd:d3:ca:07:73:
11:11:c2:a3:1f:d8:d7:4b:b9:97:c4:56:6e:07:e0:
65:89:17:7a:02:67:62:ec:fb:5c:5a:a1:39:a3:54:
40:e3:e8:97:29:1e:3f:f6:0b:85:67:56:3d:22:49:
8c:59:31:e2:a2:6b:b8:b3:d8:bc:12:52:ac:5e:77:
56:aa:55:75:53:3d:68:c6:30:b6:a0:c6:ea:2c:19:
ab:f7:07:de:ae:0d:28:dc:a1:db:8f:3b:b7:c6:4c:
51:67:e5:ea:2a:21:79:da:4c:25:cf:72:73:f1:c3:
aa:a2:d5:b0:a1:a4:0f:12:b7:e9:71:ef:55:8b:67:
0e:a0:24:ba:2e:a4:2a:cd:91:62:b2:2d:ed:8a:b3:
93:22:37:6a:85:ce:1a:11:b5:96:e8:83:96:38:e5:
49:37:7c:c9:30:4f:f6:2e:09:02:75:70:df:57:42:
f5:a4:8a:75:c7:26:f1:2f:49:ae:07:69:44:06:76:
87:27:73:78:e3:40:2d:20:d7:70:8f:a1:6e:65:71:
c0:de:de:6e:7e:2e:6d:09:0c:af:64:45:21:7d:22:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:34:54:12:E9:F1:F4:37:F3:BE:1A:3F:B3:2B:86:E6:86:BB:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16fc9c72-afd1-34f8-9f62-bf732ffc9250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:46:d0:0e:c6:b5:45:c4:a9:e5:d2:79:ac:cc:41:f8:f0:04:
6c:44:b2:0f:64:69:0a:70:7f:53:d3:7c:b4:53:c7:2f:42:04:
3a:5e:d6:b6:29:ef:49:ee:67:b8:2a:c5:72:e0:4e:8b:84:5a:
04:44:da:d7:bc:95:5a:4a:38:9f:d2:09:fd:b9:bd:31:f2:81:
5b:10:15:86:aa:89:89:25:17:76:b1:8d:1c:d8:3e:d5:0e:54:
ef:1b:3e:f8:07:68:b0:b8:46:09:e3:5b:d2:9a:ac:19:07:d9:
53:e2:c5:ad:11:ea:70:3e:3f:7a:d2:86:3b:c3:98:ed:0f:29:
bc:d5:80:ed:be:72:81:c1:3f:e2:5c:b5:56:e2:97:c3:a5:0a:
c3:69:6f:ca:18:01:f3:3a:8e:b7:3b:c8:90:c7:6c:93:1d:4e:
77:ca:b5:bf:57:5e:ec:36:2e:25:45:33:91:ac:44:bc:10:52:
66:53:32:92:ac:a7:65:89:4e:61:64:64:0e:74:f6:48:fa:eb:
93:6d:21:27:3a:89:37:05:f7:87:dc:36:02:e7:5d:77:aa:cb:
76:98:6d:64:dd:30:ec:ce:05:e0:7b:87:7c:95:d9:d9:65:34:
eb:c1:8f:5f:6f:9c:2c:82:a4:22:5c:02:5c:ad:27:8f:ae:f0:
1c:65:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org