Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/181c1ddc-0c9e-3f26-89e1-2abb94369795.roa
File: 181c1ddc-0c9e-3f26-89e1-2abb94369795.roa (raw, json)
Hash identifier: iewESSk55uG2pIzhEeoTJBWRjs51Uj0Mt2h/TQSqPLI=
Subject key identifier: 3A:28:06:A6:F9:51:A1:3B:F9:95:23:EC:44:CF:F5:1B:64:91:F8:68
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFD95EC46084719A43EA40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/181c1ddc-0c9e-3f26-89e1-2abb94369795.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21724
IP address blocks: 204.101.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:d9:5e:c4:60:84:71:9a:43:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=1002d44e-5f03-45ac-9825-6f571f456eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:40:1c:37:cf:2d:41:2c:91:03:6a:c0:81:
3f:6a:51:93:ed:40:8c:24:93:80:9c:5b:6c:4c:fe:
d7:55:60:e2:15:b5:0d:6e:38:2e:98:71:41:bf:82:
c5:e0:53:39:be:7e:28:93:19:c8:df:44:83:b8:80:
1c:c4:7b:2f:ac:9f:52:80:ce:49:49:cb:26:3e:a9:
e2:d9:11:51:d8:e4:c9:44:a3:4e:ea:b0:ab:20:d4:
53:f8:3e:28:cd:f4:de:0b:b3:b6:cb:6f:53:af:db:
fb:5a:94:fd:bb:35:32:fb:06:34:af:89:19:11:b8:
a5:c2:1c:cc:8e:18:11:da:eb:ee:00:fc:87:e5:e8:
2d:25:14:71:85:d4:32:07:f0:43:51:26:8f:19:31:
60:fb:07:68:3e:bd:0e:c2:ee:0b:9d:89:5f:b5:ac:
6f:5c:f1:f2:dc:47:c7:96:ed:0a:44:41:89:ae:bc:
06:bf:95:df:79:58:26:f8:49:59:bc:25:a3:90:8d:
0f:03:95:25:86:77:96:2a:b4:c6:9f:61:28:37:0e:
a2:04:19:a0:4c:a6:8e:0e:36:b0:7f:b1:2d:4b:bb:
a0:42:8a:11:d8:8c:8b:69:90:f4:70:fa:ac:55:38:
10:46:e4:2a:9d:64:d5:64:e8:08:db:87:3f:21:47:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:06:A6:F9:51:A1:3B:F9:95:23:EC:44:CF:F5:1B:64:91:F8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/181c1ddc-0c9e-3f26-89e1-2abb94369795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:4a:63:1d:61:5b:4c:f3:e9:0b:41:08:0e:92:9c:5c:0d:c6:
74:05:d3:ab:92:6d:b5:d4:df:7f:1f:b2:9a:4d:10:54:30:72:
ac:de:5c:2b:d3:b5:90:66:b3:5d:fb:68:39:cd:95:9a:24:6a:
15:be:27:39:29:a8:c0:ec:ad:6b:de:1d:dd:60:fe:82:88:9a:
22:bb:c2:03:e3:7b:aa:d1:73:1b:5f:5c:c6:18:c8:b6:27:b1:
de:f6:b8:03:ad:e8:54:e3:fa:3a:96:25:14:b9:3b:de:19:77:
b1:db:6d:62:d1:36:ce:d0:72:81:f1:66:68:14:bc:77:87:ee:
df:ef:cd:cb:16:3a:04:7c:f9:3c:08:a6:77:18:87:76:39:c6:
08:48:4f:2c:cb:d1:d5:73:7b:89:88:00:20:ab:15:ed:c0:3b:
51:57:8e:fb:6e:26:16:4c:cf:df:58:8e:42:6a:b0:0e:0c:e5:
3f:ec:ec:1e:dc:48:77:7b:a0:2a:f5:eb:dc:a1:d4:c1:81:4d:
b3:f6:5d:fe:23:0d:3c:04:0d:a8:72:b9:68:97:ab:5a:ce:26:
e6:55:12:4d:ff:73:23:f1:d5:00:20:76:09:5e:79:1c:0e:bc:
85:4e:cc:1e:66:cc:77:a7:e3:00:a0:25:5b:84:d2:2f:f4:4e:
dc:8f:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org