Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/202b820a-bf9e-3aeb-8289-9901d51cc841.roa
File: 202b820a-bf9e-3aeb-8289-9901d51cc841.roa (raw, json)
Hash identifier: 2BQ0AhcwmB4/AbOvdSg6QcFHhSTjiWLXhQJUO/pT7aE=
Subject key identifier: 6D:27:99:6D:76:E0:42:FC:38:7B:88:AA:F4:42:C8:25:29:8F:6A:78
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313C992A24BE616DA737340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/202b820a-bf9e-3aeb-8289-9901d51cc841.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:c9:92:a2:4b:e6:16:da:73:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7f2ffb27-6eb0-4008-ace7-2cf89075617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:de:be:32:ed:36:c9:22:71:b5:5f:b2:7b:
8c:4d:4e:94:6c:01:cf:f1:4a:42:40:d6:85:93:54:
5e:44:ac:f5:04:7f:ff:9c:05:a3:19:f9:f6:f1:dc:
b7:39:5d:43:6b:ad:2c:43:0f:c9:f6:47:6b:16:3d:
82:8a:98:9f:28:ff:71:22:9b:af:d3:12:c5:d2:6a:
bd:30:0c:36:fb:45:1f:34:5a:bf:9f:f9:b3:df:8b:
ef:1f:1c:d8:53:87:a1:d7:63:f1:6f:86:23:28:bb:
a0:55:e2:a0:4d:cd:69:1e:bf:83:3c:de:44:0e:15:
b6:ed:b1:47:c4:48:13:56:9f:f3:c6:5e:bb:da:85:
bb:b2:ec:4c:7d:b8:54:a8:b9:bb:7f:ee:a5:c0:55:
79:13:10:70:6b:7d:b0:9d:5d:70:54:bc:df:c9:4c:
5c:60:ac:32:5e:18:dc:32:6e:fc:0d:6e:37:53:b6:
84:03:3f:44:cb:a3:6d:27:50:ab:e5:99:43:d1:cc:
18:78:ba:1f:08:9f:b8:b8:cf:c1:5e:3b:28:c3:05:
63:c1:88:f2:4e:12:38:46:79:e8:1a:c3:c0:fc:c5:
bd:ee:80:26:e1:5a:48:fb:b4:49:7a:f6:6c:5c:36:
4c:38:e4:dc:94:1a:7a:a6:5b:92:73:ae:b0:ac:51:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:99:6D:76:E0:42:FC:38:7B:88:AA:F4:42:C8:25:29:8F:6A:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/202b820a-bf9e-3aeb-8289-9901d51cc841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:6f:92:ab:08:66:dd:0a:9d:f4:10:49:14:ec:43:cd:3a:44:
9d:7d:f6:dd:b5:24:a3:25:27:e7:10:44:6d:0c:36:c6:2f:c7:
85:40:46:30:30:36:4a:28:d2:17:c7:93:3a:ef:97:e4:be:e5:
57:c2:71:39:86:a4:eb:58:d1:ff:42:24:cd:2a:16:aa:64:7a:
26:d2:81:15:b6:b9:35:50:a2:40:04:12:d4:26:92:99:2e:08:
86:e4:92:44:02:1e:ff:30:32:31:ad:28:fa:c2:41:b8:91:5b:
88:ff:5b:5e:48:ef:f4:1d:14:86:b5:bb:78:9c:b9:06:90:9e:
ad:b1:c3:57:ef:7c:ae:e2:ee:bf:d8:80:55:98:40:9d:22:91:
a0:43:f2:b4:d9:8b:26:77:af:23:51:d2:04:38:23:b5:a8:01:
4c:81:8f:c6:80:a9:f9:64:b6:5c:94:80:e7:2e:50:5e:0f:8a:
3f:15:9b:63:4a:78:8d:57:45:53:e2:05:08:2a:31:a1:7b:ba:
15:1c:e3:16:93:da:95:d6:f7:07:80:4d:4f:1f:ee:34:7f:73:
2c:a9:1b:ce:c0:c6:ac:be:73:b2:98:a5:52:5c:22:b1:d5:f6:
d6:82:bd:58:d2:1a:f0:57:e9:df:9b:f5:bb:47:57:23:ba:a5:
49:ad:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org