Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2331000c-0f2b-3a7c-9423-464b399ca9f4.roa
File: 2331000c-0f2b-3a7c-9423-464b399ca9f4.roa (raw, json)
Hash identifier: sgYgrkADwznkl4OLFaFWO9F0uGBkq1/4xLHG37SDt3o=
Subject key identifier: AA:A2:99:79:75:D0:70:F6:BA:6B:BF:03:34:05:44:BC:53:19:28:AF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF74C93139262E2C30677660
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2331000c-0f2b-3a7c-9423-464b399ca9f4.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 50.100.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:74:c9:31:39:26:2e:2c:30:67:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=53836e53-0767-4c3c-99c5-6161886aab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:09:3c:cd:7a:5e:e9:07:09:9c:1b:a1:95:
03:88:98:e4:ee:f1:e6:eb:32:56:c4:60:e7:d9:41:
62:2f:98:4c:f4:ad:cd:1f:0a:66:4a:d1:20:28:6a:
8f:c8:c5:de:28:c1:74:23:cd:49:49:a7:04:ce:26:
3a:26:4d:d4:c8:d1:ff:26:b4:c5:20:66:e1:4f:2d:
32:18:0d:a7:c3:77:af:84:0d:f6:46:37:07:46:19:
40:6b:c7:2c:91:3b:d3:a1:b1:d2:33:a3:f4:fd:1d:
00:19:5c:90:05:f3:e6:0e:7b:aa:ca:74:8c:5d:52:
7b:19:32:83:54:ce:8f:2d:d4:40:ed:9a:dd:d4:bc:
4b:c8:9b:23:49:17:60:ec:f5:2d:c3:f7:bb:a2:1c:
e4:ed:d5:c2:fc:15:75:c3:03:9e:5f:5d:2c:da:e8:
20:88:df:68:b6:e2:d2:42:7d:c0:28:c2:61:d3:da:
3e:1b:44:3b:72:41:cd:54:13:92:d3:cd:5a:9d:3d:
7e:d0:78:57:8b:ab:a7:29:e6:66:3e:0d:ca:a7:93:
3c:f9:65:e7:ac:b5:ad:ba:fe:7b:1e:a8:10:47:7c:
1f:ee:ba:9a:3e:c7:36:49:31:93:c7:96:30:9d:78:
15:de:da:f8:da:2a:2b:4f:bc:a9:2b:b3:55:41:27:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:99:79:75:D0:70:F6:BA:6B:BF:03:34:05:44:BC:53:19:28:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2331000c-0f2b-3a7c-9423-464b399ca9f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
50.100.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:50:05:a3:f1:cf:59:b5:c6:bc:95:15:12:a0:17:b9:35:10:
e7:42:27:f6:74:27:e3:6e:66:6e:1d:5c:c5:26:dc:0e:a8:b1:
cd:88:b6:6b:f7:a0:03:9d:74:99:ff:66:12:22:f3:5b:5a:6f:
07:29:cf:71:b9:c1:d9:72:31:7a:f3:2e:a9:56:1e:7f:29:ad:
a8:03:55:0e:9a:25:71:50:8c:ae:bb:a4:57:cc:58:10:b4:da:
7a:d2:47:05:74:e2:dc:21:1e:3e:ae:42:f8:0b:9b:0a:5c:f2:
2e:0d:46:0c:83:ee:9d:5a:96:e7:c6:bd:d8:18:5d:14:e7:ff:
7e:6d:4e:18:2a:e0:81:18:6b:eb:29:3b:46:3c:84:7d:36:35:
6f:a4:5d:e9:a2:cb:7a:e7:b4:7d:d3:4c:e4:22:3a:be:ae:ba:
ec:30:f6:f9:9e:8e:36:46:40:36:3f:d2:43:9a:5f:9a:5b:3d:
f4:42:eb:9f:ff:1e:d9:47:71:d7:b3:27:ff:a5:a5:fc:7a:fa:
b6:8f:ab:8d:29:11:f8:10:34:28:e4:c2:ec:be:60:7d:d6:26:
06:45:43:b5:ef:8f:8c:ae:31:13:6a:5f:cd:74:2e:67:45:91:
68:d2:25:8f:52:04:18:38:6f:cd:46:8f:64:98:cb:a1:ce:97:
a5:17:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org