Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2370b337-c8a9-38ea-92e7-f6629be8a236.roa
File: 2370b337-c8a9-38ea-92e7-f6629be8a236.roa (raw, json)
Hash identifier: IYSYPqKuqYONWEBKUyg5c22bfNhUu6L8Sor0zvP2LWs=
Subject key identifier: D4:D2:27:20:04:2C:73:6A:EF:5E:74:93:5C:EE:32:2C:9E:AD:A0:97
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB097E53BA8CAC7FB1E13C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2370b337-c8a9-38ea-92e7-f6629be8a236.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:97:e5:3b:a8:ca:c7:fb:1e:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=acada4c9-e9de-400c-946b-88c0dc343f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:0f:7e:0a:fd:05:f8:8e:9f:39:e0:35:18:
44:72:ef:a1:65:81:48:1e:ef:7e:0d:9d:38:af:fc:
f4:05:98:c1:19:15:36:37:8b:39:66:b3:f9:43:66:
fc:03:45:e7:f9:77:a7:0b:3d:d8:41:30:6b:41:cf:
65:7b:3a:0d:e6:53:1b:33:97:58:c6:1b:6f:03:59:
3b:bd:63:01:c4:2c:9b:da:26:40:dc:a9:a0:39:bd:
70:59:2e:07:d7:de:91:e2:f0:3d:b6:b7:1d:36:fa:
1c:18:38:02:bc:b3:b0:fc:1d:12:9d:4d:30:dd:0b:
ca:37:c7:ce:81:7c:79:76:72:95:b2:c1:a3:b0:5e:
70:3e:27:cd:4f:87:79:41:f0:fd:36:03:b5:62:d6:
a5:62:45:62:9f:ef:83:b1:9b:39:85:b3:d5:ca:b5:
a8:43:95:fc:c0:28:01:e1:1e:55:65:19:81:12:a3:
aa:1d:1e:9d:2a:0d:50:9f:35:88:c3:53:19:c6:d9:
a7:ba:ab:ae:34:01:2a:76:ed:5e:dd:b3:3f:2d:b6:
8f:b4:bd:78:69:dc:86:3b:a2:ee:ab:b7:c8:cd:94:
4d:b5:e8:10:18:16:71:9d:fb:0a:e4:3e:86:33:d8:
8c:8e:4d:2e:3b:34:5e:12:87:cb:42:49:e3:f3:83:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:27:20:04:2C:73:6A:EF:5E:74:93:5C:EE:32:2C:9E:AD:A0:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2370b337-c8a9-38ea-92e7-f6629be8a236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:10:62:5b:02:64:bd:ef:a0:7f:f0:cc:b3:66:be:47:4d:54:
b9:3c:4c:7b:2e:23:4a:44:63:85:f8:8e:31:bb:46:74:d8:9a:
7e:28:ab:ad:a2:d7:84:55:d4:0d:94:65:a5:51:d1:59:39:71:
e2:31:ed:27:34:9f:12:23:e6:92:e1:3b:8f:d6:c5:6f:b6:11:
ff:ea:70:b1:1b:64:f2:10:40:b9:55:e9:fd:c8:b8:f7:6f:6c:
fb:72:ef:df:ae:ec:2e:ef:dc:4e:3c:bf:70:d0:86:28:49:5e:
92:55:1d:13:37:02:84:57:3c:cd:80:dc:28:71:47:80:20:6c:
85:73:f4:7f:6e:da:52:ea:23:e0:fa:bc:7b:61:03:d8:ad:25:
28:51:41:3a:ef:19:1f:d5:a9:e9:40:c3:08:26:00:f1:71:8d:
1a:21:f8:55:70:63:b7:c2:55:97:95:16:c4:1f:b3:0d:e5:78:
a0:0c:68:86:fa:03:5c:d4:a5:ef:0a:0b:01:69:ab:80:52:42:
c7:1c:13:fb:ab:bd:70:f4:b6:d7:39:06:04:e2:c4:0a:60:34:
44:a0:12:1d:ba:f8:a9:9b:21:2b:04:8e:67:4f:9d:5b:f5:b4:
07:51:ed:bf:f9:0a:8b:50:87:dd:15:90:e9:64:16:c6:2c:7f:
0c:85:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org