Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243006a5-ec4c-305d-882f-f28d7d2ca1bf.roa
File: 243006a5-ec4c-305d-882f-f28d7d2ca1bf.roa (raw, json)
Hash identifier: 7uTPA3TZkx+2oj8JCSUTYGWo99V0Xbt7zOmErP/zqqg=
Subject key identifier: 28:63:2D:2C:42:5E:44:80:BB:CC:6A:2E:B7:E4:3E:C0:40:6D:0A:5D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0C33786B7D40CFD856FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243006a5-ec4c-305d-882f-f28d7d2ca1bf.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:c3:37:86:b7:d4:0c:fd:85:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=f84aa149-2b32-4bf5-a359-5607cac72aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:e9:12:ec:a7:73:49:c5:81:8f:f8:90:d2:
16:6f:01:31:76:36:4b:e6:67:5e:ca:46:cb:db:72:
3d:67:b0:5a:21:0d:b0:3c:54:0f:45:c3:65:fc:9d:
65:ca:51:f5:51:da:ef:87:b5:c7:60:45:6b:2a:a6:
b5:fe:7f:bd:a7:db:28:93:e1:19:56:09:e3:ab:ee:
fb:28:8a:41:1b:0f:8d:1d:23:c3:76:dc:1e:e2:df:
6e:2e:24:24:65:54:ee:77:cf:d4:c0:91:60:62:c2:
45:5e:d3:cc:a8:fc:8a:8c:7c:f7:5e:9f:75:a9:d0:
39:01:ca:0d:6d:7b:5d:7f:c3:41:e1:5b:99:4d:6d:
40:c3:74:f1:24:a7:19:41:f3:c5:e5:84:d7:55:2d:
d4:bc:a6:ea:0e:80:d4:b4:5f:c9:71:56:21:17:89:
ed:24:27:b1:dd:33:7f:72:65:04:71:47:3b:17:98:
35:2b:c1:fa:a2:8a:94:7e:f7:8f:ba:0e:e2:f9:25:
54:18:dd:f3:aa:a1:bd:4a:b2:18:e1:e5:b3:de:06:
8d:f6:fd:91:7c:99:74:67:36:08:c8:e1:be:fd:9c:
49:bd:8e:cd:eb:a1:df:16:a7:49:ab:48:95:2d:68:
57:1b:50:ab:9a:ce:d9:77:d6:18:6d:5e:a1:e6:4e:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:2D:2C:42:5E:44:80:BB:CC:6A:2E:B7:E4:3E:C0:40:6D:0A:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243006a5-ec4c-305d-882f-f28d7d2ca1bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ae:bb:23:a9:5e:a9:ad:62:a5:6b:0e:d9:19:12:47:fa:27:
17:7f:99:36:a1:79:3a:f6:66:41:1f:f7:72:39:8c:6c:e4:e1:
e3:be:f5:7c:2d:c6:02:b6:fe:17:56:2d:6a:35:e9:0a:8e:b8:
00:7f:b7:14:d6:8c:bf:de:6f:03:a1:e7:da:67:ea:df:77:8f:
e8:77:19:c5:54:08:55:c2:a8:e0:86:aa:9e:eb:1d:4a:a3:7e:
4d:f1:f4:17:c3:6f:62:fb:d7:70:b7:5a:5c:0e:b9:e1:48:f4:
14:50:8d:21:52:4d:41:e3:96:e9:e7:e4:28:78:cc:88:e7:41:
be:35:aa:77:8e:cb:dd:b4:13:6c:68:df:b4:4a:45:25:76:ef:
4a:01:26:b6:cf:6f:d8:23:40:7b:65:6d:d3:6e:54:b3:59:e4:
11:39:eb:32:a1:de:53:13:1c:54:f3:06:ba:6f:32:fb:74:24:
9f:16:44:11:a3:54:3a:ad:5a:37:9f:83:52:3a:2d:00:55:41:
2c:48:39:7e:4a:bc:d2:dc:ae:58:59:2d:88:a8:3e:78:d1:16:
90:6e:fe:a0:4b:0d:fd:e0:1e:16:3b:f3:a8:bf:fa:64:75:35:
12:04:53:39:8f:3f:07:88:b6:ea:4d:bd:98:75:44:94:ba:4f:
4b:fc:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org