Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2aaeae2d-5b2e-3d2a-8bb5-dff422526a2a.roa
File: 2aaeae2d-5b2e-3d2a-8bb5-dff422526a2a.roa (raw, json)
Hash identifier: jkSOLZsvYYRnk9CoxWdYq/peJ7gIm+QadtQKjZPaFBg=
Subject key identifier: 39:9D:67:F8:39:64:5C:08:7B:DD:E4:C5:D3:6C:ED:7D:2D:F0:0D:B7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB025ACD2C7CD9C2CB5D35C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2aaeae2d-5b2e-3d2a-8bb5-dff422526a2a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 397168
IP address blocks: 206.47.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:25:ac:d2:c7:cd:9c:2c:b5:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=421282e9-7be8-45b2-967e-20ed57db32b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:85:3e:41:c8:6a:14:98:ae:35:d3:a7:3d:
3f:20:65:28:9e:c6:09:10:80:5c:76:cc:30:04:32:
a8:aa:a7:2b:dd:2e:11:1f:a2:58:81:10:ad:90:99:
6f:64:20:df:df:9d:37:7e:e5:d2:63:92:d4:60:cf:
b4:e1:b5:96:e6:13:d7:d1:ab:44:b3:03:90:a8:63:
9f:0c:b7:5a:9a:16:47:26:02:b3:30:5b:10:99:3e:
9f:23:84:35:57:3b:ca:f8:21:32:08:18:03:93:c1:
51:fd:44:2e:44:38:2a:c1:72:22:79:25:4e:73:64:
e7:0d:83:b6:0a:fe:23:d6:54:bb:75:50:9c:e4:b7:
a6:a2:e6:4b:a0:e5:83:51:70:61:07:6d:82:99:a2:
00:97:72:01:74:f1:91:bf:9d:6b:93:34:81:d6:25:
a9:6a:97:8e:1a:04:6b:bb:f7:c3:02:f5:c2:32:09:
f0:a7:b4:e1:bd:ae:db:4a:42:d6:a3:4d:25:85:2f:
50:a5:ca:12:df:7c:f3:05:79:f1:ca:bc:87:2c:d8:
ac:73:af:49:bc:21:bd:29:44:61:32:e7:06:7e:78:
24:41:c0:47:8a:e9:e2:65:2c:5e:05:bf:c9:3b:c3:
68:63:73:2e:99:71:e1:ce:c9:d9:9f:a1:79:7a:a5:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:67:F8:39:64:5C:08:7B:DD:E4:C5:D3:6C:ED:7D:2D:F0:0D:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2aaeae2d-5b2e-3d2a-8bb5-dff422526a2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:83:c6:31:8c:d6:6c:a0:b7:ec:95:79:33:59:ee:5e:d8:41:
55:60:e9:85:9b:02:8a:d1:7b:a5:b3:92:72:b9:43:8e:7c:a7:
bc:c8:f0:99:2a:29:60:4c:38:ad:94:0d:2a:5e:43:df:e7:76:
c7:81:ed:09:31:0e:8b:31:3b:23:15:81:8e:cb:e5:5a:2a:e0:
70:a1:e8:5c:31:cc:0c:8c:30:ce:97:16:2d:5f:2d:a0:a6:6c:
46:36:d5:6f:6c:41:ce:18:f9:ac:cc:fb:e3:ea:dc:4d:dc:72:
c9:b9:dc:ab:1b:a8:f6:ae:a4:d2:a2:d6:34:60:d3:ed:d8:90:
db:f5:a8:63:9f:7c:0a:44:bf:e9:03:19:d7:55:b0:2b:28:05:
01:1d:ff:ae:79:4e:d8:d3:6a:90:04:9b:57:f6:e1:d3:08:27:
e8:74:4f:c0:dd:24:51:e5:52:e7:4c:2f:66:84:36:01:84:5e:
11:d4:b9:a9:e1:f8:e3:62:88:c0:69:26:22:df:ad:38:3c:d5:
51:59:95:4d:ef:c4:3f:06:3e:81:df:eb:c5:f7:42:3c:18:fc:
82:8f:2a:d5:4a:36:b6:e2:3f:1c:ac:94:4f:c0:1e:de:68:f4:
e6:f3:8f:a4:f4:4d:38:8c:da:e1:6b:f9:99:7c:c6:17:bf:59:
0b:22:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org