Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ad42bd7-8118-3dd6-9129-cb457b360642.roa
File: 2ad42bd7-8118-3dd6-9129-cb457b360642.roa (raw, json)
Hash identifier: Psz8WdtHg+wUZYr5hzBPOu2rHdJXVqrXz+RrMyGRWDE=
Subject key identifier: 66:E5:3E:82:75:59:EA:4A:6C:45:B5:93:88:C0:3B:F6:2E:99:03:AD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFD662F5BE047DE7D66E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ad42bd7-8118-3dd6-9129-cb457b360642.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:d6:62:f5:be:04:7d:e7:d6:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=aec81130-7f9d-4e05-8718-a5aeb752d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:63:b0:de:8f:f9:b5:a8:c6:c6:d1:13:25:
75:8b:e9:8b:c7:ef:11:78:2d:4d:0e:6f:13:7a:eb:
38:dd:47:06:50:7f:3c:fe:7a:72:49:61:a5:a1:24:
79:c6:5f:d5:92:8a:ae:97:f7:dd:9e:2a:9c:36:4b:
04:83:a0:2c:1d:9a:32:2a:ac:22:f5:5e:8a:02:57:
17:57:77:5e:41:d9:0c:5c:90:d7:90:b2:6f:86:31:
36:b6:2e:6c:cc:c7:46:4d:fa:ed:9f:72:36:7b:85:
11:ef:2b:28:aa:91:4d:6b:15:ed:82:31:22:cc:a0:
b9:88:4c:a7:4f:26:56:24:ae:14:84:e2:9b:29:72:
3a:8e:9e:27:9d:54:c9:0c:99:de:ee:2c:f4:87:6c:
29:68:bf:24:5a:16:d0:c3:0c:6d:42:16:87:bd:f3:
1a:95:d5:35:9b:22:46:48:48:5f:ac:e3:ce:09:d0:
c2:0e:75:1a:b7:b7:7d:76:20:02:a0:70:10:9a:b5:
3b:12:24:72:65:2e:b6:cb:52:44:12:58:df:84:0d:
ed:c6:d3:17:07:46:02:be:b6:6c:52:bf:0d:26:47:
30:3e:02:be:28:0e:f1:19:46:35:3e:27:c7:05:d3:
6d:97:ca:80:c8:79:aa:44:a2:50:20:37:a7:30:7d:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:3E:82:75:59:EA:4A:6C:45:B5:93:88:C0:3B:F6:2E:99:03:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ad42bd7-8118-3dd6-9129-cb457b360642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:28:8e:1b:e0:b6:dc:e5:52:7f:81:64:47:28:f6:2c:f6:7f:
9b:d4:a3:68:f1:13:f9:ad:ed:c4:91:8e:c1:0d:a0:7d:3d:84:
61:3f:fb:f4:b1:a7:5b:7c:ef:8e:80:0b:e5:67:85:17:98:76:
5a:7f:30:18:f7:b8:ad:39:ff:82:d8:97:fe:38:ef:1c:6f:95:
24:a2:c3:05:5d:b5:62:2a:f0:2c:f3:6b:e3:51:a2:80:1d:e6:
e6:48:c6:45:26:85:08:b6:04:8e:a8:5f:b6:ae:c1:56:98:83:
b7:a7:fa:00:91:14:aa:5d:28:f5:9a:94:97:4a:64:41:ad:5d:
8f:4f:9f:e0:89:61:8e:a2:07:7b:79:d0:68:06:d8:52:ee:48:
de:1d:b4:b0:e3:c9:00:c2:4a:14:59:9f:9c:cb:07:8b:30:bb:
3a:0c:79:b6:d9:cc:b6:78:48:b1:c0:41:ce:05:d2:51:5e:c6:
63:6d:9f:ee:3e:74:00:94:92:e1:7d:d4:c9:fa:84:aa:8b:2c:
cd:54:84:a5:13:58:60:c0:2a:41:f2:01:28:b4:de:8e:06:38:
b6:07:57:81:fc:50:cd:dc:71:e5:a7:2e:e4:fa:58:fe:6f:78:
1b:27:05:b3:32:ec:56:7a:23:73:7f:c5:cb:9a:9b:aa:dd:62:
ee:2e:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org