Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b3f945d-5e73-3a78-b4b5-c5806b99fd3d.roa
File: 2b3f945d-5e73-3a78-b4b5-c5806b99fd3d.roa (raw, json)
Hash identifier: Rtu7xpYc9RzTYK+W/YFCR56AjJSN7tMU9Cg7L6aLRLg=
Subject key identifier: 28:B4:39:8C:FB:C7:18:69:A4:A0:CD:DC:02:32:1C:BE:79:F7:1C:F0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315D5D438933E3977F636A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b3f945d-5e73-3a78-b4b5-c5806b99fd3d.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:d5:d4:38:93:3e:39:77:f6:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d3fb7e8c-64ab-4ef4-be34-0c0c64548efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:88:ac:1b:2a:19:18:b4:04:fe:f7:01:b1:
e2:21:ed:7c:24:d8:78:48:a0:0c:dc:ab:dd:59:76:
e6:a8:1c:82:40:36:0d:04:40:15:fa:7d:01:0a:86:
e3:b5:dd:bd:3c:f7:ab:0f:97:33:69:3b:e4:ce:d6:
44:f0:52:82:99:18:22:c5:95:83:38:a9:6a:59:83:
ef:d2:e4:8e:9a:9b:47:de:a2:0a:84:31:07:f4:2e:
eb:9d:0d:13:aa:e6:31:49:90:a4:a0:f8:97:bf:3a:
d6:19:4d:c8:9e:ad:b1:c3:44:da:13:d0:cd:39:9c:
f1:6b:a0:7f:b0:db:98:4f:40:d5:3c:03:17:75:f7:
2b:33:b1:37:78:99:fc:e8:f7:7f:4f:8e:c3:6f:f3:
dd:ea:6f:12:d8:d9:60:76:e9:b2:f9:af:be:03:a3:
b9:d1:02:c1:c1:21:75:53:1c:de:57:65:6e:e8:23:
b4:c5:6c:e0:6d:dd:db:bf:6b:48:8f:39:1c:a0:b2:
1c:4a:72:50:40:83:db:c2:7b:51:9b:10:53:a8:8a:
4d:1c:49:26:2c:5f:3d:85:c1:4c:a5:88:ae:dd:6b:
8c:c3:cb:4e:4e:76:18:16:3e:2f:cf:70:6a:6d:a2:
a9:9d:f7:68:02:8a:c6:de:49:10:5a:f0:1a:45:fc:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:39:8C:FB:C7:18:69:A4:A0:CD:DC:02:32:1C:BE:79:F7:1C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b3f945d-5e73-3a78-b4b5-c5806b99fd3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:34:8f:09:4b:f5:68:1b:ec:96:f0:e2:aa:eb:02:5b:85:b1:
5f:72:b2:0b:83:1b:aa:f9:77:fd:f2:17:16:df:6c:ee:05:a5:
74:9e:5c:71:6b:11:5c:dd:e4:17:f6:cf:b3:6f:64:01:c3:39:
36:9a:b4:7d:29:0b:8b:0f:bf:41:e3:db:05:fe:d9:19:42:b2:
3e:6b:10:e5:69:d2:b7:88:45:3c:95:9b:39:d5:1b:00:80:97:
fa:f5:fd:e5:2e:83:4b:1b:a3:9f:3d:6a:72:8f:ec:7a:84:17:
d3:cc:28:17:87:ce:7d:4e:3c:7b:58:8f:24:a4:d9:d5:77:25:
f3:c8:72:c0:73:e5:b9:6a:a9:18:7c:7e:ef:cc:72:35:1d:15:
9d:15:7f:ab:61:e9:97:00:a0:97:79:c9:27:bb:12:36:49:15:
22:33:eb:fd:46:05:58:f9:77:d2:a8:8a:f1:d3:5d:17:9d:be:
af:c5:a5:54:8a:76:8f:6f:5e:52:98:0c:42:98:3b:08:56:96:
62:db:b5:2f:4b:f8:3a:a4:15:08:a0:41:9f:36:f8:04:16:1c:
10:48:6b:d2:76:71:15:9b:df:a0:e9:56:70:e2:ba:b8:84:46:
8e:a6:56:c5:45:f3:4f:02:4e:a7:4f:b6:ed:26:93:6f:fa:ae:
0a:5d:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org