Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f045303-b114-3569-8a1b-3c5db928daae.roa
File: 2f045303-b114-3569-8a1b-3c5db928daae.roa (raw, json)
Hash identifier: BAsENznDDfyYWWddAViCc0O7e/X6pyadvdb0Vhuxmuk=
Subject key identifier: 6D:29:04:BB:89:6D:06:3C:70:1F:34:E7:1B:DF:26:6A:73:09:B0:45
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931375988B721934A73F9180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f045303-b114-3569-8a1b-3c5db928daae.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 64.228.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:75:98:8b:72:19:34:a7:3f:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1c303a6f-5ecd-4e96-ae06-6622bd70a041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:75:57:d8:86:e9:ab:be:26:0d:a6:bf:1e:
3a:95:a6:da:0b:43:5d:2d:25:ce:5e:76:ab:32:0c:
22:1e:f1:03:c7:57:4c:9b:57:22:97:8f:e1:17:dd:
f5:49:d4:06:33:19:d4:be:42:03:42:2d:e2:12:3f:
b4:3a:27:c4:5f:b7:03:46:0e:95:f1:a8:6a:17:d3:
e5:42:4f:cf:6c:66:c4:c9:7b:38:c7:d9:26:8a:cc:
7e:b4:de:0d:19:db:53:fa:f5:e2:50:87:42:fe:7c:
c2:5c:6a:bf:61:48:b5:8c:45:2f:b6:00:5b:cb:e1:
d6:25:7b:d7:6e:ea:82:54:0d:f6:7e:17:bd:13:fb:
14:66:f6:db:ef:f3:82:7f:40:bd:34:f3:e0:e5:d9:
a2:88:90:85:c4:ae:57:04:6b:5b:d8:a7:83:fb:6c:
7a:35:f2:dd:fc:bd:ae:25:e4:c9:54:e9:1a:82:05:
28:23:8e:ea:06:bf:33:79:99:23:42:a1:dd:69:a9:
da:b0:45:86:1a:f6:90:e7:ba:b0:1b:cf:78:8f:ee:
c5:25:32:9f:d1:65:d7:0e:67:f0:ae:64:95:4f:7f:
3b:d4:d0:21:d2:a9:06:f4:61:6c:6e:92:e4:ee:07:
74:76:41:0c:86:4c:a5:17:de:27:d9:0b:71:88:ad:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:04:BB:89:6D:06:3C:70:1F:34:E7:1B:DF:26:6A:73:09:B0:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f045303-b114-3569-8a1b-3c5db928daae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:1a:98:40:d2:26:61:9d:ea:33:a4:48:74:74:d5:97:58:33:
16:0b:16:65:39:2a:2f:97:df:94:be:58:c7:1b:45:4d:4a:7c:
f3:f9:77:55:e5:a8:81:c8:f2:26:d3:23:52:a0:31:ec:85:37:
89:60:69:b0:22:a1:28:5c:e7:4c:e6:2c:df:da:f4:7f:d3:9a:
80:4b:c7:02:6c:52:80:fe:56:05:69:40:20:96:25:ae:ce:7f:
57:15:c8:d7:1d:5e:26:0c:1d:e2:a1:31:2d:1a:a7:9f:4d:5f:
d2:92:20:92:51:dc:e2:ec:03:8c:66:8c:6e:9f:1f:53:e6:cd:
f5:25:d3:b6:3c:7b:c2:c2:bd:fc:b8:77:f9:52:ad:29:42:0b:
5c:b6:6e:80:53:0a:f6:03:89:f4:b1:7e:35:2b:45:4e:2e:f4:
16:c9:ed:f9:ea:a3:18:0a:e9:45:cf:d8:c9:10:01:52:30:cd:
cd:52:a4:6f:c4:69:a8:0c:f0:61:f5:1a:dd:ee:27:34:be:b8:
ea:ff:36:f3:c5:5e:a9:01:ae:98:c9:69:30:7b:fc:f8:0b:9b:
13:b1:a2:13:7a:49:74:29:6f:25:57:f2:b9:d6:a2:9d:98:48:
92:45:45:0a:28:ba:e2:4d:6b:c0:5e:eb:55:49:89:3a:e8:0e:
9e:62:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org