Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fc7c457-c7f1-364d-8b72-aee2bd4b6c95.roa
File: 2fc7c457-c7f1-364d-8b72-aee2bd4b6c95.roa (raw, json)
Hash identifier: Ey2bNJkgPNbgk1sJOO5/qWEsXyWSrNej+XEdxJUTaGs=
Subject key identifier: 6D:48:35:4F:8B:1F:C8:97:54:EB:E4:D2:7C:A4:FF:44:3B:21:7D:58
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844204F05EA2C9BCBCA456BD300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fc7c457-c7f1-364d-8b72-aee2bd4b6c95.roa
Signing time: Tue 05 Dec 2023 12:00:00 +0000
ROA not before: Tue 05 Dec 2023 12:00:00 +0000
ROA not after: Wed 17 Jan 2024 05:00:00 +0000
asID: 12132
IP address blocks: 199.243.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:4f:05:ea:2c:9b:cb:ca:45:6b:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 5 12:00:00 2023 GMT
Not After : Jan 17 05:00:00 2024 GMT
Subject: CN=747db717-3bb7-48f8-9721-a6cf2e169f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:ad:3a:3f:c5:6d:0d:58:12:cc:fd:cb:27:
c1:51:06:39:7a:7a:fc:69:0e:08:15:61:93:e1:79:
fc:a0:25:88:d4:2b:c8:a3:d4:d8:86:0d:3c:e4:82:
84:e2:a0:cd:70:ce:9c:c2:3f:a2:f5:0a:89:c8:56:
72:6c:7a:42:df:61:cc:21:a2:2b:b4:06:22:ae:97:
87:73:c2:55:cd:61:87:32:19:8c:49:ba:b1:a4:c4:
c9:20:c8:0b:72:e2:88:37:16:f1:d8:d8:1a:2c:8e:
ba:78:da:dc:9b:f9:59:f5:50:00:42:5d:c3:11:d7:
91:12:78:fa:19:6a:09:28:c2:68:63:9d:dc:0e:18:
84:3d:3c:5b:f4:3e:90:e8:c9:32:f3:90:92:73:b3:
af:3c:16:e5:13:84:74:d8:10:02:c8:bb:1d:78:4b:
96:d7:14:37:ea:79:4f:5d:46:a0:74:5b:8e:ed:f2:
ba:ef:57:28:37:c8:76:42:88:e3:e1:b3:0b:69:da:
6e:39:9f:c4:73:88:bd:0e:c9:42:71:2b:b6:cc:82:
2c:be:7b:c7:f8:94:7d:d7:63:97:e9:9a:ac:7b:9b:
ab:d6:fc:d5:bf:b9:b1:fb:4d:a4:9e:94:8e:e4:1a:
d9:c4:3b:fb:1f:1b:c2:9a:53:69:d0:6c:0f:88:c9:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:35:4F:8B:1F:C8:97:54:EB:E4:D2:7C:A4:FF:44:3B:21:7D:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fc7c457-c7f1-364d-8b72-aee2bd4b6c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d9:9f:d8:cb:c8:2b:d5:b3:cf:ff:da:16:d8:3e:8b:53:5a:
b9:6d:b3:39:f0:80:b7:c4:4a:96:93:5d:75:66:03:e9:21:7e:
4c:02:50:c2:40:2f:8c:04:d6:ad:e7:90:5b:1e:3f:f5:27:93:
ad:76:41:42:21:4d:64:e1:e2:2f:4f:7a:c8:ed:35:cb:b5:bc:
5b:eb:bb:07:54:4d:03:db:e7:c1:6c:5c:29:b2:11:8c:a9:ca:
bc:48:18:cd:fe:0f:69:30:03:64:3b:98:df:05:4d:6a:e0:1d:
19:6f:4d:0d:20:ea:be:d6:8d:13:59:0d:d9:df:f4:55:de:99:
ac:4b:54:2a:d6:1a:ba:31:58:75:fd:0a:49:6e:5b:f9:c7:d2:
ac:9f:e8:8e:4a:f0:ac:20:b9:8d:7b:68:89:96:4c:d9:47:1b:
89:32:b4:15:ba:6a:b5:c8:92:6c:a9:b7:d5:6a:59:51:f4:6c:
4a:22:cb:cf:0a:6e:2e:fc:74:4b:47:2e:c5:be:32:25:ef:5c:
d1:ad:70:aa:7e:36:15:e3:1d:9a:79:c9:8d:57:7f:25:72:2d:
b4:62:68:a0:d5:1e:07:d3:e7:bf:e7:67:6d:ae:97:4c:83:f5:
d3:ef:8b:ce:ed:89:99:9d:19:9f:9f:4c:5b:a7:9e:b1:e9:81:
2f:f0:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 06:10:10 2024 by rpki-client on console-ams.rpki-client.org