Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/304d561d-7ab2-3def-98f0-a5f84a3ac59d.roa
File: 304d561d-7ab2-3def-98f0-a5f84a3ac59d.roa (raw, json)
Hash identifier: ZM/IbVfhs/R+Zdg/3YfWGr5fe1NsDtKHf2/OY5uUcmQ=
Subject key identifier: F3:1F:F2:EE:0A:BC:4B:4D:8A:EA:BA:21:52:7D:1D:39:6B:AC:79:63
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493158EC8339CD73AAFD74380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/304d561d-7ab2-3def-98f0-a5f84a3ac59d.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21552
IP address blocks: 206.172.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:8e:c8:33:9c:d7:3a:af:d7:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1eb5fc99-6858-4bce-9204-eb9f2e2534e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c2:99:7a:a6:85:b0:c3:e5:5f:e5:04:13:e1:
e0:63:7c:bb:74:57:86:05:c2:34:a7:49:87:8f:65:
1d:70:a0:ea:10:ca:1a:be:f6:19:7d:34:c0:78:24:
cd:e8:e7:43:0c:46:79:4c:2c:a1:32:38:bc:05:72:
6a:c8:3b:f5:a2:06:2a:b1:98:dd:4e:02:9a:bc:46:
a2:f3:8c:5f:54:14:10:af:ab:9c:f9:96:6f:c2:b2:
c6:7f:4c:63:2e:f0:bd:27:b2:17:eb:1e:e3:cf:d1:
76:ce:db:e5:a8:6d:41:38:3e:d6:17:7d:a9:88:16:
2a:d7:56:8c:8e:fd:bf:ad:79:ca:60:48:2e:1b:26:
5f:e1:d4:85:0b:bb:04:56:a6:cb:c1:60:14:58:24:
18:c8:a6:c6:72:05:92:51:c9:f3:f5:41:62:c6:ce:
e9:60:e8:11:9b:f2:9c:28:e8:e3:2e:b4:b5:e9:48:
de:8d:7f:7a:ae:32:8e:38:e6:3e:bc:c7:00:10:c1:
2b:2d:f2:74:30:e6:92:9f:e7:58:c0:f8:4e:dc:02:
cf:c1:8a:a4:62:29:d7:e5:6f:dc:9c:2b:2a:7e:f7:
e0:29:12:2a:05:ca:f3:16:fa:c8:39:88:f0:c0:d6:
24:ea:5d:f8:00:f2:ac:d5:fe:c2:f5:8b:f6:97:15:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:F2:EE:0A:BC:4B:4D:8A:EA:BA:21:52:7D:1D:39:6B:AC:79:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/304d561d-7ab2-3def-98f0-a5f84a3ac59d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c5:f8:a1:68:02:b3:89:8e:d7:67:bc:80:9d:9d:17:3c:1c:
99:f7:e4:5b:cd:0d:2c:d8:a1:3f:a1:40:b3:84:6b:98:8f:e6:
31:a7:f0:82:56:c6:e3:42:8e:d2:1e:68:79:f3:2d:46:e7:1a:
22:a9:bc:80:1c:9c:9a:6f:ae:d0:4d:cf:57:07:0f:58:d6:32:
63:18:9d:65:72:8b:4d:c7:02:30:b4:b6:d0:85:9d:5b:93:85:
24:6d:36:8d:82:6d:15:be:06:41:c9:78:fd:f0:08:f2:c2:59:
f8:b7:01:9a:e6:b3:8e:6c:79:6b:6c:00:e8:57:94:bc:43:5c:
c0:26:a2:ee:f0:92:0f:b2:73:e7:45:5e:52:f4:f0:c8:17:96:
cd:c3:f8:5d:7d:b9:dd:ee:70:f5:50:ff:d4:4b:fe:e6:d7:15:
37:c1:22:e7:b0:34:a3:03:95:90:25:4e:4e:7b:58:79:44:e6:
a3:22:b1:32:b5:08:2b:3b:34:a8:0c:c5:82:77:6c:c2:ef:2a:
6d:1c:f5:7f:bd:49:90:31:34:8a:dd:b1:5d:90:11:6c:bf:54:
38:ce:d2:57:37:98:d5:7c:b1:b3:f5:12:a3:76:f1:6a:aa:2b:
69:6c:2a:0b:8a:3f:77:b0:d7:6a:ad:aa:c8:e1:bf:81:9d:2e:
a5:15:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org