Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30ddeb44-205d-35a1-837e-885d26a111f5.roa
File: 30ddeb44-205d-35a1-837e-885d26a111f5.roa (raw, json)
Hash identifier: 75pUw6p2jnj7kn5MM8bY/TYfGX7H3+7gBv5HIt0ZjTs=
Subject key identifier: C7:70:F5:27:D1:37:6F:F4:C1:D4:12:CC:07:C6:1A:A3:07:1D:21:80
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0481573D76102FC0B3DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30ddeb44-205d-35a1-837e-885d26a111f5.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 395088
IP address blocks: 206.47.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:48:15:73:d7:61:02:fc:0b:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=81094e2e-8c7a-43af-907d-686a0b4d986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:82:65:19:3d:84:0a:eb:7e:d6:04:1c:c9:
3a:67:b1:64:92:ad:a5:13:4c:83:3d:3a:96:ac:77:
48:3f:9b:2f:07:36:1c:fa:a4:16:2e:fc:71:53:21:
af:b5:76:b0:c9:96:f8:8b:cb:84:cd:ba:4a:a9:f3:
95:be:ac:ea:73:3a:84:f1:57:f8:87:b9:d6:01:1b:
46:c9:3c:74:86:c5:5f:0e:59:74:95:49:e4:d3:57:
44:ec:40:ee:d2:ab:22:35:2d:dd:bd:f6:4a:cd:bf:
61:43:5f:7e:cd:6a:67:25:19:a2:a2:97:b8:f1:47:
3e:47:14:22:fb:75:c5:24:ed:bb:f7:57:91:29:b1:
19:73:e1:f1:7e:ec:02:09:73:b7:c2:2b:7b:b4:77:
57:be:78:b7:f7:e8:23:91:66:4a:dc:8a:84:15:36:
ef:98:a6:aa:6d:43:48:6f:ab:ca:d9:73:a7:f0:86:
49:99:b3:a8:c1:ae:6f:34:4f:af:7b:a0:73:fd:f0:
2e:c4:c5:2b:b8:89:08:e3:1a:e2:f0:b8:f7:17:68:
1b:53:c3:a1:56:19:31:d6:f2:b1:7e:8f:ff:8e:40:
a3:76:eb:0d:65:4a:3e:51:f6:dd:20:59:44:f7:91:
c3:07:09:c0:80:e1:64:f9:f8:a7:fd:4c:ae:32:ff:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:F5:27:D1:37:6F:F4:C1:D4:12:CC:07:C6:1A:A3:07:1D:21:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30ddeb44-205d-35a1-837e-885d26a111f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2b:9c:b6:2e:bc:ba:8c:8e:04:02:fe:9d:f9:03:2e:c9:ca:
00:42:fc:8d:d6:4c:99:8b:83:a5:c5:d8:c1:a0:50:29:7f:da:
a4:60:b1:12:1d:47:db:26:51:b3:33:7b:e1:e0:3f:49:c7:6b:
4e:a7:1e:aa:45:4b:a0:39:ec:ee:3f:46:3f:77:11:8e:00:a7:
11:49:f5:06:44:5b:85:31:5a:90:d8:c6:26:36:f6:d9:46:23:
1b:a8:90:5f:cd:19:15:96:b3:22:fe:d6:6d:fb:8b:09:10:2a:
af:e9:5b:f4:ff:e5:f4:b9:8d:0e:bf:2b:fa:47:63:94:b3:c6:
b1:ab:ed:58:50:56:71:8c:89:b9:58:b5:d6:bb:20:87:01:c1:
dd:b0:ba:59:3b:f6:a9:a3:89:b0:0f:51:d1:6d:e3:7c:89:48:
f3:a4:43:e1:62:b8:66:f1:03:c1:11:01:cd:58:c8:ab:76:fc:
c8:a8:07:e1:51:68:3a:a4:a7:3b:69:74:06:0f:af:06:bd:a3:
d8:35:7e:53:19:02:7a:38:ae:9f:65:e6:49:78:b7:be:d7:e7:
ec:e1:e9:18:b2:65:4d:54:07:e6:2c:55:87:c4:9e:02:c7:ca:
ac:e0:72:cb:57:89:dc:fd:9c:31:90:24:cb:c7:0b:fa:7a:ab:
bc:19:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org