Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/329702cc-edd3-34f7-b23d-0b2d23627aea.roa
File: 329702cc-edd3-34f7-b23d-0b2d23627aea.roa (raw, json)
Hash identifier: 1/gZSyv/+lUQIvvsdfHRU15iSg7JVDwX5L+2oZ31N0Y=
Subject key identifier: 53:E6:D8:5A:71:A8:EA:7E:1B:99:95:BC:3D:22:8A:59:9F:30:56:17
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931643CF5610661E61F969C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/329702cc-edd3-34f7-b23d-0b2d23627aea.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 7122
IP address blocks: 209.202.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:43:cf:56:10:66:1e:61:f9:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=6369508b-4547-4b0b-ba00-3489798c2791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:e4:9f:29:ac:9b:a3:f8:eb:e9:1c:df:96:
77:a7:02:1f:39:bf:7d:ec:15:fa:40:91:59:e6:3c:
33:cb:20:a7:8d:d5:c2:c5:8e:a2:51:00:f2:1e:f0:
c6:99:42:6a:03:d7:6d:14:dc:b0:4d:a4:f4:68:36:
15:0a:7d:06:1d:81:af:1a:e0:45:3d:16:c2:96:ea:
ab:59:99:d4:ac:10:08:cf:3f:07:45:0f:5d:a9:9e:
38:30:43:f9:18:5d:a7:98:d7:8b:e8:e1:63:a2:90:
ed:28:44:9b:9b:8e:1b:a8:1b:72:05:88:44:5c:3a:
9d:d7:f5:d0:e9:74:57:d9:95:62:aa:b5:da:0d:b4:
bc:c2:1f:e9:75:35:e8:0f:cf:27:33:65:fd:35:97:
c1:03:94:96:c8:ee:82:65:b2:5b:eb:d9:21:59:14:
af:df:bc:19:0b:03:2d:9d:f9:03:8f:69:c0:40:a8:
d2:db:34:18:5c:9e:5e:ad:29:f9:51:4d:b7:d0:6e:
fd:62:fe:58:31:2c:47:d9:ea:76:3e:02:c9:0c:cb:
bf:98:6e:87:a0:30:4d:ea:ac:dd:75:81:08:20:42:
fc:36:13:14:23:69:91:5a:02:54:ce:d0:f9:7f:2e:
da:dc:04:b2:79:82:9c:79:48:49:b8:f2:c9:db:ef:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:D8:5A:71:A8:EA:7E:1B:99:95:BC:3D:22:8A:59:9F:30:56:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/329702cc-edd3-34f7-b23d-0b2d23627aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.202.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:17:d3:d3:ff:72:8c:3d:94:b0:97:f6:24:45:c8:a1:b4:7a:
da:f4:74:e2:8b:d7:6a:03:18:60:92:a1:fc:53:3b:80:b8:a6:
dc:fa:fa:4c:84:a7:8a:1c:d5:41:af:1b:96:62:95:02:63:b0:
a4:0e:9b:4e:34:a1:88:63:a5:30:2a:9e:97:2d:7f:f9:ab:82:
d3:c9:29:88:4e:85:cb:c1:dd:65:6f:68:01:e6:4b:e6:29:ce:
e5:85:b6:08:65:38:23:5b:6c:1a:6c:70:e3:e2:c9:f3:f6:f4:
fe:07:3a:3f:59:8c:33:f1:c4:07:b6:84:4a:5b:fe:6d:0c:7a:
2b:b5:e8:ad:4c:ba:9c:1c:be:56:c4:78:d9:da:1f:24:04:e1:
bb:c8:f5:4e:27:cd:dd:cc:c2:55:b8:f0:4f:3e:5b:6c:e4:9a:
87:7a:1c:17:32:22:bb:ca:94:23:44:0f:bd:2c:ed:a5:39:9b:
2f:9c:46:53:6c:20:84:0e:57:4c:91:33:f2:db:1f:65:ad:30:
c4:07:3c:c2:52:d9:57:c4:98:00:d7:41:f3:07:c8:ea:aa:25:
56:66:08:f0:78:7b:f2:01:78:24:5f:87:62:c1:db:34:52:64:
b1:cc:33:70:57:79:5a:3b:9a:d7:0b:d7:d0:d1:9a:85:14:a9:
89:11:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org