Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32c3079c-3d79-3107-8e42-82b31c0cff12.roa
File: 32c3079c-3d79-3107-8e42-82b31c0cff12.roa (raw, json)
Hash identifier: 10gZSGTvdCC4MyfKBKQG6OwqsiL8AWWk118tZjxCVlk=
Subject key identifier: CE:8F:9E:CD:98:CA:AB:A5:23:31:F3:8B:80:96:A5:90:1E:C1:7B:52
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE633324A1B9A4ACBBFC140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32c3079c-3d79-3107-8e42-82b31c0cff12.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 216.208.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:33:32:4a:1b:9a:4a:cb:bf:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=23f6f0c2-12af-4584-b53a-ec71ce673e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:55:ff:26:95:c6:a5:a4:c3:fa:93:33:96:
a9:de:e2:c1:1e:09:72:dc:99:c6:73:de:3d:78:d3:
b4:f1:49:a5:84:9e:bd:7c:f7:c0:b0:11:fd:58:e0:
32:8b:2b:4c:b2:b4:f1:2e:c4:1c:36:13:4c:a8:28:
1f:7e:c7:bc:26:01:bd:26:d6:24:1e:c7:e4:76:e6:
62:cf:22:36:90:8c:a9:2f:b5:d4:ac:3d:59:5c:22:
bb:cb:22:20:21:7e:c8:6a:fd:df:81:88:14:e3:78:
06:bf:f7:3f:40:c8:73:bf:7b:dd:82:0f:0d:28:ef:
2a:3b:88:6c:79:a6:be:62:4e:2d:39:01:3c:64:f4:
16:96:e0:0b:a4:b0:95:ba:9c:08:63:fc:68:08:0c:
a4:b2:7a:c8:c1:02:2a:5f:24:2f:6d:84:30:ed:43:
e4:c0:e7:a9:88:db:95:77:fe:53:91:43:08:94:e8:
db:d2:0f:e5:e7:00:c1:f9:c8:07:69:bb:72:76:dd:
6c:a1:4e:49:2e:41:a0:3e:7c:b8:9c:7a:a9:c1:ac:
3c:9a:dc:8c:11:67:92:16:d2:f1:4f:a5:84:0b:ca:
d3:7f:13:9b:49:a3:42:21:36:52:24:16:b2:3e:f4:
bb:b7:34:9c:cf:b8:96:ea:40:9b:a1:70:00:d6:14:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:9E:CD:98:CA:AB:A5:23:31:F3:8B:80:96:A5:90:1E:C1:7B:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32c3079c-3d79-3107-8e42-82b31c0cff12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c7:6d:14:f3:2a:be:5e:c4:87:a1:5a:57:56:26:77:86:d7:
41:f4:d9:85:ac:a7:c2:9e:ca:af:87:32:91:8a:14:d2:d0:d5:
68:57:b0:6c:6f:f0:45:09:97:9f:88:53:c9:73:9f:ea:68:9a:
d8:c3:e0:00:f3:1e:43:99:34:5d:11:bd:1e:51:cc:ab:08:2f:
ac:57:3f:da:90:c8:77:71:fb:6b:e7:9e:5d:eb:b5:1b:0c:76:
07:ea:75:45:7d:8f:69:31:c5:4e:79:ec:f1:24:f3:a7:98:5f:
f6:e8:a0:b1:cb:eb:a4:b0:7f:12:51:19:c9:8d:d6:3d:ff:82:
6a:60:14:53:aa:b4:8d:b9:14:31:60:8d:bb:2b:ee:ca:c9:2c:
77:82:78:e1:a7:ca:2c:14:b9:14:f3:08:27:b3:05:2f:10:07:
f9:f6:c1:bc:0f:af:8a:a5:db:dc:12:1f:15:54:fd:64:33:86:
d6:eb:f0:00:42:1d:02:d5:62:08:e0:6e:d7:16:24:27:f3:99:
f7:68:ed:f3:d4:6e:fe:96:5f:ea:59:bd:a4:af:04:d1:60:38:
8f:b7:e9:99:0f:c9:08:b0:37:b8:94:66:d1:b7:4b:e1:23:77:
d3:70:a1:0f:d9:96:7e:e2:a4:b7:98:89:57:59:25:0a:da:de:
38:97:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org