Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f30e99-f880-3307-8d02-b50f0369b4e5.roa
File: 32f30e99-f880-3307-8d02-b50f0369b4e5.roa (raw, json)
Hash identifier: bYc8+S3reVAlZRa6U0JdtbLxuPNAuPm0/pYE5lY+9Ww=
Subject key identifier: 72:08:A7:CC:0D:89:15:E8:F7:98:96:91:EB:48:74:3C:03:DF:B4:7B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493167A614CE05B2E539CC800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f30e99-f880-3307-8d02-b50f0369b4e5.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:7a:61:4c:e0:5b:2e:53:9c:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=4a648d53-1325-4b0a-bbd4-aff515d93ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:5d:d2:e3:9e:71:86:0a:34:67:7e:a1:71:
49:c9:ec:c2:4d:a8:65:0e:fa:65:d6:89:b8:ea:42:
00:f9:ea:0f:5c:e4:42:e4:2f:87:98:01:d2:a0:50:
53:67:34:7c:cc:14:30:52:da:5d:95:51:29:f7:37:
9d:ee:95:51:bd:13:fe:07:48:94:da:6c:9a:00:56:
8f:33:34:d3:4d:e9:dc:c8:ee:d4:71:9d:7d:9d:a3:
ec:ae:89:99:ed:72:fa:b3:5e:e9:e8:1a:f4:d7:e1:
8c:d5:d8:a1:82:ed:10:7c:01:f4:aa:98:46:f4:c0:
20:98:09:eb:f7:f2:16:e7:75:ae:63:cd:98:0d:87:
af:7c:12:0e:09:a0:bb:ef:2f:cd:90:74:18:5e:3c:
70:ba:29:96:8e:70:0c:bc:4f:5a:01:be:b5:8a:cc:
28:56:7c:0f:5f:a7:0a:cb:bb:e6:d4:09:95:a6:99:
74:8c:10:dc:d7:b9:0e:68:41:af:d1:48:fa:6b:44:
b1:a2:84:61:c9:dc:f1:be:67:21:6b:b0:65:d2:1e:
b0:0b:45:dd:7a:c0:cc:8d:fa:82:8b:8d:4c:d0:44:
86:9d:53:d0:a0:b1:c2:f4:78:47:6b:92:cf:42:7d:
49:ae:d7:72:04:e8:0f:65:17:5b:99:0e:62:fd:6a:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:A7:CC:0D:89:15:E8:F7:98:96:91:EB:48:74:3C:03:DF:B4:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32f30e99-f880-3307-8d02-b50f0369b4e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:17:09:65:98:6e:3f:e5:03:7e:1c:f8:f3:f8:5a:b2:6b:e4:
06:ee:f4:50:48:01:40:ef:b9:d0:bb:3c:ca:9e:28:99:98:d4:
48:08:d7:17:b8:ed:b3:d8:15:9a:70:ad:5d:d3:48:1c:18:db:
7c:be:c6:6a:d4:31:5b:12:b3:af:3c:9e:0d:c0:0b:41:29:34:
c6:cd:03:16:e2:3d:be:9f:bf:72:a4:e1:86:0a:aa:59:54:c8:
84:7a:58:48:bc:14:42:85:a5:03:32:2c:51:6a:a7:70:04:fa:
8e:f0:0f:86:98:83:42:b0:36:9a:4e:51:69:ed:cb:fb:60:19:
d6:86:8f:55:0a:ae:67:a8:67:bd:79:d3:91:e0:82:85:69:ed:
7a:ed:5c:3b:01:6f:a3:7e:97:9f:b5:56:ce:57:60:a1:ff:0f:
ad:eb:45:fd:28:c5:a4:28:bc:f6:be:5d:60:d2:29:49:11:c7:
3a:9e:cf:d9:46:32:9f:63:f2:7c:fc:9d:f5:d0:dc:b9:a3:db:
ea:cb:34:f1:13:ab:08:1b:94:5b:ec:f6:ea:89:bc:57:ea:39:
b4:be:4b:c9:1d:37:4a:f5:63:d0:06:5b:21:f6:ee:72:1a:1f:
ef:ea:29:0c:61:0e:75:80:27:8b:72:5b:91:ac:10:6c:32:b4:
6d:2a:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org