Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33403571-73b7-3171-a68d-45fcd9180034.roa
File: 33403571-73b7-3171-a68d-45fcd9180034.roa (raw, json)
Hash identifier: pOVBqRtHPaZxAURQFpNs43KzA8JD86fagUAocYJoNmw=
Subject key identifier: D7:C5:6D:AA:F9:C1:48:C8:1C:0D:81:5C:85:E1:5E:D8:40:14:C8:BE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB07DCBDA4823DA86889600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33403571-73b7-3171-a68d-45fcd9180034.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.35.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:7d:cb:da:48:23:da:86:88:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=f3025684-892c-4449-be1b-ab64d11c82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:1b:ad:a2:00:78:30:ac:77:06:d8:70:96:
c1:5e:a0:4c:71:b2:6e:64:9b:ce:20:34:88:64:46:
f6:3c:5a:d2:e3:f9:3c:39:3b:91:be:91:67:5d:e6:
73:44:e3:ca:6b:10:9e:bb:65:62:e5:98:5f:71:d7:
ae:48:df:e0:f0:8c:b7:80:2d:36:77:10:fd:ee:36:
a5:bd:e0:71:ee:34:ce:1c:92:40:ad:59:d0:cb:00:
c2:a8:5c:00:8d:1f:cb:90:22:9f:80:82:a6:3d:40:
44:c4:50:fa:bf:52:ed:89:00:a3:15:8a:cc:35:63:
1c:1d:c1:f4:ec:1a:d4:73:07:a5:b0:c7:d7:98:d6:
a2:f3:aa:d7:b4:09:bb:37:27:ff:5e:23:aa:f3:c2:
51:ff:3c:3d:01:10:ae:dc:00:36:51:ea:85:7a:d6:
3f:53:3c:ae:6b:3b:d7:b3:ec:86:e4:ab:a9:45:20:
58:95:28:2a:d8:18:31:a1:88:45:ed:a1:dd:df:e5:
f8:bc:66:1d:5f:50:68:6a:97:25:33:ac:d2:60:a1:
c7:36:3a:7f:5e:17:92:5a:3b:10:ea:18:cb:ed:00:
15:9f:82:1c:81:fa:79:9c:36:86:02:64:b0:f1:5e:
31:6a:87:ce:23:93:cd:55:e5:47:15:be:ac:49:0d:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:6D:AA:F9:C1:48:C8:1C:0D:81:5C:85:E1:5E:D8:40:14:C8:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33403571-73b7-3171-a68d-45fcd9180034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9a:ea:ba:a6:73:e7:99:f5:cd:b4:0f:28:10:8a:65:e1:1d:
92:82:84:c4:08:c0:3e:ed:fd:cf:4a:27:59:85:b4:32:1a:4c:
a9:fb:b8:77:99:e2:cf:ba:6b:c5:32:b6:87:74:5d:27:ef:19:
c0:79:f3:d8:46:72:8a:7c:e8:e2:37:5e:b4:3e:3d:d5:79:d0:
7f:17:e9:80:90:63:97:2b:fd:a1:db:f0:d0:cf:73:df:dc:2f:
93:61:c5:10:2c:e2:0f:10:65:4c:fd:b3:aa:6c:14:d6:54:b9:
ad:d4:22:df:07:37:36:dc:88:05:47:2c:d1:78:6c:32:80:9f:
06:ba:b5:b3:0a:af:e0:1b:0f:94:a4:e3:eb:ba:7d:f8:3d:e4:
f1:9e:fe:bd:56:37:b4:0b:0e:8c:37:f4:ab:c1:9a:01:46:5c:
62:10:f1:ee:5f:78:ce:9b:e3:40:95:05:8e:45:84:49:92:9f:
2e:e8:79:1f:5e:5a:d2:f6:0b:a3:13:29:60:ac:fd:47:0c:ba:
7c:58:90:d1:15:f3:71:a1:3e:1c:b3:72:81:9c:b1:ff:d3:dc:
e1:bb:67:4f:38:9a:cb:cd:8e:ef:39:98:ad:20:e1:64:a3:f6:
7c:78:07:b9:1f:da:f3:aa:bc:5e:ff:e2:e0:a6:73:cd:a3:75:
8a:00:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org