Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34e0c927-0784-3d59-a2c1-2c7f6b3b253d.roa
File: 34e0c927-0784-3d59-a2c1-2c7f6b3b253d.roa (raw, json)
Hash identifier: bdJQ71X/oAoKsHPg52nrAfpxSloEEFI4Ayd8SNzOwWQ=
Subject key identifier: FD:2B:92:F0:C0:7B:C7:62:EA:A8:40:42:ED:B0:85:C3:1C:44:29:96
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75B4DB22420A59378B7880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34e0c927-0784-3d59-a2c1-2c7f6b3b253d.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 10965
IP address blocks: 205.200.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:b4:db:22:42:0a:59:37:8b:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=8a4c8df2-b165-4911-9787-36e5dda88f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:d7:6b:31:d0:0b:2d:02:a7:d2:12:17:a4:
0f:a1:63:3f:23:9f:c6:c4:67:20:08:8f:2c:46:b1:
4e:fe:be:f1:69:ba:9c:ed:8d:c7:ad:69:8f:90:c3:
4f:fa:54:f6:87:03:01:42:b6:d1:c1:b8:9d:16:ed:
3a:af:1e:4f:ea:be:0e:d7:92:64:7d:68:ba:db:aa:
45:5a:c2:66:59:66:59:ba:82:e8:50:4d:e4:26:5d:
c3:7f:75:ab:a8:fe:8e:17:3d:75:b8:79:93:7a:e6:
d5:04:30:9f:22:af:50:87:be:fa:35:8f:1b:1a:46:
b0:0b:6c:38:43:5a:7a:ce:70:3c:51:b4:c5:dc:8c:
3c:37:30:2a:06:64:70:05:20:d0:0b:51:48:c8:7f:
2e:2b:7e:bd:d6:4e:4a:52:0f:ce:35:49:4d:9a:aa:
71:82:48:87:88:5d:24:06:13:1f:c1:e1:f3:09:59:
16:0a:8e:96:35:25:d6:22:5b:d2:ea:b9:45:b3:e4:
4a:1c:e4:10:bd:a8:a0:03:32:ee:83:a3:22:7e:ab:
41:46:57:64:fe:10:8e:cd:88:60:61:41:3f:c2:b3:
d9:6f:76:a6:4d:72:df:f1:bf:ec:8d:2d:3e:cf:bf:
a3:7f:1e:63:95:d2:b4:07:08:f9:37:c3:59:35:63:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2B:92:F0:C0:7B:C7:62:EA:A8:40:42:ED:B0:85:C3:1C:44:29:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34e0c927-0784-3d59-a2c1-2c7f6b3b253d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:c0:f0:14:82:84:62:6f:52:f6:cd:0d:85:9f:7a:d5:eb:32:
b7:33:5b:62:d8:20:a3:5f:73:72:97:63:7d:57:e0:fb:26:fe:
3d:45:ad:fa:f4:d6:18:85:1d:02:c6:fc:f0:98:ca:cf:87:a9:
ff:6c:4c:f1:cd:25:b5:ff:7a:16:fa:16:00:77:8e:15:55:85:
ee:f5:a0:65:98:e0:11:b7:c0:21:74:6c:ec:7e:41:b5:f9:ae:
f4:16:e8:a3:c2:6f:c8:a5:fd:b9:71:43:ab:f5:55:1c:d7:e7:
d7:ae:60:a8:2d:99:39:21:4c:75:b8:f1:ac:e2:b4:c1:bd:eb:
5c:ea:a7:c7:3f:24:a5:19:1e:9b:23:1d:33:82:83:bb:81:8b:
a6:80:1f:66:9d:8d:58:fb:63:96:be:38:ca:d3:c8:b8:ce:4d:
03:b0:04:b7:20:42:c7:54:b1:29:29:9f:a8:55:33:58:b2:7c:
25:fe:47:9c:04:6e:fc:50:46:10:c1:81:51:44:14:0f:3b:83:
0b:d2:ca:6f:66:da:fe:f0:f0:b0:e9:05:88:01:b7:29:ce:d7:
97:d0:68:51:26:d6:27:28:0c:b8:db:39:2f:62:64:7b:cc:81:
25:fd:6b:da:88:b5:75:f2:28:94:29:f1:20:9b:cf:78:ea:4f:
72:1c:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org