Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35582a8d-b0e7-3140-9d1d-1293533b3474.roa
File: 35582a8d-b0e7-3140-9d1d-1293533b3474.roa (raw, json)
Hash identifier: oF+/ewTw3OY3KeINU0463R7SL8hAnoTG7FZ2bGioAnA=
Subject key identifier: 61:AC:37:32:54:CE:89:9D:37:C2:90:F0:F2:0B:04:B9:1E:D9:97:D1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE62E43B96B3D51AFBEDE60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35582a8d-b0e7-3140-9d1d-1293533b3474.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 216.208.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:2e:43:b9:6b:3d:51:af:be:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=6c1f1990-3b40-4e27-a1eb-ddc59e0e58fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:fd:68:10:e5:47:9e:28:0d:8c:18:fa:68:
ba:eb:11:f7:5d:ec:80:4d:91:c8:e7:6a:e7:bc:80:
d1:83:c1:50:8d:48:02:c6:bb:6f:4a:15:6d:f9:c0:
fa:b8:a4:1f:99:16:fc:cf:46:e3:53:55:91:b2:a6:
f6:06:cf:fb:55:15:29:9f:54:b9:da:66:ba:99:c3:
25:0e:98:23:9b:57:fe:6d:ee:90:03:bc:02:05:67:
2b:6c:b9:26:42:6d:14:f4:bd:8f:b8:d2:a0:54:82:
a6:f1:2c:be:99:62:30:59:87:22:7f:04:b9:5e:8a:
b1:72:a4:78:11:60:71:fc:0b:01:33:d5:62:86:8b:
48:7a:b9:bd:ee:3a:97:36:a1:7c:52:35:d7:2a:01:
bb:17:87:c4:be:4d:2d:75:4d:03:df:c2:8a:aa:4f:
3d:0b:90:c3:19:aa:ab:70:c7:9d:fe:2e:32:70:e7:
40:30:7b:19:88:e5:b5:28:fd:94:8d:cd:19:2a:4b:
7b:fa:0a:fa:a4:e4:c4:7e:fc:5b:23:6e:da:d7:25:
e8:6c:55:0e:df:43:41:33:aa:36:b3:a7:67:d5:12:
18:5d:8b:86:46:0a:2c:6c:0a:7d:e0:66:76:0a:07:
fd:e6:8c:95:47:39:12:b5:1d:38:dd:0e:08:69:a5:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:37:32:54:CE:89:9D:37:C2:90:F0:F2:0B:04:B9:1E:D9:97:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35582a8d-b0e7-3140-9d1d-1293533b3474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c0:0e:c8:aa:3e:ef:be:40:11:44:1a:4f:8d:01:02:ed:4b:
1c:b7:b2:3e:c1:4e:a8:36:52:f4:27:5e:85:74:a0:7f:7b:9b:
d9:0c:62:e4:eb:1d:4c:63:d6:84:87:c0:52:fd:fa:c1:ad:73:
f6:4f:72:e3:3c:2c:16:64:11:d6:2a:88:a3:7e:db:51:97:52:
4c:95:f0:bd:e3:38:20:dc:50:c3:67:bd:1e:41:9b:8d:5b:e5:
51:eb:b7:15:7e:b4:06:66:12:97:f9:ef:3e:68:bc:0c:73:91:
76:e0:7e:59:06:5f:ec:d8:0d:31:8f:1d:b4:74:9a:42:ac:c8:
49:c5:77:74:14:66:5f:c5:ea:6d:ad:e6:e3:da:50:f2:93:a5:
e0:17:7e:65:ea:13:d9:33:8a:0f:13:7d:d3:5e:92:e8:00:7d:
15:dc:d7:8e:d1:e0:bc:75:e1:53:be:52:0c:20:66:4f:cb:86:
24:cc:e7:4c:90:6d:e7:6e:7b:f0:70:7e:c7:c4:b6:46:b6:31:
17:6f:50:60:c9:26:08:18:21:95:bb:43:91:95:ff:8d:36:51:
91:08:8b:2e:9d:40:75:88:a8:78:da:96:b4:cf:8e:dc:74:ad:
52:32:86:6b:5c:85:5c:84:03:9a:ac:db:1a:f2:89:bc:89:d6:
3a:8e:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org