Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35aa2ce3-65da-340e-b942-174a41386217.roa
File: 35aa2ce3-65da-340e-b942-174a41386217.roa (raw, json)
Hash identifier: ufXZYqUnjNdXvQ2Tvy8XYihPWNxY15UBx+O6i1HPVOM=
Subject key identifier: 7F:DE:0E:ED:5C:D0:DB:45:46:59:32:AE:AC:45:7E:E7:AF:E3:E3:0B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75AE838AD5E9E0558E1B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35aa2ce3-65da-340e-b942-174a41386217.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 198.235.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:ae:83:8a:d5:e9:e0:55:8e:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=1f2ddf63-c446-4360-9d90-397b7d494cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:f1:cf:28:96:9b:4f:06:e1:e7:67:73:4e:
57:28:4b:59:d7:a0:3a:26:71:ed:0c:b3:69:34:de:
df:cb:46:3a:62:42:c6:36:d5:ce:ac:e9:75:cd:c8:
ff:22:49:4d:d5:64:cf:97:4e:ae:d4:61:8c:ee:8f:
b2:42:22:53:5c:c6:7e:2b:9e:9d:31:73:3b:e6:e8:
58:1c:6e:26:0e:c9:42:7b:3d:66:dd:9e:74:1e:60:
bf:8d:6f:25:02:fb:a1:58:18:1f:84:2f:f3:0e:1d:
6c:f4:83:d7:54:7b:ca:0e:eb:51:10:8b:05:14:78:
33:88:49:9b:f2:f1:71:7f:af:c9:ad:ca:63:7c:4c:
4f:db:f7:4d:f3:ea:b1:f8:70:fd:22:e7:1e:0e:07:
92:9c:1f:09:2b:49:5d:da:1a:84:ac:4a:69:8f:ff:
5a:27:34:11:ed:37:60:c9:54:01:dd:bc:4e:30:c5:
f0:b7:6e:ab:5f:b4:72:4d:ec:cd:76:c4:86:7a:23:
f8:be:0a:b3:8c:ab:59:d1:72:f4:47:58:74:34:aa:
46:dc:1f:63:79:c3:f7:5f:b4:60:f0:1b:03:de:19:
80:9d:8f:d9:8b:5e:c3:d5:f5:77:55:ad:8d:f5:a7:
bb:65:b9:47:7a:1a:77:ec:d9:2d:8a:c1:82:39:43:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:0E:ED:5C:D0:DB:45:46:59:32:AE:AC:45:7E:E7:AF:E3:E3:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35aa2ce3-65da-340e-b942-174a41386217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8e:bd:6e:62:66:73:be:df:e9:9a:e2:95:22:8e:5c:ba:2a:
2d:07:b3:c2:d7:d3:3b:33:43:29:7b:3c:55:92:a8:9d:74:e1:
2b:e3:1b:83:10:76:ac:9a:42:2b:14:92:5d:75:c7:b5:80:d0:
49:98:9f:93:d0:d3:fb:47:99:8b:39:9f:c7:d0:41:e8:52:6e:
e8:ed:eb:1f:57:6f:4d:45:dd:dc:bf:93:5b:1f:5c:41:7d:44:
67:b7:ba:2e:33:f7:07:f0:0e:34:0f:e9:f9:d6:d0:d7:8e:28:
1b:e7:b4:69:d4:22:22:16:c0:63:b3:09:04:42:f9:5c:bf:62:
e0:89:f8:1b:3d:e2:73:c1:c1:89:f1:64:43:34:29:a6:9b:07:
50:93:51:00:86:a3:86:1c:49:23:69:09:6b:aa:1c:83:86:74:
2a:76:54:f5:2a:cc:27:57:f9:73:dd:94:dd:c6:bd:7c:66:f1:
53:37:44:2b:6c:45:67:73:a9:b3:88:93:c8:ac:2e:bd:26:be:
40:87:01:5a:7c:25:89:4c:70:2f:4e:14:aa:c5:47:07:a1:a7:
8c:12:4a:d2:44:f3:4f:2c:65:9b:a9:4f:d2:51:be:0f:19:3d:
f5:e7:28:30:20:ea:f1:d7:35:00:a3:08:67:4e:f6:75:ae:27:
54:d2:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:17:50 2023 by rpki-client on console-ams.rpki-client.org