Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a3ca66-885e-322c-b2ff-3f75bab0ef00.roa
File: 36a3ca66-885e-322c-b2ff-3f75bab0ef00.roa (raw, json)
Hash identifier: g+u0hlIiHZRzfoG2pvhzHsqBDPRSLntgVRSNxhRKSuw=
Subject key identifier: 85:13:73:33:B0:A8:A4:3E:2B:34:06:8F:2C:07:E5:4A:77:22:31:BA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316AB9C12E1C5C8D3426C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a3ca66-885e-322c-b2ff-3f75bab0ef00.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 216.208.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:ab:9c:12:e1:c5:c8:d3:42:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=298a0b57-06d3-4a00-ace2-3eef9e5f57a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:e4:33:7d:21:b3:cb:b7:91:cf:1a:8d:3d:
50:9f:bb:88:50:14:f4:cb:81:b6:d6:c4:11:21:ee:
ef:a3:7e:42:9a:2c:fa:22:bc:9d:23:f4:cf:a2:1b:
c5:98:e7:34:88:96:00:be:0b:10:21:57:c5:ec:89:
7e:7a:ea:98:ec:4f:3d:69:74:4a:d4:da:a9:47:99:
51:02:4b:33:ce:3f:55:b9:03:86:e2:e4:64:c0:33:
36:33:23:e3:a3:81:b9:8f:ef:01:07:43:65:3a:6e:
f2:50:05:7b:c0:5f:78:49:28:15:eb:3f:b2:e6:ec:
c1:78:f5:ba:47:0d:bd:0d:06:29:ea:b1:82:35:25:
ff:c7:e1:aa:b8:d2:ee:55:c7:58:be:6b:79:1a:97:
74:b2:22:79:43:21:eb:3b:06:75:36:90:da:5b:64:
39:67:d6:66:4c:ca:15:3b:8a:e4:d3:61:40:64:65:
23:f6:52:10:f9:1c:ed:03:d7:0f:15:d7:aa:d6:ac:
41:92:6a:4d:cc:87:88:ee:32:cc:cf:db:b8:fe:12:
8c:ae:f4:fe:d9:ea:43:6e:f5:fc:a5:bd:d2:98:cd:
ff:23:9b:0b:5f:f3:d8:2d:98:03:4c:94:ba:a8:94:
91:63:23:51:50:c8:aa:58:05:4b:92:12:78:81:9f:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:73:33:B0:A8:A4:3E:2B:34:06:8F:2C:07:E5:4A:77:22:31:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a3ca66-885e-322c-b2ff-3f75bab0ef00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:20:7a:29:12:26:c2:29:09:77:1a:e1:34:94:6b:12:72:9f:
b7:1d:62:09:a8:74:4e:e7:41:fb:10:2b:a8:4d:a1:24:06:02:
16:24:23:cc:c6:8c:1d:d5:5d:34:12:4e:52:6c:c9:8c:1d:dc:
df:e7:a8:d5:b3:ef:d6:1d:c5:e4:a9:e5:c2:81:e2:89:c9:2f:
ff:d6:6f:de:34:cf:97:e1:fa:67:4f:01:d8:50:bb:f2:1e:ce:
3e:55:f8:86:d7:bc:3e:19:74:31:39:56:53:44:78:54:c5:09:
fe:72:fa:ad:c5:0d:e9:49:b0:14:bd:b4:70:78:6b:da:b9:cb:
4d:00:6d:02:47:1d:f4:0f:92:9a:af:f8:fe:3f:cd:c9:cf:f5:
5c:85:12:3a:5e:29:4c:aa:ce:7d:ec:24:d0:67:ab:55:43:ff:
be:e4:63:78:05:28:d5:8a:0d:5c:53:08:91:f5:a0:e6:82:35:
f8:ef:62:e6:d2:79:c2:d3:f8:d7:f5:00:92:17:46:cd:35:91:
8a:4c:2f:11:d6:d6:73:c6:6d:11:20:9c:97:b6:24:2e:69:ee:
c9:bd:10:b4:0f:5e:e3:c3:c4:92:47:1f:0b:15:53:2b:1f:df:
ac:ac:f0:25:fa:18:c9:10:93:0c:77:c3:a8:dc:0e:46:f1:53:
6b:e7:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org