Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/381666e8-835e-34c0-95a4-da00840a0cc9.roa
File: 381666e8-835e-34c0-95a4-da00840a0cc9.roa (raw, json)
Hash identifier: +ZfKYAzeXRV4VN5yf6urfIHx07hmRTkA8bwBV/oc6YU=
Subject key identifier: 8E:05:F1:41:0C:BC:8C:BC:B6:33:D4:1A:9C:27:03:0C:89:87:5E:58
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE53AD5F5A2124F4CB385C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/381666e8-835e-34c0-95a4-da00840a0cc9.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 184.151.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:3a:d5:f5:a2:12:4f:4c:b3:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a16535b8-2cbd-4602-96e5-ad9f4b5a9263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:42:fc:97:4c:94:40:5b:1f:00:29:7e:65:
ae:70:00:26:a3:50:c1:75:7b:79:25:d4:e6:a9:9b:
64:cb:72:07:84:5e:82:90:01:d7:58:43:0a:22:70:
64:0c:e5:a6:8a:f1:88:49:b8:95:e0:5c:00:e0:00:
e2:e4:f3:e9:12:e2:d8:03:b8:24:20:2c:c2:d3:5e:
d3:1b:60:9f:2c:b9:83:35:81:4d:2a:46:eb:ad:44:
b1:91:36:d4:36:c4:55:98:66:ce:54:54:29:53:0c:
89:e5:ed:26:6f:77:5b:58:44:c3:05:19:35:01:38:
47:2b:10:db:5f:97:51:da:04:9b:1b:c9:e6:b4:7b:
c4:b2:5b:46:09:1d:db:bc:ed:54:93:51:16:61:42:
6d:67:72:c2:48:4a:c0:12:ca:85:ef:04:e1:a2:6d:
19:3d:bd:0c:8b:22:cf:bb:d8:1a:fa:99:12:e9:db:
e1:5a:d2:f3:bd:82:cd:b8:b4:cb:a4:a8:d3:76:a8:
59:6a:26:9c:96:56:f7:14:3c:ba:69:12:c3:67:07:
bf:4e:a1:e9:5f:d9:48:6d:53:34:ef:67:e6:c7:03:
b8:ec:4a:8e:96:c9:23:26:12:2d:73:1c:ec:be:ab:
76:98:45:2d:08:72:7e:2b:d4:0e:da:86:cb:c7:78:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:F1:41:0C:BC:8C:BC:B6:33:D4:1A:9C:27:03:0C:89:87:5E:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/381666e8-835e-34c0-95a4-da00840a0cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e2:4b:2a:54:43:eb:f3:b3:76:91:be:4e:bb:fe:d0:87:1e:
10:e0:30:fc:c9:ed:34:de:5b:0c:89:ce:64:9d:c3:84:28:4e:
54:6c:cc:54:34:19:2a:10:95:ea:58:6c:0b:c2:2d:ce:34:87:
bd:29:2a:7d:20:3a:24:88:74:85:fc:51:54:e8:41:ec:19:2a:
f9:9f:d6:99:02:a8:aa:d2:d7:46:6c:c3:7e:58:d4:c3:f1:46:
3e:f5:be:58:f5:d2:bc:9d:b5:d7:77:76:f2:36:b7:c5:40:86:
94:63:a5:24:38:79:68:fb:e2:cf:7c:bd:89:c3:4a:81:62:12:
27:3b:66:d8:17:b4:a6:0a:5f:4c:06:ff:eb:b8:99:63:c4:bc:
be:df:36:b6:92:6b:96:5a:28:39:66:09:9a:41:49:52:f6:5d:
77:b4:9f:27:2e:7a:db:f6:ac:0d:a0:c1:b5:95:c3:32:e3:4f:
7d:39:65:79:06:76:18:50:5d:96:de:f8:5d:de:bd:32:72:6d:
17:2d:a5:f2:67:aa:d1:af:09:be:61:cb:0f:6a:57:e9:a2:68:
2b:63:72:e4:15:01:6d:cb:45:d7:f8:2a:a6:da:05:01:e7:bc:
81:f0:7f:27:1e:37:6e:27:70:db:b3:ef:7c:ad:2a:40:e7:58:
47:cf:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org