Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0b11b0-0830-3359-a8e5-a0355b9e5fec.roa
File: 3a0b11b0-0830-3359-a8e5-a0355b9e5fec.roa (raw, json)
Hash identifier: q2mj8VcBllkmE5HkxY2BIyFRjtPrLAz1lxmMS3JfOzc=
Subject key identifier: 80:37:AC:3C:06:A4:65:45:51:3B:9C:68:16:F2:4F:8C:C3:1A:DE:42
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE3D34BBA99BD0242D93D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0b11b0-0830-3359-a8e5-a0355b9e5fec.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 50.100.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e3:d3:4b:ba:99:bd:02:42:d9:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=496beea4-177f-436b-9831-25f21e437359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:39:1c:f1:eb:ee:37:2d:7d:77:22:66:fe:
98:c0:c3:ad:4e:ee:96:d4:b9:ee:a7:ef:b4:5b:8e:
61:c3:2f:7d:48:ab:09:0a:6a:a4:d2:7c:6e:59:bc:
69:ce:c6:55:08:f6:3c:28:fd:1f:e9:be:56:45:3e:
f7:d9:7e:9a:5f:3d:3d:27:d6:b5:f6:98:6f:2a:c9:
ff:e0:a7:4e:de:3e:b0:1a:5d:ea:3d:33:9f:0b:d2:
87:c9:00:f5:41:d9:4b:2e:bf:68:e5:2d:1c:51:5d:
6e:3b:f8:20:94:50:7f:62:52:ab:93:8f:49:3f:4f:
99:ae:5c:7f:c4:e1:38:b7:ea:2d:eb:5e:ba:e8:62:
c3:c4:1a:fa:48:6d:d7:9c:95:6a:c8:2f:cf:43:5f:
d1:50:62:7f:7c:b8:81:4c:8a:af:91:15:b7:88:19:
d2:de:b6:c2:e0:af:50:76:2a:e8:95:14:68:b6:34:
d2:4b:f5:a0:cd:9f:56:1e:c8:85:d7:ab:49:d7:40:
0a:8a:78:c2:58:fe:35:39:58:2a:f8:7c:f1:60:4e:
4b:0d:18:57:2f:31:88:4a:1c:60:79:1a:c8:cc:d0:
13:28:59:e0:14:0a:6c:ed:12:db:7f:ee:7a:57:35:
4c:5a:1e:e2:23:41:51:7d:96:70:3c:a0:26:3d:fc:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:AC:3C:06:A4:65:45:51:3B:9C:68:16:F2:4F:8C:C3:1A:DE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0b11b0-0830-3359-a8e5-a0355b9e5fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
50.100.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:2a:93:ae:58:db:85:3f:17:a0:c5:21:71:d8:7a:87:26:14:
e8:8f:37:8e:ef:41:5e:90:93:24:15:7d:e8:56:b2:bf:14:f9:
7c:95:08:f8:33:6e:38:9c:7a:ee:56:a0:8e:66:9b:8b:68:fd:
f4:a8:cb:ad:7b:6f:10:22:05:2a:60:8e:76:bf:75:67:7a:aa:
37:ae:7e:65:98:ae:fc:73:60:ff:cc:43:77:7f:d4:6b:62:9a:
65:c0:ae:a0:9a:26:5e:3c:c5:ac:fa:b8:15:60:0c:97:a7:28:
e2:53:6f:de:d3:fc:6f:d2:c5:18:6a:11:01:3c:6c:c8:af:d9:
1c:94:12:fc:3e:48:a7:53:1f:9f:2d:db:37:0a:34:50:e6:6d:
19:ce:e1:16:2e:38:02:ca:1b:a3:93:d3:41:3b:a7:d8:46:85:
b3:8c:2f:3f:48:7d:e0:7b:cc:6d:90:51:18:c3:b9:f3:16:1a:
00:04:1e:b1:30:09:58:fc:3b:89:3e:be:73:cb:89:bd:63:6a:
e4:8c:90:5c:85:a3:75:e4:64:84:fe:f5:5d:f6:f9:63:33:74:
e6:86:ed:a3:76:20:7b:df:72:2f:d2:12:77:e7:f1:e7:1a:fa:
f6:de:15:a4:af:87:e9:2f:c4:1e:44:5d:67:82:a3:01:78:a3:
43:ae:07:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org