Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e234f6b-f470-36f9-8d07-2e9a05048f99.roa
File: 3e234f6b-f470-36f9-8d07-2e9a05048f99.roa (raw, json)
Hash identifier: gxwnP754Z6ybc6cODdSezsssS9ASnCPyZNIowroaxr0=
Subject key identifier: 9A:B8:49:DD:4D:09:2B:08:65:2E:0D:A1:31:D4:19:5E:C3:9F:DA:5B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE622C424A881B830FFF780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e234f6b-f470-36f9-8d07-2e9a05048f99.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 216.208.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:22:c4:24:a8:81:b8:30:ff:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=eef0fdf0-e72c-4230-8922-72ddd24d8695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:53:37:ac:f4:5a:e5:e6:a1:be:d0:0e:25:
c8:30:54:a1:be:1b:da:bf:ea:38:c2:09:6c:bc:15:
aa:3b:c8:b2:ca:7d:dd:b0:1d:cd:7f:43:da:ad:22:
cd:ee:45:e0:34:2c:17:0a:4a:d3:3c:44:a2:7f:9a:
b4:7d:30:0b:bd:19:5b:3e:eb:9e:9e:1c:fa:08:4f:
76:ab:a9:e7:3c:0b:ae:64:b5:37:55:99:eb:ce:01:
a6:c9:fe:79:bb:55:2f:76:9a:48:24:57:62:f1:32:
3a:f2:f5:bf:b8:bd:ec:48:de:48:2f:24:94:a0:2a:
82:61:04:0f:2c:3f:f8:f0:e0:62:40:78:4c:6b:f4:
b5:11:b5:bc:6a:b1:10:14:2f:76:fd:06:f4:97:4c:
47:c2:ca:c3:ee:71:b2:fb:52:c3:9d:d0:aa:82:11:
e2:26:bb:93:45:11:56:2f:d7:58:a6:7f:74:8d:03:
20:2d:d6:6d:c2:b2:8f:a3:cd:4a:74:21:52:e5:00:
f9:04:b1:d0:06:97:59:76:6e:d8:57:3e:38:78:7f:
2b:b0:15:f0:8a:a4:fc:67:71:80:42:d0:8b:c2:24:
5e:9a:b6:2f:f3:10:2a:3d:15:4f:73:1e:42:e4:6c:
66:36:88:aa:da:22:cd:9a:22:a1:25:bd:b9:83:1c:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:49:DD:4D:09:2B:08:65:2E:0D:A1:31:D4:19:5E:C3:9F:DA:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e234f6b-f470-36f9-8d07-2e9a05048f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ae:c0:09:29:a6:6e:4f:36:73:00:01:2d:c6:b9:76:83:2f:
12:c7:92:e1:89:51:54:28:a6:e7:09:19:48:0f:81:96:24:30:
53:57:f0:f7:7c:b0:d6:aa:f8:fc:58:08:44:85:9c:f7:3c:39:
5a:3c:d2:77:96:0c:8b:88:88:1c:fa:39:31:ec:0c:11:7b:21:
3f:d9:89:bc:f4:2d:d6:25:55:9d:fd:25:62:c6:d0:09:fa:05:
3d:12:a2:84:15:14:4a:92:75:07:55:0d:21:e5:9d:10:b2:c8:
c8:a2:91:c3:b3:09:47:09:d4:5b:8f:43:0f:5f:97:56:0e:d8:
ea:8c:1e:17:0b:f3:60:1b:29:d6:89:b2:10:2a:8e:1d:ca:b3:
cb:3b:08:4d:36:78:a5:31:f9:c9:77:c8:6e:c0:5d:24:8b:f4:
45:28:1d:c9:91:e1:7b:54:69:d2:ae:7c:ee:16:b0:42:a6:a8:
d0:36:84:4e:c9:46:ac:0c:55:6e:b5:17:dc:78:64:ab:96:0b:
01:8e:10:6f:1c:17:82:26:a1:dd:2e:92:33:ee:1a:7c:56:3f:
5d:49:fd:bb:49:f0:1b:39:0e:37:4f:e1:da:86:e0:7a:dd:35:
19:c6:27:5a:d7:6d:44:34:1e:3d:9f:bd:7a:79:8f:f1:67:83:
35:6b:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org