Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e7cdf14-495d-3e6b-81ae-ed59a43a9dae.roa
File: 3e7cdf14-495d-3e6b-81ae-ed59a43a9dae.roa (raw, json)
Hash identifier: mm/iSYYq7z0WgVnH/5TGCFv8nmWdleo6qzu7WQR6M0Y=
Subject key identifier: E6:57:FB:31:85:2B:BE:BC:53:D1:B3:08:07:1A:7F:09:D0:B3:91:CC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493163278A2A157AB88B3C700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e7cdf14-495d-3e6b-81ae-ed59a43a9dae.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 11831
IP address blocks: 209.17.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:32:78:a2:a1:57:ab:88:b3:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1d591a20-37dd-428c-9219-555ee6f02576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:de:b5:ab:60:e8:b9:c4:fc:27:4c:bc:c0:
fb:1b:ec:7b:4e:33:fa:e1:0b:5b:05:0d:77:fd:6b:
4b:e4:44:d5:ed:c8:fd:86:c7:1f:c3:da:cb:aa:3a:
ed:bb:23:21:d1:3c:57:aa:d8:7d:e6:ee:6a:2a:8d:
14:15:4d:11:ff:85:89:cd:80:b6:c2:ec:32:12:0f:
5a:80:b9:a0:8b:eb:93:05:8f:94:e8:af:3a:8c:d3:
ac:68:71:36:c8:25:8e:14:0a:66:54:0a:67:65:bb:
8a:a1:40:02:a4:ca:72:b0:46:50:e2:5a:4e:48:ee:
de:da:4b:65:16:26:51:63:b5:5e:5f:bd:a6:fe:6a:
36:7a:c6:16:16:2d:65:52:62:8b:8f:1e:86:b3:f9:
c6:78:dd:4b:cc:ab:77:a0:c8:83:15:83:ba:c4:04:
61:87:be:ab:b4:5a:14:ae:b0:ac:5b:83:35:af:57:
82:d3:5e:a7:fd:fe:e0:ed:ca:cc:6f:c4:64:23:ab:
28:b2:7c:be:ff:e2:66:4b:75:f8:1b:62:89:0b:cf:
08:f2:54:ee:12:95:bb:4b:e5:c8:b7:10:36:2a:ff:
ad:9a:5f:03:7d:85:bd:18:cb:f6:66:50:c8:af:06:
f9:5b:68:de:b1:1f:07:47:c2:b6:6e:b5:d4:43:23:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:FB:31:85:2B:BE:BC:53:D1:B3:08:07:1A:7F:09:D0:B3:91:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e7cdf14-495d-3e6b-81ae-ed59a43a9dae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c6:1b:de:98:f0:53:c8:8d:6d:15:32:90:75:21:76:c6:ae:
a1:67:29:98:28:99:91:53:c6:3c:91:12:eb:ec:4c:d9:f5:5a:
63:7e:af:3e:f8:05:59:5d:bd:0b:f4:82:1b:b3:04:05:2b:95:
6f:02:cf:9c:58:7f:76:f2:8c:90:1f:4f:33:56:a7:6d:93:62:
46:d1:49:20:b0:a6:17:81:00:d8:1e:db:d5:14:88:7d:b5:2d:
13:c3:7e:47:e2:80:02:9e:4d:2f:f4:cd:cf:d3:61:ed:fb:ab:
bb:a8:5f:f8:7c:f5:70:e1:c5:7d:f9:e4:5d:4d:e3:b8:61:d0:
b2:cb:ac:d4:51:59:bc:83:f4:12:8f:ea:10:4f:e9:92:f1:36:
49:22:94:3c:bc:d6:1d:04:81:ef:47:33:8f:b2:5e:08:10:89:
9d:40:84:a0:7b:81:11:e2:fb:67:f4:7f:a3:e5:89:75:34:20:
b7:cb:06:32:df:2d:de:71:45:ad:91:d6:c8:88:ec:60:31:98:
81:ba:b8:58:5d:5a:52:bf:e2:98:3b:27:47:b9:df:f8:ca:48:
fc:33:ad:2c:d4:9d:e5:76:72:97:a4:b9:4a:9f:92:c5:b2:88:
45:27:25:20:9d:21:9f:d8:57:c5:dd:73:60:a3:9a:d3:d5:d1:
19:11:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org