Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fc8ed90-8e16-3b40-941d-ca2d6ddd6c9a.roa
File: 3fc8ed90-8e16-3b40-941d-ca2d6ddd6c9a.roa (raw, json)
Hash identifier: 00uuPl9lHWp017+9OYHeTJ+9FNukwhZh4G1x4uen5qU=
Subject key identifier: 29:EE:2E:37:4F:C1:48:24:BD:79:99:56:A2:CC:38:B4:8C:05:1D:2D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931691F50C42DA762AAAD880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fc8ed90-8e16-3b40-941d-ca2d6ddd6c9a.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 216.208.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:91:f5:0c:42:da:76:2a:aa:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=5674081f-d7ec-4aac-b8a3-e0f11a8bf59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:0d:9f:fe:f7:e7:61:d9:2e:da:af:6d:5a:
8f:24:b9:9d:c5:b2:a6:08:fe:4b:1c:4b:71:73:8b:
74:8e:0f:88:d3:6f:fc:d2:60:2c:e7:ef:f3:8d:ff:
1c:c8:39:dd:ed:7c:e3:3c:fe:75:2e:31:1a:76:10:
2b:8b:b8:7a:a0:68:3d:c2:7e:76:4c:2c:db:4f:71:
02:96:08:81:d3:28:ca:29:8b:07:d6:2b:13:b1:47:
0a:99:0a:7f:fd:bf:d4:b4:d8:72:43:04:da:ea:5f:
95:71:02:0b:e8:51:d3:3f:41:62:37:77:5d:7e:9a:
44:2a:55:aa:e2:d0:19:7a:5f:fb:c4:69:32:f1:45:
db:d4:52:1a:49:33:a4:3f:ac:e4:8b:1c:9f:8c:30:
80:b0:26:68:c1:94:19:8d:cb:bd:07:b3:bd:7d:49:
23:f5:fa:6f:14:05:48:fd:bb:d2:f2:a8:6d:76:93:
e4:51:74:d1:53:b7:07:7b:7e:ba:e2:60:81:f3:ad:
05:78:58:f1:d2:e2:71:30:da:5f:a7:ef:f4:41:65:
af:61:6b:3e:f5:41:85:27:7b:f6:23:f0:06:58:ee:
12:51:ff:52:8b:b0:36:61:c7:05:01:75:00:86:d4:
ed:78:dd:72:e3:00:ec:36:44:e3:e5:e9:44:25:70:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:2E:37:4F:C1:48:24:BD:79:99:56:A2:CC:38:B4:8C:05:1D:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fc8ed90-8e16-3b40-941d-ca2d6ddd6c9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:62:bc:32:12:a1:7d:ac:a3:46:54:68:b7:11:a2:63:c8:10:
8f:df:4e:ad:0a:24:1b:b8:c7:36:81:a1:02:a4:1b:82:bb:71:
0b:8c:64:10:82:a6:e7:4e:08:b2:ec:34:55:ff:47:ae:35:4f:
92:74:50:91:8a:9b:78:86:20:ef:f9:fe:19:12:92:b9:84:4b:
a5:81:fc:a1:44:e2:4f:06:7a:e1:47:dc:c5:be:32:69:e1:d4:
e2:91:fb:f7:0f:97:e4:f5:35:e6:93:01:8e:7b:88:8c:e0:f3:
2c:51:2f:b5:6f:99:ff:92:95:9a:04:9b:bf:6d:dc:00:f9:d0:
e3:9f:03:83:29:07:10:5c:e8:12:a1:ad:47:0c:87:3a:d1:91:
69:b0:93:05:eb:0e:34:1d:32:e2:be:9a:05:e0:05:d5:ad:cc:
5e:12:e5:f0:87:2b:36:4e:1b:44:81:da:8a:29:9f:57:04:72:
43:6a:36:f8:bf:1b:be:2f:44:f5:12:36:78:a3:94:ce:6b:25:
18:be:21:33:8e:f4:9a:cd:20:8c:b7:a0:c6:6a:bc:a7:0e:ea:
d5:6f:96:b9:64:d1:0a:8d:4d:7e:89:6d:bf:82:e2:8f:a0:69:
f4:a3:16:2b:b9:8d:6c:7f:9b:1b:2f:97:e1:f2:ac:dd:16:05:
a0:39:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org