Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41e30158-ac20-3a8b-9eb2-b550b69fc432.roa
File: 41e30158-ac20-3a8b-9eb2-b550b69fc432.roa (raw, json)
Hash identifier: 55yzLESIREjrwjTMS8aMwsUTUAdn/fXLLkU1ZjYcXUc=
Subject key identifier: 0F:69:8F:80:F3:DE:55:21:37:B7:F1:3D:BE:06:66:46:36:C4:56:52
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315EBCDA4E3879833B8DE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41e30158-ac20-3a8b-9eb2-b550b69fc432.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:eb:cd:a4:e3:87:98:33:b8:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=143de630-7c78-432a-aa9f-860c49b4ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:20:8d:7b:64:16:c1:21:55:11:ac:42:0e:
66:35:09:08:4a:59:b3:44:1f:c5:7c:eb:70:90:8d:
06:c7:2d:dd:a7:c7:f9:1d:fb:e3:c2:76:12:70:51:
55:ba:a9:6c:77:82:8b:b3:84:66:f8:62:36:2b:9f:
bc:83:66:c9:36:11:95:45:26:4c:4a:4a:84:8a:ed:
d0:22:09:9e:7c:ef:30:24:3a:30:60:ef:67:79:87:
09:e9:fa:1b:aa:f2:5b:1f:9a:d6:ef:6b:b6:74:e1:
2f:a1:e0:fd:4d:88:09:21:4a:0b:18:4a:2f:1e:e6:
db:e4:ec:09:76:ce:83:0e:dd:fa:02:c2:93:03:06:
e2:52:f2:30:17:da:2a:48:f8:82:e0:c8:bb:62:ee:
36:cd:2d:6b:b9:0e:b6:e3:c1:88:94:bc:75:27:bd:
24:16:1d:1c:2b:4b:a9:63:36:57:61:31:82:e7:80:
d7:bc:59:ef:2d:e3:39:27:4c:d9:be:d9:10:43:b5:
d9:6f:5b:62:74:cb:bf:f8:79:82:d8:7b:9c:73:ea:
31:89:ac:13:4f:51:75:93:8e:17:21:88:29:8d:11:
71:b0:9d:f9:57:49:a7:5e:52:ae:72:9c:65:f1:d0:
1a:92:54:47:2b:9c:c1:cf:e0:6e:97:66:a5:79:97:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:8F:80:F3:DE:55:21:37:B7:F1:3D:BE:06:66:46:36:C4:56:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41e30158-ac20-3a8b-9eb2-b550b69fc432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:6f:de:80:1c:80:22:df:9c:de:95:40:d8:f5:d1:59:e5:45:
0c:8d:25:06:62:9c:c3:39:b9:46:3c:49:a3:cb:24:3c:a5:b9:
f1:6e:5c:5a:5f:4e:81:94:21:ac:85:f0:02:24:0f:ed:e3:75:
87:46:37:ec:f9:f7:9b:9d:69:90:3d:15:53:4f:aa:07:e9:1a:
c6:49:30:1b:c3:35:a4:0e:91:dd:d9:97:e6:d4:aa:b6:be:4e:
43:af:43:dd:ad:9a:e3:19:18:c3:a2:83:6e:29:b9:84:c0:f4:
5d:10:28:88:96:47:77:b0:0e:e4:1f:42:fa:86:2e:97:14:60:
e9:10:8b:c3:23:42:60:41:f8:17:e1:c5:e3:bb:76:d1:91:f5:
cb:36:e6:cf:fb:2b:1f:63:59:eb:b6:7c:68:ae:b3:f4:8d:6e:
f8:63:ef:f0:e2:b9:83:50:02:db:3b:26:fa:9e:39:91:e7:32:
6a:f6:fc:2a:0d:f6:8c:a4:1b:a9:97:d0:bf:83:db:a8:d1:bb:
fb:c0:19:52:d3:42:56:bf:58:04:52:16:f2:18:2c:d6:23:d9:
af:f9:4f:d7:37:12:de:be:59:77:7e:7a:fc:ff:25:10:45:bf:
34:d6:26:22:b1:8e:6f:84:82:63:f5:56:b6:1c:2a:90:34:24:
c1:28:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org