Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42d066e8-2484-303b-ae27-17998dbf17b0.roa
File: 42d066e8-2484-303b-ae27-17998dbf17b0.roa (raw, json)
Hash identifier: dMTsX4b55nZHL97f5hMi8Nijfb9xx8T4Cpd9QBOWQoY=
Subject key identifier: 67:63:35:4E:B8:1A:35:5C:E4:64:D5:48:B0:C7:13:4D:09:0E:20:6A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313C83A6E2DE83590CA3C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42d066e8-2484-303b-ae27-17998dbf17b0.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 398721
IP address blocks: 70.28.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:c8:3a:6e:2d:e8:35:90:ca:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=ac09dd87-9bc5-404c-a14d-21566e505831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:1b:71:33:66:c3:f4:96:5b:24:ff:c8:ee:
35:67:1a:fd:aa:c0:63:0c:4d:9b:fe:93:58:b2:b7:
79:40:af:1d:80:e0:4e:b5:89:54:51:c0:4e:2d:fd:
c1:23:df:56:0c:a6:04:40:37:c0:b6:4a:e7:ad:19:
ff:52:c5:e9:dd:40:f6:8f:ed:2d:a1:2b:3e:69:90:
99:1d:ef:14:58:21:0c:7e:f2:33:a2:28:c6:77:43:
80:4f:8b:6c:73:6f:fd:6e:5d:b0:2c:74:6e:dd:6e:
ae:7d:bf:67:80:37:56:70:13:9f:d8:68:c1:ca:53:
0a:7b:96:cf:a8:c5:38:21:2b:aa:7f:3b:c5:53:11:
04:34:31:28:7c:4c:dd:14:fe:86:76:d3:ce:57:22:
7e:82:0d:77:ba:ff:59:ca:5c:e0:b2:cc:28:75:50:
13:82:6d:c6:2e:0a:dc:8f:05:96:f7:21:a3:35:1d:
24:64:5b:34:59:23:b4:0d:d7:ef:24:e6:4d:a0:f3:
c0:52:8f:a9:9b:9b:c9:db:a1:14:84:a6:06:ff:3f:
7d:3a:1d:f9:37:6c:a5:26:cf:0c:f7:9b:11:86:c3:
eb:84:6c:20:f2:b5:61:8f:59:e2:82:e7:72:7a:c7:
0d:12:79:28:6b:58:c8:fe:d5:a2:14:7f:e5:12:b2:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:35:4E:B8:1A:35:5C:E4:64:D5:48:B0:C7:13:4D:09:0E:20:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42d066e8-2484-303b-ae27-17998dbf17b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:2c:9c:6a:2f:76:43:64:ee:02:74:c1:d3:74:d3:d1:2e:0f:
cd:70:ab:13:f0:31:e8:50:d9:bf:98:5c:5b:ad:7b:6f:19:6c:
da:78:80:4e:ee:73:18:68:0d:77:a0:02:ce:79:98:ac:0d:9c:
45:1e:a9:e1:83:df:d4:39:fb:67:81:4e:23:af:99:86:2d:e4:
48:04:15:a3:ac:ac:2d:de:b0:14:6a:a0:02:2f:0b:1e:8c:26:
f7:80:c6:4b:2c:0f:d5:e4:b3:d2:c7:37:34:ef:b3:96:84:5e:
7d:7e:ef:61:ef:62:c6:6f:25:d0:63:67:ed:f2:a3:17:e8:af:
d5:41:e7:ff:f5:cc:05:04:1e:4b:8b:3c:64:99:dc:37:f0:65:
eb:74:12:6f:30:37:d4:5e:00:c9:5f:e3:28:96:20:c2:7e:3d:
0b:41:e1:0a:63:c0:70:85:b2:b1:e7:55:82:ee:63:d5:76:3f:
c6:cb:20:0c:ca:99:c1:6f:64:d4:26:15:bc:21:a8:ed:59:71:
94:b8:b9:74:85:67:51:89:62:b4:74:eb:e4:8e:2e:7a:b1:32:
0b:04:e1:1b:b6:5e:d4:63:7e:72:5a:83:c3:39:c7:2c:a4:1d:
15:42:7b:c2:81:c9:a9:c9:69:17:68:26:5e:a7:bc:dc:6a:cb:
3d:9d:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org