Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a8d6f2-c08f-3119-90c2-97732df20d76.roa
File: 43a8d6f2-c08f-3119-90c2-97732df20d76.roa (raw, json)
Hash identifier: lHGX0b4Ci6mRfUgDbXupJnu5JGAFyBFcj6MsIhmZaqk=
Subject key identifier: 71:1E:02:B3:5D:14:30:DF:F9:59:F4:A6:E5:D1:43:91:CA:D2:BB:91
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314CC54B10702DDE7F599C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a8d6f2-c08f-3119-90c2-97732df20d76.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 199.243.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:cc:54:b1:07:02:dd:e7:f5:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7b846e4e-fc3f-4b1f-9847-2dadee9565d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:af:94:ab:cb:73:7d:86:09:a5:81:61:3a:
12:3d:65:a4:cf:8c:21:5d:a3:93:b0:ed:e6:e7:09:
03:1f:8d:e1:b5:6f:b1:bb:6a:c7:46:c7:26:20:5e:
47:32:ef:a7:23:1d:0d:38:a4:19:4d:58:b7:4b:8f:
60:89:ef:aa:11:02:91:39:ab:7d:66:da:0b:bc:3d:
7b:15:02:d0:1e:89:2f:3a:39:38:39:41:dc:1b:a2:
87:e1:84:18:34:1f:9a:2b:38:de:62:d6:9c:9c:b8:
9c:21:3b:f0:8e:9f:68:54:bf:2c:42:1b:9e:64:ee:
87:4c:e7:36:07:cc:c5:05:d9:00:5e:18:ee:e4:45:
bd:bd:56:bc:da:38:6b:43:99:3b:6c:f5:36:b0:d7:
70:ba:23:f9:96:ac:1b:99:b9:31:fe:64:ec:43:ac:
e7:a1:98:e6:09:65:4c:1e:1b:ff:06:31:bf:bb:51:
81:10:a1:97:b4:69:5c:46:4f:5d:8e:b4:c8:29:56:
2c:68:84:e8:d4:d0:88:ca:9f:e4:bd:39:28:32:81:
8e:8e:c8:31:61:c3:94:a8:55:d5:05:f5:02:98:55:
09:22:c5:45:32:fe:9c:53:37:00:e4:80:60:0d:f7:
9b:99:ad:81:fc:50:7b:6a:cc:67:e8:65:7d:75:00:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1E:02:B3:5D:14:30:DF:F9:59:F4:A6:E5:D1:43:91:CA:D2:BB:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a8d6f2-c08f-3119-90c2-97732df20d76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2f:94:86:42:6a:c1:e2:5d:fb:e0:d0:90:c6:93:72:0d:b1:
39:9e:74:14:89:c2:26:27:4b:8b:bb:e9:3a:2a:3d:4b:5e:37:
09:a1:15:65:56:f1:77:3c:63:08:83:49:d2:cb:99:d6:85:59:
0a:2b:af:60:b0:55:49:a8:12:75:68:84:53:86:75:cb:20:f5:
c9:f7:b8:9b:3e:05:3f:b9:58:9a:1e:0a:78:31:4f:85:c3:73:
a7:87:ae:c1:e5:87:9d:18:95:f5:80:b6:17:ad:3d:d3:08:0a:
a3:f8:7b:60:87:bb:51:0c:23:ef:88:c4:a1:68:da:41:e9:39:
3a:b1:ad:b3:14:a7:29:e0:2d:1a:59:3d:33:57:6c:ab:43:60:
c6:1b:ac:69:37:f8:de:a9:e1:90:6a:80:29:08:b1:39:04:6a:
64:41:d5:4c:7f:38:76:87:b9:3b:d2:e6:9c:56:ad:16:e9:19:
05:04:56:10:05:28:ac:bf:e5:bd:dd:06:a8:2a:b9:68:b4:9b:
8c:7d:5a:6c:df:e2:e3:b8:c0:75:d6:80:8f:3d:52:24:74:22:
fb:bc:7c:68:75:81:1a:d6:5a:1a:6c:9e:a0:97:fb:bc:cc:3c:
4d:56:d5:7f:81:80:b5:84:ef:f0:03:ab:f9:de:37:ab:11:7a:
d4:6a:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org