Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/455b7e61-09de-3e50-a7c8-32f667dff5f7.roa
File: 455b7e61-09de-3e50-a7c8-32f667dff5f7.roa (raw, json)
Hash identifier: YVgl8rHE7z0F7RVrAn4wnpBm0OMxXNWK8/ZgBIVfC2A=
Subject key identifier: 1D:A5:25:5B:05:AD:0D:B6:D1:84:8C:88:F2:44:26:65:E9:38:C9:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75183D523056437B589920
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/455b7e61-09de-3e50-a7c8-32f667dff5f7.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 70.53.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:18:3d:52:30:56:43:7b:58:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=d61e2ad6-41f6-482f-9a7e-8cc0c823d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:2e:90:d8:3d:95:79:eb:e4:6a:32:f0:a3:
83:88:db:9f:66:30:46:e3:82:f6:cd:72:5c:3f:be:
43:83:38:39:05:a4:50:05:36:57:e6:c4:85:ae:bb:
54:a9:9f:9a:02:b0:4a:46:f3:41:3c:13:e9:95:cd:
cc:2e:a1:3c:d9:02:8e:72:54:82:40:91:40:ea:bc:
ae:65:62:9a:af:db:8b:81:14:79:31:9d:f2:54:32:
64:a1:f9:ea:ba:0e:20:5f:6f:fb:59:ac:8c:f1:c1:
c3:d2:9d:e7:85:ed:42:90:36:50:9b:aa:07:67:ef:
a6:cf:5f:79:d2:41:47:01:50:78:fc:14:78:e0:64:
fa:21:91:47:5f:d1:18:3c:79:41:a0:82:1f:4e:38:
ef:f3:6f:c1:d6:57:f1:70:b3:b3:b5:2e:07:67:91:
14:ba:e6:21:c2:d7:e8:8f:54:eb:81:f4:09:31:29:
a0:80:68:e6:36:77:c2:c8:02:0f:70:ef:4e:d9:c4:
33:33:eb:75:ef:14:51:61:52:74:9d:a2:1e:25:03:
8b:e5:69:21:ea:83:2a:40:30:a6:83:be:5d:2e:6c:
13:78:59:7f:5b:84:11:ee:65:4d:19:ab:76:88:9d:
38:41:19:46:27:48:99:19:5f:7c:01:34:0f:e1:c7:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:25:5B:05:AD:0D:B6:D1:84:8C:88:F2:44:26:65:E9:38:C9:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/455b7e61-09de-3e50-a7c8-32f667dff5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f9:53:fb:3e:5a:46:6a:71:e9:fe:fd:02:70:e9:ce:fb:05:
56:82:a3:23:02:c5:8b:ec:e8:5f:2c:b3:8b:2f:5e:bd:b5:f8:
bd:52:48:b4:19:3d:50:2c:ca:a9:56:63:d6:e6:70:18:41:8b:
43:e4:8b:5f:be:cd:72:77:7d:5d:94:9a:98:57:15:7a:04:39:
0a:38:3a:95:26:47:ed:28:20:33:8d:e2:86:91:e2:87:be:3b:
36:ff:33:7d:93:5a:7f:55:9a:6c:81:23:54:ee:3e:e1:44:1d:
e1:be:4f:a9:a1:d8:df:2a:98:a6:22:f6:11:64:ac:a7:17:4b:
69:63:cf:c1:ca:0f:e5:f1:32:d2:c1:81:8b:65:c1:65:f2:90:
a8:be:9d:33:45:72:34:36:41:bd:f1:b9:9e:c3:7c:da:77:4d:
98:66:1e:cd:1f:80:fa:55:f9:8f:c8:35:6e:0b:36:f3:0c:9f:
d7:d9:00:1a:fa:3e:94:bf:ac:e1:d2:56:f9:86:e2:e9:cb:a9:
85:57:1e:b7:e4:9a:bf:f5:d3:46:7c:99:c1:58:69:2c:01:8b:
eb:7f:cc:c7:72:7c:64:85:cf:45:6c:05:e0:1e:75:28:bd:b8:
4a:62:70:64:9a:c3:ae:c5:ed:87:73:06:06:0e:0b:3d:2b:b5:
fa:81:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:17:51 2023 by rpki-client on console-ams.rpki-client.org