Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/459963c3-85ea-314b-8c79-9ee00ab1034d.roa
File: 459963c3-85ea-314b-8c79-9ee00ab1034d.roa (raw, json)
Hash identifier: L+ZHFtUdppaEn3kAvWWkGfkCMBaBDAqCXhsZvEUP5FM=
Subject key identifier: D7:E6:D9:0E:10:2B:92:6E:BD:12:9F:E9:9F:71:BF:DD:AD:0E:BA:DF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314E5DB2951D14A7BFF41C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/459963c3-85ea-314b-8c79-9ee00ab1034d.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21724
IP address blocks: 204.101.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:e5:db:29:51:d1:4a:7b:ff:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1adee6e8-719d-47fc-8a83-34ee5e812f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:55:a0:26:bd:14:20:e1:dd:31:20:35:5c:
3c:f6:bf:a5:fd:30:02:d6:bc:bd:03:e4:e9:65:da:
f8:b7:2b:f0:0d:b3:89:39:79:2e:65:89:94:0c:fb:
f5:0f:a0:b6:72:ba:26:02:1e:2a:f2:8d:72:21:2a:
74:1a:fe:a6:73:a7:6d:77:5a:fe:8c:2e:bd:d2:05:
0c:e0:5e:f6:b2:44:87:c4:c6:fa:84:be:82:1e:a7:
11:f7:f7:26:a4:af:f5:90:35:51:d1:3f:c3:4b:32:
09:4b:29:6b:c3:77:79:4d:29:8a:78:b1:d1:92:5f:
58:51:13:95:1d:c5:ff:4a:dc:49:8c:8a:fc:4e:c8:
3c:12:ca:44:f2:6d:f4:b3:62:85:a5:9e:cd:e5:ee:
ab:73:a9:ef:43:9e:7e:80:d4:27:50:4e:8f:0c:a6:
1f:8b:74:ed:71:99:79:0f:9b:da:cd:5b:be:e7:85:
d6:27:15:c9:76:6a:14:98:7e:ab:ed:c0:8b:f4:c0:
77:fa:cb:a7:6e:ea:1b:6f:f9:47:47:d1:94:47:98:
a1:82:2a:b5:32:66:81:08:a9:38:b7:e5:da:c2:31:
04:21:1c:cd:c1:a9:df:e8:63:c6:ff:3c:fc:5e:94:
eb:fb:ea:16:a8:8a:11:32:f5:82:d6:73:25:10:b6:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:D9:0E:10:2B:92:6E:BD:12:9F:E9:9F:71:BF:DD:AD:0E:BA:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/459963c3-85ea-314b-8c79-9ee00ab1034d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:e7:81:75:2b:26:d8:37:8b:11:50:54:50:10:bc:97:b3:d2:
cc:c3:f7:74:60:c0:78:fd:37:17:e7:a3:c0:05:d5:12:3b:0d:
66:8b:74:2e:a9:c0:a5:f7:aa:50:8a:51:d3:55:a5:b4:60:02:
f9:20:dc:55:50:9d:3d:b6:26:d7:b8:53:c5:90:6b:82:26:68:
4d:72:41:b1:7d:e0:fe:b0:f0:b8:d0:b0:81:7b:51:9f:41:b2:
62:68:d9:08:97:46:fc:0d:81:e2:ee:ee:8f:62:47:01:38:1c:
cc:25:b1:23:d1:39:b5:82:45:d2:bd:a8:4e:a8:a9:3f:f1:30:
d8:e2:35:03:8e:3c:39:ee:95:be:cf:b0:74:48:95:15:05:ca:
5f:e0:cb:c8:e4:69:35:4b:ba:bf:56:23:7a:a7:50:cc:1a:85:
d8:6a:e3:58:82:84:6b:95:d5:52:7f:71:59:a6:ba:a9:64:95:
cc:18:83:36:8f:fe:a9:8b:c1:d5:5e:7a:b6:d8:03:b6:63:ae:
16:e4:8d:5f:c3:61:5a:14:7c:88:f8:4e:c3:ff:2b:34:4c:66:
2f:49:5d:b8:a8:a7:b7:43:5b:11:a0:8d:11:73:2e:83:23:45:
95:9e:55:ea:02:c8:55:73:d5:6b:59:d2:10:fd:30:2b:8f:55:
64:0d:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org