Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4dbae1aa-9d71-3ba7-b6d6-916dbb7adec4.roa
File: 4dbae1aa-9d71-3ba7-b6d6-916dbb7adec4.roa (raw, json)
Hash identifier: xf+YAY4Qy+LVGLQn31Mo9lT8jsxwHLIUcpKA44f4+bE=
Subject key identifier: 2D:69:F3:D2:71:E0:BE:60:F1:35:14:A1:3E:31:84:5D:67:24:5E:02
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314E8030D673D9CD52D0480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4dbae1aa-9d71-3ba7-b6d6-916dbb7adec4.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 19324
IP address blocks: 204.101.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:e8:03:0d:67:3d:9c:d5:2d:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a170af6f-7d1e-4fb8-951d-a7a7f609dd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:c8:89:7a:4e:67:e7:94:43:e0:59:27:a0:
4c:38:9a:e7:d5:04:1d:10:53:cb:17:c9:02:bf:90:
d2:3a:1e:69:d6:fd:b5:22:30:41:80:4e:87:b5:fe:
d7:ff:dd:b3:15:cf:86:65:e5:f4:33:d8:48:63:b2:
a5:bf:02:54:70:b7:f3:24:c0:55:3e:bd:d9:a2:99:
c9:12:2f:e8:b9:b3:9e:fb:30:aa:ad:f9:b3:01:9e:
98:f7:78:08:94:e6:f0:55:91:84:97:39:66:81:d6:
fb:86:32:c1:be:bc:a8:14:96:57:ca:c5:06:b3:ce:
4f:77:9b:33:01:64:05:01:28:64:66:79:a9:d5:48:
d0:1e:de:db:8e:64:ec:60:ab:39:cd:fe:e9:e6:b4:
ab:1d:1e:c9:9e:01:cb:f1:fb:31:d5:09:bd:ef:da:
79:16:91:b5:64:a3:c0:70:13:b5:02:8c:a6:12:62:
65:e7:e2:06:24:de:3b:81:88:80:ff:7b:9b:83:27:
cd:ce:09:0f:47:02:03:3f:3f:66:2c:e3:a6:7a:7a:
da:b9:83:d2:03:e7:d7:44:a5:98:8b:28:e4:60:c1:
0b:7d:20:b3:30:05:57:8d:21:ec:28:de:81:01:44:
b7:f1:29:a1:d5:27:de:2a:9b:c4:ce:a3:f7:3b:70:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:F3:D2:71:E0:BE:60:F1:35:14:A1:3E:31:84:5D:67:24:5E:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4dbae1aa-9d71-3ba7-b6d6-916dbb7adec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:2d:4e:3c:e2:77:17:6a:bb:f1:f3:c5:78:57:9b:49:5c:d8:
17:15:9b:93:5f:37:6a:7c:70:55:a3:c5:c2:27:ab:27:ee:7a:
ec:78:fb:2e:ce:9f:fe:60:39:23:df:9c:0e:31:f6:ab:2a:de:
fb:73:e3:0c:8d:cc:f9:c9:30:0c:0b:ef:8a:4d:81:48:f2:69:
b7:d8:d0:82:f0:9a:04:bd:60:1b:09:58:e5:8e:2c:03:9a:04:
a1:71:61:c0:fb:da:66:a3:3e:84:0a:07:ad:86:4c:61:c4:29:
48:05:ea:8d:46:f8:83:40:9b:22:63:d1:9a:a9:36:47:e2:1d:
f8:d9:2d:09:89:69:23:24:bd:3f:e6:b3:a8:38:ad:1f:46:85:
47:a6:d9:f3:29:eb:fe:b2:12:c2:d9:8b:0d:7b:1e:46:78:53:
a9:35:f5:fd:8f:bd:9c:da:c5:30:ad:a6:fd:40:b9:95:f3:28:
d3:73:a6:4b:ea:f5:60:cc:9b:18:0b:c4:89:98:d4:41:de:b9:
a3:15:ab:84:01:cf:d7:dd:e6:9f:25:97:07:2d:8b:8c:4f:c9:
fd:9e:5f:f6:5a:e9:04:f6:44:ce:21:56:e8:20:9d:74:af:92:
fb:b1:e8:57:bb:56:c6:de:8b:ab:35:69:8e:78:2d:79:98:db:
9f:ec:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org