Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e5005b6-bc45-37c7-b7dc-186cc48dd763.roa
File: 4e5005b6-bc45-37c7-b7dc-186cc48dd763.roa (raw, json)
Hash identifier: x9ghDbLJCs9hNetsqakj9EYXybp2kWfCGptf/TORNtI=
Subject key identifier: 42:F1:79:D7:AD:B4:28:0B:6F:9D:22:70:08:28:04:9A:38:76:D4:45
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316BAD5393EABFED6E21E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e5005b6-bc45-37c7-b7dc-186cc48dd763.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:ba:d5:39:3e:ab:fe:d6:e2:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a1ed0797-0242-485e-bff3-015f56815b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:83:8c:6b:b5:7e:29:b8:df:f9:af:01:6f:
8d:30:1c:c6:79:d1:10:fe:d1:7d:34:ce:19:39:04:
2f:df:ca:b8:f0:78:9a:1b:a5:84:ca:ef:37:71:42:
84:96:78:dd:5f:f0:ed:1b:d3:e6:ce:be:e4:26:94:
d9:2b:37:38:b4:f4:69:fb:c5:e0:66:0a:f3:d4:1c:
5e:22:c1:32:1b:39:98:29:6f:3d:e5:04:9c:25:d4:
40:47:02:0f:78:21:c4:2f:5a:cb:b6:b8:66:13:81:
92:f0:dd:24:82:ba:7f:38:ae:30:a8:97:48:1a:13:
7e:d5:89:4f:30:1e:f8:d1:cd:20:03:44:11:da:08:
be:ff:5d:fb:9c:d4:32:ac:cf:2b:e5:21:2c:fe:fc:
f9:72:91:32:f4:60:3d:94:48:63:b2:3e:00:a2:95:
db:79:0e:99:4b:ad:bf:21:4f:00:6e:89:f5:af:c1:
d1:46:99:52:ed:fb:af:1f:55:9e:fc:f4:b6:c0:e6:
93:77:be:b3:1f:d6:33:b9:5f:00:83:1f:dc:2c:d5:
54:f2:82:87:cc:95:04:f7:80:9a:aa:ac:3c:2d:27:
b2:7f:b6:79:fb:6d:9d:40:9a:14:6e:15:29:50:0e:
1b:78:c0:d4:83:e7:bc:79:97:36:98:98:ac:70:81:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F1:79:D7:AD:B4:28:0B:6F:9D:22:70:08:28:04:9A:38:76:D4:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e5005b6-bc45-37c7-b7dc-186cc48dd763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:45:2e:5b:3d:c3:30:b7:b7:86:3e:e7:5a:e9:e0:81:42:34:
27:48:28:68:93:de:b7:94:16:e2:bf:11:a4:32:a5:dc:58:72:
dc:76:0d:70:45:14:50:f4:9a:d0:3a:d6:34:38:8a:af:99:6a:
d5:5b:de:b3:68:6a:7c:f9:ba:18:9d:14:22:bf:db:69:56:42:
be:2a:50:96:01:53:58:65:db:4a:4e:f5:47:90:b1:b2:0e:9e:
13:99:70:8c:d4:9f:be:1b:8a:22:ef:42:46:f2:08:29:b3:1c:
38:10:e2:18:73:80:cf:52:d5:eb:4b:34:66:67:fe:d2:e1:8b:
77:97:3e:80:a8:aa:f1:8d:48:c1:9f:06:44:4a:40:ba:8d:4c:
aa:97:64:84:35:32:e2:5e:1f:04:c1:0f:19:80:63:3b:a2:1a:
09:43:4f:6f:b6:ea:eb:32:ca:99:0a:eb:b7:a8:fc:ad:d3:81:
61:e0:84:9f:1e:90:5b:bb:1b:50:2a:9e:c8:1d:19:01:4c:9b:
5f:aa:22:11:51:db:c0:42:96:3b:f3:4c:6d:bd:58:0f:3f:81:
d5:4b:b4:19:8c:f3:6b:c8:5f:3b:4e:80:bd:5e:18:0c:df:43:
56:75:fe:bf:32:f9:ca:82:71:1b:7f:ac:28:64:be:39:1c:42:
53:2d:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org