Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4fe4bea2-c388-3304-94e7-6fdd7b5b9973.roa
File: 4fe4bea2-c388-3304-94e7-6fdd7b5b9973.roa (raw, json)
Hash identifier: 1oBHEBi0xkF051ZN1CmZUlElrCVgmzwj3DKbwxVYS1Y=
Subject key identifier: 0E:BC:41:A8:AA:4C:E9:C9:FF:84:FD:B5:C9:FF:03:73:78:C2:FF:48
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0215D23C90F2B75B81B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4fe4bea2-c388-3304-94e7-6fdd7b5b9973.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 19842
IP address blocks: 206.47.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:21:5d:23:c9:0f:2b:75:b8:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=ca2e0794-8ae9-45b2-86d9-8f10086093f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:94:fc:dc:79:a2:d8:8a:0a:8d:b3:14:27:
af:ef:fd:fa:09:8a:f7:49:35:21:ee:01:95:c3:de:
19:1e:7e:f8:7e:a2:74:09:10:9c:6d:bb:50:16:14:
55:22:6b:ce:33:23:fd:de:25:90:f3:70:a3:aa:cb:
d5:6a:91:ba:1c:b0:33:2c:a8:80:32:0b:9a:c7:2a:
6c:cc:6e:6b:02:f5:ff:83:55:da:87:b7:20:72:9a:
02:b6:e9:bf:69:a5:56:30:2c:32:fd:55:10:46:ca:
82:7a:27:ae:b6:36:39:23:7c:58:bb:da:aa:e9:ff:
20:f5:a2:6b:04:49:34:16:ed:d1:a4:54:98:fa:be:
07:a1:79:94:e0:37:91:d0:b0:b4:74:3e:42:77:53:
32:b9:80:fc:de:57:65:f6:b2:9e:00:21:a8:a7:f2:
c4:35:90:a7:59:07:14:57:7a:99:e7:e9:c6:6c:a9:
bb:7b:dc:7e:96:85:71:de:99:13:48:98:3c:d8:4f:
3d:a3:48:5f:c3:0d:f0:f3:98:a8:3e:e9:45:86:91:
c4:18:22:02:f0:f5:0d:8f:87:1a:28:4c:de:25:11:
a8:4f:0f:9a:9d:05:8b:a6:04:7a:dc:fd:ec:12:a8:
6c:8e:bc:97:9a:08:ae:6d:2d:41:01:a1:76:8f:0c:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:41:A8:AA:4C:E9:C9:FF:84:FD:B5:C9:FF:03:73:78:C2:FF:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4fe4bea2-c388-3304-94e7-6fdd7b5b9973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f5:77:75:06:a7:dc:d2:51:04:bb:09:d1:9b:27:e1:7f:7f:
07:6e:d2:79:b6:8d:b8:21:e5:22:f8:ba:91:cc:f6:68:25:30:
d9:b8:76:f4:38:58:a2:45:69:95:47:41:ab:f8:49:82:15:22:
21:7f:8a:71:3b:89:2c:5d:53:c8:45:30:79:dc:5f:45:9b:50:
67:f0:01:7c:e4:a5:30:4f:39:45:86:18:32:93:94:53:b4:57:
f3:86:4a:5c:4a:7f:06:e3:02:a1:f8:60:e4:9f:dd:c5:f8:24:
d3:c3:66:32:c5:ee:d1:49:3c:e2:af:8c:98:fc:da:eb:da:10:
4f:3b:31:e0:16:55:b7:76:91:78:44:01:3e:04:cc:7c:34:d2:
0c:2f:ad:2b:20:61:ac:08:4a:87:e9:a0:7d:6a:6a:8e:95:7c:
1e:00:0f:5d:aa:56:ba:21:df:50:a3:9d:f1:30:c1:ae:95:d2:
db:1e:aa:af:c3:69:42:8b:ac:28:de:8e:7c:da:bf:2d:d9:cf:
79:6d:d6:36:d9:84:c5:31:4c:a7:f1:25:84:d7:9c:86:3a:4f:
56:03:ff:8a:97:7a:d6:14:9f:ae:12:aa:ff:0c:4d:bf:5b:ac:
28:d9:ec:c0:4c:95:89:85:b4:47:7e:df:a6:fc:04:e7:2a:58:
00:40:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org