Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028c4bc-02b7-3742-bbcf-6e9f5c9ec6ca.roa
File: 5028c4bc-02b7-3742-bbcf-6e9f5c9ec6ca.roa (raw, json)
Hash identifier: wso2uq/rkLtIFE313/v1btK2KTzOmctb0a4UsfFkj38=
Subject key identifier: D0:C0:DA:86:6C:01:E3:10:93:56:BA:21:F0:67:23:C4:2E:90:50:11
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4570266BA84EBAA9E8700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028c4bc-02b7-3742-bbcf-6e9f5c9ec6ca.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 70.31.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:57:02:66:ba:84:eb:aa:9e:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=dc57c822-2db6-4f22-a1cf-b300b43cce06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:37:a2:1b:8b:ac:5e:94:2b:19:10:02:a0:
f1:4d:82:bf:d6:2c:02:7a:89:7c:bd:91:22:89:47:
8f:3e:96:2a:79:44:78:ff:81:10:fb:96:95:e3:41:
d0:85:2a:5b:4c:47:4f:09:af:42:ec:c7:fd:10:f7:
d7:ee:b3:92:20:3b:8d:8e:84:76:10:11:c7:56:87:
6c:a9:0d:40:b5:36:d9:c9:ea:ca:af:06:8c:8e:66:
ba:50:9a:a8:2e:0f:94:ac:de:f4:64:c3:44:ef:6e:
b6:b2:0a:93:8b:df:97:29:0c:1a:86:eb:45:9c:2d:
98:df:b2:1b:52:b1:da:b2:25:00:df:64:e3:6a:5e:
e3:e3:1f:54:51:87:28:63:a6:4b:66:26:25:24:df:
96:9f:08:c9:b8:f3:61:1b:5f:37:1b:9b:3b:cc:1f:
1b:10:a9:7a:3f:d3:1c:e8:72:9e:3a:c1:87:6a:54:
50:c9:59:0a:80:e0:a1:5a:38:02:7d:13:aa:ed:91:
16:8e:1c:57:20:ae:0f:1f:4c:f6:fe:71:64:43:53:
09:30:a6:65:9d:5f:6d:24:38:87:ea:bd:94:4b:ba:
ea:a5:e6:95:4f:45:de:24:2e:88:01:6c:af:1c:66:
b1:c4:be:c3:e9:23:77:b5:02:d8:12:1d:89:ed:34:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:DA:86:6C:01:E3:10:93:56:BA:21:F0:67:23:C4:2E:90:50:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028c4bc-02b7-3742-bbcf-6e9f5c9ec6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.31.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b9:1a:19:5e:a9:11:5d:99:21:f9:73:d4:13:06:60:0f:79:
39:23:49:fd:87:45:0e:5e:3a:51:86:27:48:ab:18:87:dc:3c:
72:1f:e6:c2:b1:a6:40:f8:43:73:b2:20:d1:c7:ad:0f:7f:96:
c5:17:f7:83:c1:07:70:6f:dc:c4:bc:7e:73:8b:3b:a6:d3:3d:
d0:97:07:dc:4b:b4:ea:c5:77:9e:a2:ff:9e:7a:40:55:b9:db:
d0:b7:88:92:39:47:8f:a9:c4:9f:3f:e3:a1:49:3a:dc:25:5e:
a0:a9:0e:7a:3c:1f:e8:28:91:ea:89:e5:78:7a:9e:24:76:44:
b0:a4:b1:02:2d:ae:9d:cb:4d:4c:b7:76:45:dc:82:d5:08:1c:
83:f5:21:b8:05:24:68:dc:e3:f6:93:08:56:4f:ff:fc:cd:c9:
36:b2:28:2e:3b:58:24:82:26:9a:63:e2:f3:af:89:6c:18:cd:
dc:04:d7:a9:50:f0:f9:ab:39:7e:81:84:49:a3:28:95:58:76:
44:fd:39:a4:79:87:a6:b4:4b:90:76:9f:d6:ca:84:f9:73:df:
ca:7d:2f:c1:9a:08:69:3b:b4:ff:d1:95:c3:33:a2:a4:58:b5:
a1:a5:28:ff:07:64:96:65:e1:23:be:3f:30:cb:fa:55:78:a6:
ef:44:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org