Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50658620-3db5-35a3-86b2-465c14182de4.roa
File: 50658620-3db5-35a3-86b2-465c14182de4.roa (raw, json)
Hash identifier: oTxaPcDL7I0H83jqmr5aOekGIIgyQN9iJEvxJtlMD6A=
Subject key identifier: 2E:35:39:12:74:06:A2:68:61:9F:CD:F9:3F:17:95:99:CC:37:38:5D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313D2259ACD2FEE0D812C40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50658620-3db5-35a3-86b2-465c14182de4.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.28.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:d2:25:9a:cd:2f:ee:0d:81:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=177fc847-d965-4b0d-82a4-465d53149ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:11:f2:71:d1:34:38:37:52:9d:58:7e:8d:
56:22:8f:a5:75:26:7c:62:bf:5b:e7:04:7d:de:41:
37:76:c3:49:97:5d:65:bf:73:8d:7f:46:07:8c:b9:
ab:91:0e:9d:91:7b:13:3e:9c:fc:d0:d9:41:6c:ac:
00:2d:b1:14:49:a9:6e:3d:ed:22:d1:f1:4f:a9:63:
30:5d:52:b3:ca:24:5c:fc:f9:29:85:50:9d:3a:ae:
c3:7f:15:5f:14:aa:55:6c:37:d9:03:74:f0:b9:ca:
0d:1f:5d:4b:ac:d7:70:89:31:a8:45:8e:56:a3:b1:
bc:36:25:c3:c8:e2:f5:87:9f:dc:10:6a:a0:a7:e7:
9c:66:f2:d1:a5:e7:cd:51:d1:60:0d:e8:ea:01:6f:
79:5c:90:75:1b:e2:e0:09:98:66:8f:1f:8c:97:31:
ae:2c:c2:b0:c3:f1:45:8e:e5:07:16:ab:cd:53:97:
3e:f1:7e:fb:c5:13:20:16:5e:21:b9:82:1c:57:98:
f5:02:89:98:9f:4a:d2:40:13:12:97:e6:1d:75:06:
ec:13:bc:70:46:67:89:be:ca:12:96:9b:6b:86:cc:
88:31:29:9a:5b:73:ad:f2:99:df:1b:91:21:95:bc:
a2:b4:1f:3c:54:41:b9:ca:8f:0c:1b:d7:ff:54:c1:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:39:12:74:06:A2:68:61:9F:CD:F9:3F:17:95:99:CC:37:38:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50658620-3db5-35a3-86b2-465c14182de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:87:a2:16:9b:79:15:de:fa:2a:3b:59:43:26:d8:11:56:63:
5f:69:9e:79:a0:cc:b1:ab:43:f5:d2:ca:d3:32:50:49:4d:8d:
43:19:72:3e:00:21:9c:f4:0b:7d:e7:74:2a:02:ef:67:48:f6:
ca:3d:f1:1a:5e:82:0f:e8:7a:22:ea:80:04:98:09:7c:bc:36:
14:b2:59:f2:c5:63:35:fb:d6:05:dc:e8:b1:90:64:fc:c7:1b:
59:49:4e:3e:89:48:d7:11:48:7e:f1:83:8b:31:b1:c1:9a:e4:
83:52:04:f4:c7:f6:3f:61:da:80:87:b2:1f:67:73:2e:dd:23:
63:95:f6:e0:3a:0a:3f:16:5c:72:de:8e:a3:11:aa:17:0a:bf:
bd:62:ba:33:31:e2:91:70:8e:c0:d0:07:f0:f7:ff:18:87:cb:
60:17:fc:88:0c:0c:ed:16:fe:70:60:48:ab:c9:f6:cd:60:09:
02:98:be:75:a1:8c:d1:96:1a:0b:6a:a1:ba:f4:17:d5:92:8b:
0a:34:c7:5b:a3:c6:08:71:a0:92:2c:c3:22:e4:cf:84:d0:10:
11:f5:a5:87:b3:fc:4c:70:a6:f5:ab:59:26:ff:6c:5a:58:c7:
2f:9b:cc:45:1d:3e:92:8e:94:72:5f:79:92:53:1b:69:98:5b:
c4:35:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org