Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5575b581-acbc-311c-b908-6c173f91ed49.roa
File: 5575b581-acbc-311c-b908-6c173f91ed49.roa (raw, json)
Hash identifier: ONWaX4UZNkoacp05dtA4Ba2DqmwA7yd2nofFwJE+ab4=
Subject key identifier: F7:A0:B2:DE:9D:8F:F9:D1:9F:16:99:BA:45:81:CE:63:F0:E0:A0:D0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB014FBFDD5B77488B48580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5575b581-acbc-311c-b908-6c173f91ed49.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:14:fb:fd:d5:b7:74:88:b4:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=73f2e6a3-5c28-4825-a108-f7c3e481d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:dc:fb:6b:d7:31:81:bb:71:91:8d:a5:ef:
57:5b:fc:63:34:87:c4:99:dd:ed:a6:03:b4:83:32:
b8:15:82:ad:49:ee:e4:60:85:fc:52:3c:f2:51:72:
2d:2a:86:84:ba:ed:b9:08:29:89:91:85:8c:d1:92:
bd:b3:ca:a2:a7:0c:19:11:f8:f2:02:60:11:86:b7:
1e:e8:a6:6b:ac:36:ef:95:c3:1f:10:f2:45:57:1a:
4f:ab:00:bf:21:a4:6d:ac:9a:48:a2:99:d5:77:c7:
d9:b0:9f:11:de:7d:a3:06:f4:eb:c0:1d:35:86:47:
51:2e:65:63:0e:fe:08:9a:8b:18:a7:fe:d6:aa:14:
66:21:55:29:0d:be:82:04:69:e2:76:9f:00:0a:f2:
35:03:ab:45:39:48:f2:f5:84:0d:1f:68:cb:b2:c4:
0d:49:67:b0:2f:35:e4:0b:45:55:8d:f7:59:ea:38:
f8:b3:b5:61:ca:c9:3d:ba:4f:fd:22:68:d1:5c:a9:
31:f7:18:bf:34:df:4c:e9:ac:16:30:7b:e8:e4:72:
19:16:eb:07:ea:da:28:41:ba:43:05:08:0b:42:c2:
f1:d8:d0:78:a5:f9:5b:94:5a:f7:e4:06:61:51:1c:
2c:75:df:d4:de:3e:ea:af:3c:38:d8:4a:a2:ce:f5:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A0:B2:DE:9D:8F:F9:D1:9F:16:99:BA:45:81:CE:63:F0:E0:A0:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5575b581-acbc-311c-b908-6c173f91ed49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:46:ce:8f:1a:34:d0:dc:d8:eb:59:40:ad:32:8e:68:6b:77:
d1:0e:12:fe:6a:aa:82:f7:99:36:45:d4:38:4f:01:0b:87:f4:
a4:04:00:95:87:e4:93:8d:25:88:64:da:30:e9:af:a9:dc:99:
22:e9:89:07:bd:dd:38:c7:a7:d8:a2:b6:3c:5c:71:62:18:e3:
cf:0f:2b:ce:51:b5:95:9a:7b:c8:c1:64:71:f8:b4:2d:7e:33:
fe:98:72:04:82:15:b5:8e:32:0c:65:e2:16:4b:93:1b:ee:6b:
15:d9:e0:52:51:b5:07:0b:df:4d:4f:5e:f7:9a:e0:10:93:93:
5a:50:06:df:5b:76:96:84:43:be:be:ea:d2:7e:93:fc:85:c2:
5b:85:88:bc:6d:1c:41:05:1a:31:aa:92:b3:09:7e:ef:2b:6c:
c4:40:65:d5:fe:18:e5:c6:17:9d:1b:47:3d:91:66:fc:24:bf:
cf:9d:41:67:04:c8:0d:2e:57:e5:0c:36:d3:65:e9:3b:40:98:
79:1a:8b:4b:53:f7:83:d9:c1:1c:b4:27:62:8b:91:d0:c7:e6:
e8:04:10:d9:b1:57:52:1a:00:81:7d:5f:7e:0e:ed:90:30:f6:
40:a7:e1:10:7a:34:1d:84:a2:f8:bb:20:e2:98:37:72:4a:c6:
32:52:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org