Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57eb675d-7e28-349d-9ce0-0e9c5b1428ec.roa
File: 57eb675d-7e28-349d-9ce0-0e9c5b1428ec.roa (raw, json)
Hash identifier: HSl7SyjeGqLJzHZY1u+hQj+21H00M0XUiC55MB5+DMc=
Subject key identifier: B3:5D:E2:63:63:66:A6:AA:EE:9D:80:BA:D7:9D:89:FD:59:80:58:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313D010BF6E3027D2318F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57eb675d-7e28-349d-9ce0-0e9c5b1428ec.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:d0:10:bf:6e:30:27:d2:31:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=459e0aa8-9d64-478c-9fc8-393c6e2da3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:2e:32:7e:f4:89:36:2c:1a:87:ab:b5:2b:
fc:42:99:db:1c:59:83:31:69:7d:a8:5f:15:49:4a:
3f:ac:c9:0b:12:ba:83:fd:4a:85:8e:e2:d7:c5:05:
5f:a0:b7:b9:13:82:c5:9d:72:a5:06:7c:22:ab:66:
45:9b:9b:3d:d7:f7:a6:b0:f2:6a:53:e8:b4:51:e4:
8e:46:0c:99:f5:84:d3:1a:ee:b6:bd:b8:04:b7:f4:
d0:b8:96:dd:41:c1:c0:5b:ec:14:ac:ea:40:4f:9f:
0b:25:33:01:ab:02:56:d4:a5:4d:eb:4b:b6:44:06:
53:c1:6e:1e:25:ba:76:2b:02:5d:f8:bf:79:cb:9a:
6b:0e:b4:a3:e6:c0:bb:94:28:07:51:ca:1c:de:11:
8e:f9:cf:0e:cf:1c:f1:28:0b:eb:35:bb:fd:eb:4c:
e1:ea:29:1e:4c:73:d3:f4:37:5f:99:04:d0:19:55:
16:1a:68:5f:53:33:50:1f:12:02:ee:d2:24:90:c5:
da:fa:1f:63:e7:1b:39:29:42:68:50:3c:5a:da:cc:
45:53:ff:2e:40:00:94:17:a4:05:b2:fd:fe:1b:0f:
3a:e5:47:c9:76:14:ff:cf:55:d3:5d:d8:b8:7f:99:
4d:1d:ad:33:d5:07:ac:b7:cc:5b:33:45:f7:a8:4f:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:E2:63:63:66:A6:AA:EE:9D:80:BA:D7:9D:89:FD:59:80:58:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57eb675d-7e28-349d-9ce0-0e9c5b1428ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:89:00:8a:73:a9:17:d1:3b:3e:cc:d1:e9:53:1b:01:74:ef:
dd:45:d8:29:92:28:67:1f:dd:bc:be:56:3d:69:77:68:f5:7e:
5a:b8:4a:ea:4b:0e:eb:f6:80:73:5e:5d:ce:b4:91:40:ff:74:
5f:38:a9:a2:0d:09:6c:80:5a:66:8e:35:02:ba:62:a2:ce:83:
8e:5c:b6:7c:23:ab:a7:b9:a5:5c:d8:b6:f9:a2:bd:db:8d:b4:
9c:84:99:88:d5:88:8b:d1:99:28:fd:dc:42:92:98:aa:a5:2d:
c1:b1:f7:7d:c1:55:c7:47:ef:83:51:44:36:98:51:e5:33:2a:
f8:f6:fb:b9:f5:2f:79:48:5f:83:45:82:15:9f:7c:92:40:47:
dd:01:c7:cf:67:2f:1c:7f:5b:8e:15:4d:d4:07:60:1f:c3:35:
f2:85:c2:ff:07:a3:ed:6b:f1:94:b6:b6:76:6e:22:da:66:37:
03:d8:67:9d:10:4f:bf:59:17:7a:6b:fd:b4:00:1d:3a:70:3e:
60:9a:be:49:71:0d:4a:cc:1c:2e:bd:35:3a:3d:f9:f6:ac:ea:
df:60:03:55:55:34:61:42:5f:9a:e1:7b:6f:78:0f:ae:6b:fe:
f2:7e:d3:4d:6a:0d:c7:6b:3b:28:bb:86:1c:b2:8b:18:46:0f:
4f:d1:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org