Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5859307e-2585-3a58-821d-18bac6cbfff2.roa
File: 5859307e-2585-3a58-821d-18bac6cbfff2.roa (raw, json)
Hash identifier: OwSgjnjexHjv0zhP8uEhSBvK7ZPMdbEstPGI0UReuvg=
Subject key identifier: 3A:8D:A8:58:41:41:93:38:D1:99:53:38:53:6F:D4:E1:25:10:7B:99
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0CB426BD12045FC375210
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5859307e-2585-3a58-821d-18bac6cbfff2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.236.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:cb:42:6b:d1:20:45:fc:37:52:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=9d448bd8-7413-418c-b4eb-88c76ae92e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:70:fb:13:ed:2e:48:62:ee:46:38:2a:19:
b8:1f:ed:ef:ba:a2:87:a7:86:83:48:2a:b5:1e:8c:
57:ce:b6:0c:01:a9:40:90:47:e5:91:e8:e4:f4:02:
f7:00:8b:e6:69:8b:65:04:14:be:a1:8c:80:92:35:
7e:8a:7e:58:a0:d8:09:3b:88:37:69:ef:c5:3c:78:
41:46:0d:5d:d2:69:8a:ca:09:ef:52:e4:e1:06:05:
86:d4:87:fd:e5:89:a2:59:58:df:b4:d2:10:17:73:
8b:88:35:55:c0:06:7c:bc:d7:ed:e4:72:c0:72:fa:
24:92:c2:dd:b4:d1:bb:e5:6d:ff:08:9a:99:a0:21:
bb:54:8b:3b:7e:fc:3b:53:a8:dd:c0:80:e0:c5:52:
6a:e6:5d:f6:c3:63:e6:e6:3a:50:7c:ab:7a:e4:4b:
eb:1e:de:07:0c:55:fc:2e:c2:d3:39:f2:14:48:2e:
33:9d:ac:21:66:47:cb:f6:c7:6d:d2:2c:53:bd:d5:
64:b1:e9:a2:24:e1:ae:1a:cb:d4:48:14:ed:40:a7:
f8:89:bb:de:0d:06:23:36:8e:4e:07:81:75:f3:0e:
a0:7a:51:8f:76:37:cb:84:f7:8b:2b:48:7c:d6:69:
4a:8e:d7:84:ae:7c:0f:ab:fc:fa:3a:e9:d7:7e:70:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:A8:58:41:41:93:38:D1:99:53:38:53:6F:D4:E1:25:10:7B:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5859307e-2585-3a58-821d-18bac6cbfff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:83:b2:3a:d3:7d:7c:a3:a0:14:04:b7:3d:b6:8a:ee:2a:e4:
7a:7e:83:d3:3e:26:80:e3:ed:97:c9:42:84:f3:d7:3b:e5:70:
77:ed:8e:09:de:5d:95:6f:57:f0:22:5f:8d:a1:97:41:8e:ce:
c9:ee:ba:a8:9c:9e:12:8a:4d:dc:52:d7:e0:22:b4:fa:06:3c:
af:c3:f1:52:08:12:fa:b3:51:f3:1d:92:97:ce:d2:e8:23:70:
1f:b4:50:f1:8c:68:0e:7b:5a:77:ba:d7:10:6b:e1:c2:33:b7:
d7:7a:ca:d5:a5:3b:6b:3c:92:fb:6f:f1:00:09:72:d3:ab:cf:
ef:09:e4:e5:b5:1e:52:47:b9:dc:26:9b:2a:fc:99:52:3f:a3:
fb:56:6f:bd:af:36:8a:85:07:8d:a7:22:a0:e9:ad:94:2d:47:
c8:7a:00:52:e1:9f:fe:2a:f2:0f:06:3b:9d:bf:63:a3:74:58:
b8:6e:9a:cc:9b:b9:e9:fb:97:6c:17:5a:f9:95:2b:2c:7b:b9:
20:1c:b2:67:1c:b8:4e:dc:48:90:5c:8c:79:4f:2f:0f:db:a4:
22:8d:48:66:42:34:5c:e3:1b:3e:d7:39:1b:2c:92:d1:df:f9:
e7:0c:1e:87:03:89:29:01:7d:cb:97:fe:8f:02:7b:2c:af:6c:
70:d7:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org