Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/59a7a010-9690-30b7-961e-fa125e1fce74.roa
File: 59a7a010-9690-30b7-961e-fa125e1fce74.roa (raw, json)
Hash identifier: aG139rAX9hz+01YBPIR5wa7QkKb0PqfFxBcS0IVa6i0=
Subject key identifier: 4C:9C:10:04:4C:67:5F:F1:27:8E:B7:C8:AA:12:E3:26:8C:B1:20:7C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFE14D7D3E98F7DCCADB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/59a7a010-9690-30b7-961e-fa125e1fce74.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 33017
IP address blocks: 204.101.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:e1:4d:7d:3e:98:f7:dc:ca:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=30b175bf-e130-4c69-b0aa-ed4b8fb5f074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:01:22:a2:8b:8b:4e:34:1e:51:61:2b:8f:
2b:ad:9f:8a:de:87:e1:24:a7:fd:ec:52:a8:7f:0e:
80:6d:8c:f6:07:09:c9:fe:09:b6:92:7d:f7:2f:de:
32:e9:ed:dc:9a:80:c2:0b:f3:77:b9:8d:7b:bd:ac:
0f:32:14:2d:09:d3:de:74:17:29:5f:e4:05:3b:e1:
a4:a4:4b:9a:e0:10:37:c4:fb:b4:36:a6:ef:a4:0a:
99:af:8b:8e:b0:06:a3:eb:3f:1c:df:cb:e5:c2:a6:
d0:d2:aa:28:df:22:f1:fb:26:3f:b9:ca:7c:76:8d:
d6:21:a4:fb:d8:d3:ce:1a:ba:ef:8e:62:85:02:a3:
b2:35:2d:c8:5c:50:e1:48:0f:1c:86:18:82:5a:ef:
b0:86:a0:34:2d:4c:c3:0f:07:17:a3:7b:6b:af:7f:
17:3d:93:0f:19:fd:ad:93:99:00:e6:1a:53:2c:b8:
59:2d:5b:5a:0c:ed:74:f5:27:a9:c0:ff:40:3f:2f:
d5:91:bc:25:f9:fd:2f:7f:b1:7e:49:72:51:da:b5:
34:ae:09:d6:8f:5c:c6:68:05:38:61:3e:bb:fb:25:
dc:79:82:06:7f:a2:5e:3e:e0:95:f6:d1:14:fd:29:
cf:32:ac:ac:73:29:82:c2:a8:b6:7b:27:13:a5:d6:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9C:10:04:4C:67:5F:F1:27:8E:B7:C8:AA:12:E3:26:8C:B1:20:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/59a7a010-9690-30b7-961e-fa125e1fce74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9f:e0:31:b6:2e:d1:91:19:33:10:1b:69:7b:df:1d:9d:e9:
61:16:5d:d4:bd:5b:eb:fc:5a:1d:d9:ff:b7:df:39:2b:02:e2:
d4:db:e0:c0:c0:db:ef:cc:44:1e:6d:d8:a2:8f:14:75:b1:eb:
d6:c3:c4:86:2b:7c:4f:aa:0f:2d:37:85:aa:f0:83:43:00:70:
ed:9c:43:7a:5b:bc:2f:86:f3:01:09:e7:16:06:46:1e:a7:cd:
6f:64:86:e2:c4:a5:5c:cb:68:47:8c:c7:28:e1:45:81:2f:2e:
99:54:85:41:2f:c3:e1:a2:4f:b8:28:36:d0:90:d2:f2:cd:66:
01:77:4b:c5:8e:6a:8e:ac:c9:25:4a:91:7d:9f:ac:e3:b9:01:
3c:38:ea:d2:6a:f6:a8:36:cd:97:03:13:a4:44:cc:7c:15:8e:
fa:32:7e:89:79:1e:0b:f1:f8:bf:4b:b6:3d:20:72:a0:86:73:
90:df:3f:d2:ac:c3:e6:a2:48:73:02:a2:45:67:cd:25:af:bc:
23:c1:b2:5e:7b:b9:e9:4f:95:fc:e8:58:4e:23:6b:db:6c:4d:
5a:df:ad:fe:ce:a7:58:db:d6:45:35:8f:b4:66:da:de:d4:9b:
eb:84:43:41:05:f5:bb:11:f7:d0:2f:84:9b:ac:15:17:66:16:
ce:91:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org