Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b34ba39-f9e6-393f-93cf-e013ce3346bc.roa
File: 5b34ba39-f9e6-393f-93cf-e013ce3346bc.roa (raw, json)
Hash identifier: kBVSXoi/t/EItteWS1RXb0791NrrovlqqLHDdaUfM+E=
Subject key identifier: BA:A0:E3:E4:3D:CB:26:18:01:91:D4:3D:62:EE:8B:B3:E0:77:A1:5C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316371329328068EFBD5E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b34ba39-f9e6-393f-93cf-e013ce3346bc.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 209.128.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:37:13:29:32:80:68:ef:bd:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=eb485d86-bd9c-480b-9d5c-4e6dc85d20f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:71:41:02:24:14:42:ee:31:45:58:d0:d1:
b1:4a:61:cf:9a:56:98:c4:93:41:5f:5a:9c:da:a2:
07:20:84:9c:61:9d:c5:3b:d9:7f:95:c9:3a:3c:7f:
bf:8a:aa:df:f2:57:bf:5b:68:3e:98:84:56:d6:c9:
9d:05:f9:c9:06:3f:46:0a:bd:99:83:2d:fc:5b:ea:
0c:51:2c:84:b1:08:3b:25:f2:c8:31:da:5a:fc:3d:
93:5e:c9:17:90:91:8c:bc:fd:27:eb:a4:2b:88:2e:
9c:95:81:60:18:0f:26:fc:68:9f:69:70:a6:0e:50:
f4:43:0c:b1:20:76:69:d0:1a:c8:b4:78:1c:ab:60:
d8:09:51:73:fb:97:2e:66:76:2d:8a:fc:a3:23:53:
9d:e7:51:31:3a:62:b4:87:e7:5b:35:1c:69:30:b2:
b1:c5:85:e9:1e:fd:56:ee:51:8b:40:6e:86:e9:ca:
f4:08:1d:3f:e5:cf:df:50:f6:de:e7:ae:fc:ba:92:
49:df:da:1a:13:f8:a2:b7:95:36:01:97:36:cc:41:
b5:dc:ac:45:07:32:74:67:82:b6:a4:94:b8:78:9a:
fc:c0:c9:ce:76:59:2a:8f:e4:14:64:d4:29:94:39:
16:26:a1:6e:04:17:f1:c6:94:bd:87:b7:68:2b:c7:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:E3:E4:3D:CB:26:18:01:91:D4:3D:62:EE:8B:B3:E0:77:A1:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b34ba39-f9e6-393f-93cf-e013ce3346bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2b:f2:e7:bd:31:66:87:4a:fa:91:1e:d7:1d:06:03:83:dd:
6c:56:af:2b:e1:45:1f:67:58:01:39:81:69:54:d4:31:1a:3a:
7b:f6:7e:2b:1d:e8:78:e9:c6:bc:08:45:55:d9:a5:8e:fe:83:
23:38:62:53:70:e5:cb:e3:b8:0b:55:35:e9:8e:72:8f:7d:a4:
b4:b8:12:a1:d6:02:7b:57:5f:99:3a:6a:12:9f:b5:50:77:08:
91:7b:f9:c1:fa:d8:4d:ea:76:dc:c1:55:c1:67:6c:e0:cd:d4:
cc:14:82:43:1f:76:4c:77:71:aa:a6:af:aa:3c:7d:d1:0d:8d:
16:e3:ab:71:6a:4e:01:27:08:21:63:c9:fe:77:e7:1e:de:28:
8c:e7:a7:fe:1e:53:55:61:d6:fc:58:33:54:09:84:8e:93:d4:
2d:be:22:da:9c:d0:ab:c2:75:b3:49:16:51:82:d0:38:15:da:
8c:76:8b:74:93:ed:fe:bf:ff:be:8a:e9:59:5d:03:50:99:c6:
88:ef:4d:38:1b:d8:bb:5e:8e:28:70:1a:b0:cf:92:6e:dd:0e:
6f:41:8d:d7:37:b0:e4:e6:b0:93:a5:ca:ab:4e:84:44:ba:65:
26:ad:c0:b9:f4:29:97:e7:22:af:06:6e:63:83:4b:8a:46:f4:
b9:64:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org