Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bd24de2-693f-31c7-ba18-5c07b96b241b.roa
File: 5bd24de2-693f-31c7-ba18-5c07b96b241b.roa (raw, json)
Hash identifier: mycD+qSifKq4aStXbnNCXH3QbaSUDXtIlt+npmY7FXM=
Subject key identifier: C4:84:65:12:2D:0F:83:EA:6E:40:54:FB:80:FC:28:68:D7:BC:DF:1D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE602C58411A2EB916C6400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bd24de2-693f-31c7-ba18-5c07b96b241b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 11831
IP address blocks: 216.18.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:02:c5:84:11:a2:eb:91:6c:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a48663eb-9380-4a25-9815-524d56272c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:a2:1d:6f:54:c8:e9:91:1a:9d:06:1d:8a:
3d:d4:96:6d:85:04:8f:1b:fb:6a:37:8d:d0:99:8f:
e8:04:11:a4:a8:ad:26:e0:76:2d:60:4b:2e:c2:11:
fa:4f:ae:2f:1d:15:6a:d5:df:43:0b:b0:aa:aa:fa:
64:9c:43:a3:ff:f7:62:dc:e5:25:94:a2:6e:e9:57:
3b:87:e9:87:56:f8:59:e8:b0:86:92:c6:89:f6:df:
3f:f1:74:12:f9:03:c2:2f:69:3f:6d:3b:75:79:f1:
f2:d4:34:d6:10:d4:4f:63:fd:f7:88:0a:b2:41:56:
24:78:8b:8f:ca:b5:ee:2f:52:c2:f8:f5:b0:21:69:
7f:f8:7f:c4:2d:53:9d:0d:a4:99:dd:af:ea:d1:88:
3b:d0:b0:c0:e2:81:0e:23:73:37:29:cc:59:8d:38:
b1:a2:09:58:95:3d:32:cb:e3:5d:86:9d:10:58:80:
b8:0a:c8:c4:5a:18:c7:b9:38:37:7e:c7:f3:fc:53:
57:72:aa:f5:06:77:ab:61:3a:6f:b5:42:64:91:fc:
2f:f6:32:0d:4b:de:24:55:64:5f:c3:c7:51:4a:db:
c0:14:43:5e:e4:4b:03:84:63:a1:66:c0:03:11:35:
ab:b4:1d:d5:57:aa:9a:20:15:0f:bc:30:32:4f:34:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:65:12:2D:0F:83:EA:6E:40:54:FB:80:FC:28:68:D7:BC:DF:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bd24de2-693f-31c7-ba18-5c07b96b241b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ee:51:52:28:33:f5:ec:ed:0e:db:5e:77:f9:0e:ae:97:72:
56:4d:7d:28:88:23:82:d3:03:d9:0f:5b:ef:eb:15:35:92:3c:
45:dc:7f:48:38:c6:85:f7:35:a3:26:b0:c3:92:fe:c9:d5:94:
f6:19:4a:9e:4e:a9:3c:4b:92:af:39:9d:2f:ef:5c:02:29:6c:
37:3f:6c:6a:97:cb:d2:db:c3:5e:1a:65:be:67:dc:27:4a:d8:
69:45:e1:46:6c:2c:ac:21:d8:06:4c:56:26:d7:89:38:8d:fd:
58:11:2d:a8:b7:6c:08:af:4a:fb:b8:cd:c4:9d:22:e4:c9:87:
fa:01:1d:fa:76:c7:f7:35:66:4d:2d:fa:3c:18:20:1a:40:22:
33:2e:66:b0:c1:29:b1:49:54:4b:30:c6:d3:6c:06:d4:11:47:
b7:4b:b8:05:77:35:74:39:9a:c4:81:3d:16:12:b9:c2:b0:5f:
e8:18:25:28:21:ce:da:1f:34:e3:fe:f8:66:ca:5a:82:76:c7:
01:5c:f2:e6:13:df:77:95:41:4f:ea:ae:48:3a:ab:85:29:8f:
87:f9:2a:6f:5b:6f:02:08:64:5d:cb:22:53:14:3c:27:43:f4:
e1:5d:af:d1:a2:38:2f:47:55:90:1e:4d:ab:ce:a5:9f:c2:d6:
72:6c:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org