Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5be5c869-ecda-3e96-85aa-8414c994d19e.roa
File: 5be5c869-ecda-3e96-85aa-8414c994d19e.roa (raw, json)
Hash identifier: 2MuhFcN8NSd2fTwmytij4n7bg9Kc9aXkren5lFao/oU=
Subject key identifier: F4:28:9E:4C:F3:BC:42:BC:3E:F4:66:CD:07:4D:25:5D:2D:55:7D:20
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0D1445BB1ABCC3CE10278
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5be5c869-ecda-3e96-85aa-8414c994d19e.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.236.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:d1:44:5b:b1:ab:cc:3c:e1:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=6a49c90d-d407-4ff8-96fa-0c4a1db7ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:24:2a:77:c5:72:66:eb:ca:0f:1d:93:29:
d7:6e:98:d3:fe:ed:68:b7:ff:b3:0a:94:ce:98:fb:
94:91:63:1a:bb:f4:71:1c:b2:7c:05:d5:a7:09:15:
ce:74:45:49:24:95:bc:5b:3a:a2:c5:92:54:51:c2:
e8:76:84:ff:c6:0c:75:45:a7:98:23:4e:82:64:5b:
5a:31:23:c1:eb:81:1f:f4:57:f4:0d:81:27:a8:ac:
3f:e0:d8:54:49:e1:39:6a:41:2c:38:9f:9f:7b:b4:
90:c4:0c:12:e4:3d:02:6e:d0:c1:83:68:b3:be:95:
70:af:75:76:77:73:d5:a3:51:c2:c7:78:0b:4f:30:
c7:64:fb:19:28:95:eb:a6:23:ed:18:15:c3:8c:59:
ce:38:5c:f5:ec:72:2e:04:67:4c:c4:4f:2c:ae:fe:
a6:06:b0:37:b7:55:2b:b7:ad:36:55:02:88:17:80:
e3:7c:f9:49:a2:95:4c:b2:55:55:3c:52:3f:d0:0c:
71:33:aa:de:25:52:5b:eb:7b:6a:4a:13:2a:94:93:
76:57:37:02:1b:12:fc:2d:6f:70:77:ec:e9:69:65:
47:ae:8b:40:75:46:2f:7f:0e:9f:4f:08:6d:fb:4c:
82:25:ec:19:3e:33:90:d0:e6:76:41:24:1c:8e:75:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:9E:4C:F3:BC:42:BC:3E:F4:66:CD:07:4D:25:5D:2D:55:7D:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5be5c869-ecda-3e96-85aa-8414c994d19e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a4:81:b9:62:6e:f3:f8:a6:e8:c1:13:5e:68:bb:60:fd:04:
36:3e:6e:67:ba:6b:3d:65:ff:be:b6:25:f9:5e:bd:ce:13:a0:
89:e9:88:ab:ec:2e:12:a7:34:dd:38:43:c7:8b:cd:0e:9e:b6:
84:18:bc:fd:bc:d0:84:70:73:e5:78:c0:b9:9c:99:bf:34:23:
33:fe:3c:41:7a:90:3b:6a:3b:a8:da:bd:ac:a3:64:64:c8:b2:
e5:31:1b:e1:46:57:85:2a:6b:11:e6:ac:db:20:ac:bd:97:56:
80:16:ff:14:94:27:2c:a6:92:80:98:e6:f5:e6:b1:ff:ec:69:
c3:99:ee:50:b8:17:e6:be:2a:38:de:b6:cb:1f:48:38:77:53:
9f:10:a9:09:e5:54:94:b0:f2:32:f4:de:4c:20:97:df:56:8a:
e1:ec:9e:7f:ad:01:cf:af:65:41:b7:5b:a1:b4:7c:c7:eb:30:
09:d9:2e:bc:07:22:d3:f3:f3:69:73:79:11:cc:84:bd:74:31:
1c:2b:27:a0:b7:a5:3a:e4:8d:0a:7b:59:f2:38:97:25:7c:76:
e0:41:b4:7e:e3:47:c1:bc:34:75:ea:61:75:f8:6f:89:9b:a3:
b5:e9:da:ae:83:f6:f1:24:be:a0:5d:7b:be:eb:61:b2:9f:f2:
29:b6:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org