Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c393b4c-336e-3976-93a1-ad46d2dd3f3a.roa
File: 5c393b4c-336e-3976-93a1-ad46d2dd3f3a.roa (raw, json)
Hash identifier: QnLHtiDB4n7cePwncnOvYaMOZwRTVmJh98ZByynzj9w=
Subject key identifier: 55:59:D3:BC:23:DF:95:DC:10:18:14:FA:F6:4F:80:96:D2:B4:62:C1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE6568E4F1702EA98C12480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c393b4c-336e-3976-93a1-ad46d2dd3f3a.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 216.209.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:56:8e:4f:17:02:ea:98:c1:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=ce4fd6e0-3f01-4cd9-b519-2256242d26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:9b:ac:c8:f6:6f:6c:e5:ba:a7:07:a6:f3:
2c:f6:a2:9f:4e:02:d3:8e:e3:16:0d:ce:3f:72:50:
d8:0d:36:48:9d:26:81:83:5b:4d:b4:5f:29:1b:aa:
63:82:a5:ba:0a:3b:4e:59:02:96:c7:70:a3:fd:a9:
cf:d4:99:a2:dc:e5:be:cb:4e:12:ff:a2:b0:93:0b:
13:37:52:34:27:9a:b3:eb:9b:69:34:c0:06:99:aa:
3d:66:f6:bb:4f:1b:b7:2c:20:d5:c2:f0:8d:8c:a9:
78:da:1b:8e:e0:b9:b2:db:3f:21:e0:81:de:b2:90:
2d:50:2d:2c:fb:e0:af:a4:87:a0:aa:b7:1e:9c:d6:
47:f6:72:7e:ea:13:7d:99:f1:93:3d:f2:e7:6a:52:
f6:58:3a:ca:a5:d7:2f:16:ab:01:ef:6e:83:fe:4f:
7d:ad:b1:97:16:d9:3e:a9:6f:85:fc:f1:bc:ac:06:
b9:3b:91:e0:67:d1:63:b2:b4:2e:61:64:c2:c0:f8:
b8:11:24:cc:ab:c2:89:66:3e:1e:44:2d:eb:78:a8:
7c:b0:ae:fb:24:45:36:b9:99:25:b8:dd:fb:fc:6b:
3f:57:48:67:32:f5:df:c8:29:7a:49:5f:81:6a:67:
51:b0:d5:cf:90:64:6e:f9:ac:98:d6:fd:94:81:0d:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:D3:BC:23:DF:95:DC:10:18:14:FA:F6:4F:80:96:D2:B4:62:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c393b4c-336e-3976-93a1-ad46d2dd3f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ae:4c:b1:4e:0b:dc:0c:d1:fa:95:71:07:cb:94:a5:a8:ad:
45:7c:74:9c:d1:29:f3:15:7f:60:40:a3:86:b7:97:e6:77:cb:
3c:c2:84:9c:e3:34:10:eb:2c:f0:f1:93:c6:57:f8:db:f7:09:
14:99:fb:2c:17:fe:6b:1e:8c:3a:21:d7:06:5f:fe:ef:b6:9f:
84:17:e5:87:06:69:06:ed:fc:fb:b4:e5:25:eb:ac:3a:cf:78:
1a:46:e2:2f:2c:48:e7:71:af:dc:8a:cf:f9:bd:d5:2a:a4:53:
54:5a:84:b8:4a:e8:f5:c9:e3:1f:85:67:cf:08:83:24:ef:56:
b1:5b:94:75:a5:89:e7:8d:db:f9:23:e4:69:55:30:52:2e:72:
6d:08:d3:32:be:88:19:b7:bf:63:1c:b9:1d:2e:76:b6:2c:4b:
46:7b:7c:32:42:04:b7:bd:e5:b6:3f:5f:54:2b:30:0c:24:02:
2e:b3:64:f8:ad:db:13:98:b1:92:a6:bd:33:be:4a:d1:eb:13:
f7:3a:f6:be:9c:e3:12:02:32:6d:55:a2:bd:cb:e6:b8:da:26:
87:0d:67:07:fc:92:f8:5c:6a:e5:0f:ff:8f:db:85:31:18:06:
8a:88:ce:d0:26:30:0d:e5:9d:ee:3c:b5:fc:73:14:1d:4a:c6:
8a:ad:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org