Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d181334-060e-31f3-bb49-cf27a7e055c3.roa
File: 5d181334-060e-31f3-bb49-cf27a7e055c3.roa (raw, json)
Hash identifier: dZJNQV3Ybf1grHlUFa/C1jSlz+V5pabH2t7Em2aoNtU=
Subject key identifier: BD:9B:67:CB:DA:B3:24:6B:C9:26:15:CE:6B:8D:91:5D:2D:18:E3:E1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314896EA1E5D8F6173C55C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d181334-060e-31f3-bb49-cf27a7e055c3.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 184.151.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:89:6e:a1:e5:d8:f6:17:3c:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=940f72a7-e7fe-4179-b22b-38c8decaa4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:70:00:b6:fb:06:ba:7f:96:8f:8a:c8:d1:
93:fc:fb:0b:02:da:d9:0e:99:f4:32:79:0b:e7:81:
7d:f2:d8:47:d3:47:b7:af:d7:61:cc:d8:3b:24:1c:
78:57:97:84:da:1c:1f:dd:d4:17:9a:4e:f9:8a:84:
84:46:9f:fa:05:d0:f2:e8:87:86:50:7c:7b:48:fb:
04:26:c4:1f:7c:21:60:1b:c0:75:9b:2d:a3:73:25:
e0:22:8d:ac:d8:35:31:97:cd:ad:7f:99:1a:5c:b8:
cd:3e:c1:73:5d:0c:76:a7:ba:26:c0:0f:91:f5:f5:
31:11:91:22:74:20:64:cf:4a:21:2b:79:70:18:9a:
09:26:9c:cf:b2:b5:22:56:2c:05:8b:e3:3f:59:e8:
bb:78:06:f5:91:f4:39:be:fe:5d:f1:a0:af:a5:b4:
9a:c0:54:45:13:51:02:d8:df:e3:38:0c:2d:ff:42:
f4:ea:8e:01:54:4b:24:83:0e:22:c4:08:fa:09:ae:
79:5d:f6:0e:c7:0b:b4:50:c7:f2:00:fb:7c:c6:e7:
a9:14:66:10:64:db:d9:fb:05:92:fb:cb:1d:54:46:
cf:88:b9:6b:30:57:d7:74:70:b3:a1:67:a1:bc:af:
ce:30:a4:fa:95:b8:1e:7d:71:62:c2:f0:a1:24:eb:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:67:CB:DA:B3:24:6B:C9:26:15:CE:6B:8D:91:5D:2D:18:E3:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d181334-060e-31f3-bb49-cf27a7e055c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b0:fb:7a:0f:da:fd:06:25:7a:fd:29:76:31:84:69:14:7f:
b2:85:80:ac:90:06:2f:36:1a:11:38:f2:4e:1b:c8:cc:57:6c:
86:71:93:34:b4:ad:cb:c1:f0:99:9f:c2:92:83:7f:e2:d9:1a:
6c:90:b5:60:25:a3:93:80:ad:17:ce:49:f4:96:a7:c8:fe:f5:
63:c3:90:02:13:ee:69:26:02:bb:eb:69:fc:cb:ab:a1:9b:53:
63:7f:f3:29:57:a9:3b:d6:fb:68:8a:70:5a:1b:37:27:38:a5:
58:2f:11:a3:2b:cf:53:d5:7f:78:67:ad:a7:dd:a1:c7:36:42:
04:41:fc:f2:4d:e0:e9:ef:43:73:13:ec:70:95:14:11:03:07:
a9:74:fc:b7:92:87:cc:7f:f4:1f:72:76:2e:15:23:cf:70:a2:
8c:a4:33:73:ba:e9:87:0c:06:a6:e0:1f:a9:50:5b:e3:ee:4a:
df:36:23:29:75:cb:00:bf:92:f6:c7:b2:59:79:92:47:ba:e2:
32:29:bc:5a:4a:62:fd:4c:5e:6c:96:81:8f:f2:00:da:4e:7e:
7a:b5:bb:49:71:e1:0e:cf:c3:e6:6e:fe:e5:83:61:84:ae:fb:
3b:ca:95:0e:f5:80:70:13:f5:e9:23:2e:a1:42:be:19:c8:9d:
8c:94:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org