Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d75b636-63a2-3ef8-a406-d999532c4b56.roa
File: 5d75b636-63a2-3ef8-a406-d999532c4b56.roa (raw, json)
Hash identifier: Iy2NnQV3Tm23zsbhTyEJegZG1KPK99io8/T9Xa84Nr8=
Subject key identifier: 6A:8E:5C:B5:2D:45:BB:1E:45:69:6D:F7:CA:6E:4A:90:05:E3:A5:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931618498949CC602B74F5C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d75b636-63a2-3ef8-a406-d999532c4b56.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.236.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:18:49:89:49:cc:60:2b:74:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f044ab3d-9906-43f8-b904-bf26e08f3da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:3c:32:9b:ff:ab:3c:7e:48:fc:83:d8:71:
3d:dd:92:11:1c:a0:7a:98:b9:ca:27:80:cf:d4:38:
76:25:01:ad:39:64:7f:71:75:2c:57:88:1b:8a:b7:
3a:67:7b:f6:87:18:9f:e9:95:58:a5:b9:eb:55:69:
c0:c5:21:36:fb:11:c5:39:93:9b:81:b0:a8:1e:32:
22:35:9c:8c:35:a7:cf:2e:d8:7c:da:fe:9b:71:b1:
c9:e7:7e:6e:46:01:c6:e8:9a:ca:05:47:bb:95:b3:
75:28:c9:90:1e:a6:8b:bd:8c:cc:ad:fa:24:fd:47:
86:85:4a:d7:e7:b8:52:16:81:52:41:ec:e4:19:be:
7b:63:d4:f9:44:f4:20:25:6f:f7:aa:af:9a:d0:e2:
13:64:e8:2c:72:35:c3:b8:44:1e:fc:e7:52:2e:6b:
37:7d:28:78:ac:54:91:f5:78:5f:5e:5b:80:90:7b:
db:57:bf:68:f1:00:d4:4a:d3:97:e6:c6:7c:ee:ff:
46:d4:4c:6e:b2:c6:36:0a:18:71:a4:cf:b8:cd:09:
15:91:c6:21:e4:4b:b2:e2:2d:90:25:24:1a:92:8f:
99:45:9f:84:6b:0f:20:9d:bc:31:da:df:c2:25:de:
39:1b:52:1a:d8:27:ba:df:fb:23:77:78:e5:f8:c8:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:5C:B5:2D:45:BB:1E:45:69:6D:F7:CA:6E:4A:90:05:E3:A5:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d75b636-63a2-3ef8-a406-d999532c4b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:db:f3:42:59:85:51:ff:77:a3:d9:1e:79:b5:6c:8f:8b:13:
61:19:92:be:e6:0b:18:95:c4:42:30:e8:0a:79:c6:09:4c:7f:
92:ea:e5:8e:73:0d:f5:cd:92:e3:78:07:31:af:09:40:76:ff:
52:30:7f:5a:2a:c5:aa:bc:75:30:ee:89:14:88:4c:b1:f4:d8:
4c:66:30:17:ed:7e:06:43:c2:84:38:f0:31:c5:3d:0b:32:e7:
66:2d:02:38:59:df:2e:17:6f:ed:73:6e:35:21:94:67:bc:22:
d3:b1:45:13:91:20:95:be:31:f0:bb:34:59:8d:00:ab:88:1d:
3c:65:be:a1:bc:94:6b:d6:1f:63:fa:c2:b3:8d:18:8a:d9:85:
75:d9:fc:a3:b9:4a:c5:78:0f:89:23:2a:3b:69:66:34:5b:e2:
95:42:8f:e6:95:03:b2:e5:7e:63:cf:31:45:9c:38:d4:71:03:
0e:df:35:3f:0f:1d:d6:0e:c7:18:2f:11:c3:4d:0d:42:0b:10:
87:c7:05:a3:7f:9a:b5:12:9a:c0:0b:81:f6:a4:b9:9d:ee:4c:
74:dd:76:b9:7f:79:af:16:f6:40:3f:6d:50:38:d0:c0:cc:19:
7b:95:64:d6:b2:24:89:73:7c:44:da:1f:a0:d8:c3:7b:cf:df:
40:1f:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org