Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e430e6a-b54c-3784-becc-86bc66128073.roa
File: 5e430e6a-b54c-3784-becc-86bc66128073.roa (raw, json)
Hash identifier: UzYb9Gh1qtstGREvUnxSwQbRDAX9OPTEp+6mM1R9qGU=
Subject key identifier: 32:49:BA:5F:11:88:32:4B:45:E4:48:22:1B:B7:D5:C4:7D:97:66:D1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB00BE914276BF04A24AC7C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e430e6a-b54c-3784-becc-86bc66128073.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 204.101.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:0b:e9:14:27:6b:f0:4a:24:ac:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=57fb6d50-19cb-4978-ba05-8bcc44a0a801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:eb:8b:9c:91:32:55:61:4c:d8:24:5c:d0:
4f:24:41:18:95:50:50:cb:c9:4e:17:60:65:15:ac:
58:62:9b:e8:71:55:40:95:12:cb:85:f5:9c:1c:c1:
6f:e1:f3:06:b8:95:3e:b5:ef:b2:be:34:30:17:08:
e8:11:83:61:c3:92:e3:54:fe:04:c0:a0:70:d2:47:
c8:36:89:ef:0c:1a:54:09:4e:58:dc:3b:42:7d:bc:
68:21:ab:f5:d8:5d:cb:6d:59:d1:c4:66:5a:02:2e:
6a:00:d5:3c:55:0e:8e:2f:d0:8f:4d:d9:e6:49:24:
85:ed:08:a4:87:e3:2a:44:a3:61:6c:d0:1d:25:36:
e4:d8:de:c6:5a:57:8d:e6:1c:b8:c4:89:1f:aa:1a:
01:69:16:68:38:b4:e9:0b:c1:ea:b3:c8:ec:dd:5a:
1c:91:78:68:bc:d4:43:6b:28:28:3a:7e:16:e6:3a:
07:cd:da:5f:94:88:9d:c8:a2:a3:3c:68:52:45:31:
fd:e8:0b:f0:45:fb:82:e0:bb:d2:b4:f8:66:fb:f2:
19:8f:af:4e:4a:74:26:ab:d9:59:49:18:80:8e:37:
13:4a:b2:84:3b:00:e2:8d:89:05:80:47:01:eb:14:
51:37:07:68:f3:3c:da:8a:8e:15:4c:6e:1e:ca:75:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:BA:5F:11:88:32:4B:45:E4:48:22:1B:B7:D5:C4:7D:97:66:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e430e6a-b54c-3784-becc-86bc66128073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4e:77:ef:9d:75:57:7d:2c:31:b9:04:ab:4e:94:6e:a1:70:
39:83:c8:bf:69:e4:41:f6:2f:6c:7c:c5:c8:0e:3f:50:86:fc:
eb:73:c2:52:50:73:1d:91:db:91:83:98:4a:c8:fc:9e:f6:da:
91:50:15:a6:26:6f:a3:e6:92:01:1c:79:2f:00:31:8d:da:25:
0c:b7:32:10:84:9d:71:88:e5:f8:84:b1:91:21:31:1e:8a:4d:
b8:dc:ff:33:cf:dc:86:59:f1:59:a5:75:a6:51:6a:2d:a3:f7:
4d:e3:a4:49:83:31:13:5d:86:29:00:5e:c5:0c:a9:b7:ec:6c:
54:34:6a:79:96:84:89:8e:62:c6:1b:be:b2:88:a3:6b:29:30:
7c:25:74:84:27:6e:df:ca:c1:3b:73:b0:46:98:e6:a7:e8:27:
b5:fc:9b:f0:97:f1:94:a5:8c:d4:9b:85:78:f0:87:2e:36:d6:
f0:d6:e5:c6:12:e5:44:43:7e:45:ab:b9:34:0f:2b:04:e5:b4:
39:de:ab:a1:01:d1:eb:ee:6b:04:6c:4a:e9:51:e3:94:43:c2:
f8:d6:68:dc:eb:8f:12:1d:72:3f:4f:64:4b:95:f1:3c:ab:cb:
5c:14:80:62:ac:ef:39:e8:66:6f:8b:f0:29:d4:2b:f5:20:07:
22:80:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org