Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/607865ea-65ed-3997-9d63-a039e4f35420.roa
File: 607865ea-65ed-3997-9d63-a039e4f35420.roa (raw, json)
Hash identifier: YKwD5/LKpKdoRpoBwmlBG5/xKXRpvSO3lQighgNDEkY=
Subject key identifier: 45:88:FD:72:18:B7:36:E0:EC:E9:A4:96:F3:E8:EA:09:46:D4:AD:01
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314ADB07DC6F7693DED7180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/607865ea-65ed-3997-9d63-a039e4f35420.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 184.151.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:ad:b0:7d:c6:f7:69:3d:ed:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1a88a18a-e596-48ca-88d9-a1e40fb3e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:17:b0:47:be:a5:e5:84:07:ab:0d:50:79:
e3:1f:3d:74:89:ad:08:b7:86:7c:e4:e5:70:36:df:
d3:f1:31:78:1a:df:d1:8c:6d:59:ac:a3:e5:46:1c:
86:59:f7:b5:fa:48:41:33:98:f5:35:aa:8a:7f:b9:
78:8b:8b:5c:2c:f6:8a:db:fe:90:26:10:10:30:f8:
a9:d9:2a:92:91:e3:29:66:7c:82:31:22:0d:54:af:
7d:3a:0f:5c:e7:af:3b:89:e9:be:3e:34:48:60:6c:
3c:06:53:b4:6e:09:87:44:de:00:e8:f0:ee:2d:74:
cb:e1:27:94:3b:f7:f3:f0:49:d5:ae:17:41:fb:f9:
cd:81:c4:b3:b9:1d:bf:1c:79:de:1d:c9:1c:b1:a4:
ce:28:ca:71:e4:ba:b6:ee:26:ba:80:0f:61:9f:a4:
54:df:32:d7:4a:c5:ca:23:eb:94:56:96:af:d5:75:
79:01:c9:26:f1:18:8a:59:63:53:52:4b:9d:c7:3d:
56:24:80:3d:09:41:b2:e1:f7:f3:3b:30:3d:78:bf:
de:94:97:5c:e4:44:1e:3b:01:86:00:1e:73:97:ee:
1f:61:cd:d0:38:67:a9:9f:29:1f:72:05:68:60:59:
aa:cc:1b:94:eb:15:99:21:2b:5b:95:03:b0:cf:17:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:FD:72:18:B7:36:E0:EC:E9:A4:96:F3:E8:EA:09:46:D4:AD:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/607865ea-65ed-3997-9d63-a039e4f35420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:d5:cc:09:e4:8a:67:d2:1b:af:0b:e8:4e:b4:fc:b8:f6:66:
fb:3c:21:10:92:76:39:06:4a:42:4f:ec:55:e8:af:ce:ee:f2:
9f:d5:6c:fa:37:b5:30:96:15:1a:65:55:f7:ed:2a:32:bf:37:
ed:f4:37:7b:6e:21:f7:05:fb:56:20:72:70:2d:9c:a7:10:ab:
9e:db:93:88:14:6f:55:f8:36:e8:6d:04:ce:ab:e4:d1:79:d1:
11:43:6c:22:e9:6c:7d:ac:a6:f4:9e:3c:5a:ef:6d:89:0c:40:
65:c0:7f:52:11:55:b8:13:1c:5e:58:d1:a4:69:30:19:93:f7:
ae:ad:0d:e2:02:14:08:a7:0e:9b:82:a7:85:47:81:67:df:71:
d5:fd:e0:bb:4f:07:50:d3:94:5a:33:2f:c4:80:a5:92:9f:6b:
36:15:cc:a2:72:25:42:d5:df:dd:02:7f:69:07:0b:8e:ca:bb:
10:6f:49:aa:72:51:12:e4:36:8e:74:98:39:ee:e5:6e:fd:38:
e7:53:66:a5:c1:e0:01:a4:78:fc:60:5b:c6:af:ab:19:a8:a2:
91:ba:7e:bb:aa:c6:8b:52:ba:6d:08:08:b0:f2:b1:30:51:b7:
b4:c4:8d:61:c8:cc:68:6e:54:fe:a0:e4:c4:4b:56:ef:e8:aa:
e8:0b:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org