Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/611b8f32-33f6-3b7c-89f2-4dcc182b8719.roa
File: 611b8f32-33f6-3b7c-89f2-4dcc182b8719.roa (raw, json)
Hash identifier: CS/siKh83h6/qNwHhR7DOJn2W0RVI9sXFfFZ6eU0Mdw=
Subject key identifier: CE:0B:00:78:19:AC:5A:45:D6:63:6E:14:33:EE:91:46:40:01:1B:53
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB09174AF3C24DFF17B6594
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/611b8f32-33f6-3b7c-89f2-4dcc182b8719.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 25946
IP address blocks: 207.61.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:91:74:af:3c:24:df:f1:7b:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=b14782bf-1842-41ca-b154-fdee8b7d366b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:e3:f0:1d:a0:85:41:e8:bf:fa:40:03:5e:
d6:55:cc:2a:bf:41:69:23:40:12:0f:ee:72:1c:3e:
4c:40:c7:90:43:27:23:10:9f:d5:63:b2:64:d7:09:
ea:29:21:c0:44:e6:f5:9c:4b:8b:61:57:4f:38:0b:
18:5a:57:65:2c:b9:70:75:42:06:eb:60:3b:00:97:
d2:66:ff:6b:34:fe:4b:d1:de:22:3c:bb:36:38:f4:
e9:9d:e3:47:05:b1:4f:6a:5c:47:d3:d0:51:19:f3:
5d:e6:0c:a3:cf:ea:29:20:59:e0:2e:af:9a:39:02:
93:74:c3:61:80:b3:cc:8d:03:4c:56:c3:d3:51:56:
4a:a3:f4:92:01:a5:e9:80:f7:de:14:79:f2:db:29:
5e:7d:1c:e4:42:23:45:ee:85:d4:b3:8a:2e:85:5c:
db:44:ac:cf:1e:fe:78:df:c3:76:db:4e:55:14:0a:
bb:88:98:cf:d4:77:12:b5:49:4c:7f:48:7a:d5:39:
c3:31:0d:d2:2e:26:b7:ae:bc:f1:4d:d7:10:fe:45:
01:25:50:35:e5:1c:71:a8:3b:94:8e:cd:0f:ed:41:
38:8f:72:ce:54:4b:16:7b:68:53:d4:64:2b:b1:df:
ae:b2:03:af:40:92:2c:b5:d9:37:99:fe:86:19:94:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:00:78:19:AC:5A:45:D6:63:6E:14:33:EE:91:46:40:01:1B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/611b8f32-33f6-3b7c-89f2-4dcc182b8719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:46:03:7a:cc:9f:8b:11:ed:0a:a8:48:ed:29:57:64:7a:b0:
14:bb:5f:7a:60:e6:65:d4:06:d5:1d:ae:76:70:6a:1e:dc:84:
64:02:e4:97:9b:0e:a5:c6:1e:71:16:0b:6c:c0:e3:ec:b6:72:
31:92:16:e8:fd:e3:dd:5b:99:a7:fe:43:eb:d0:80:05:2c:1b:
9d:ce:48:b5:d8:65:f7:2c:21:8d:c5:5a:15:2c:3a:59:46:0b:
17:71:ad:f4:66:d4:ea:ef:ab:e7:82:48:86:50:3f:6b:9d:36:
cd:42:64:d6:41:cb:4a:37:05:46:e4:3f:2b:1e:3d:33:6a:76:
86:4c:e0:4a:c8:de:e4:19:ee:c8:ec:ae:5a:6d:0d:8b:45:55:
d5:b9:26:f9:f7:c7:cc:00:43:08:a5:51:8e:1e:f9:80:2f:d1:
9f:00:23:94:82:46:28:f2:5d:fb:ff:97:ce:4d:cc:8f:df:a8:
55:1f:e2:98:76:16:8d:4a:8f:ad:ac:92:7f:68:e6:81:86:1b:
88:37:84:b9:ff:d2:f1:fb:52:8e:2b:aa:26:1a:49:c9:f9:c1:
f3:d3:31:9c:bb:99:79:b9:09:6f:60:a8:15:e2:85:dc:1c:54:
93:b5:30:17:00:b0:4b:cb:b4:2e:04:3c:a7:1f:2d:88:4b:5f:
fe:80:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org