Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/628053d3-68c3-359c-966d-ca0fc8d397df.roa
File: 628053d3-68c3-359c-966d-ca0fc8d397df.roa (raw, json)
Hash identifier: 36S68QlDfhUHc4VW07dWuElLi0xKzay5oq1i75cedps=
Subject key identifier: 57:49:F1:CD:9D:21:EF:B5:86:E7:40:26:EE:45:60:13:38:76:82:74
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0BA0C3A8EE8852FA25F20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/628053d3-68c3-359c-966d-ca0fc8d397df.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:ba:0c:3a:8e:e8:85:2f:a2:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=48c3eeb6-0263-4da4-93b3-36e66f7efdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:a0:d1:c4:b2:63:df:de:df:3b:5f:b3:15:
d3:5d:9d:97:fd:84:4e:9f:2a:6c:92:4e:f8:88:8d:
c4:21:7e:61:ab:23:f3:90:95:ce:a5:20:b8:1e:a8:
af:eb:ea:2f:18:30:ea:56:2d:32:42:38:ae:ee:24:
cc:55:7b:08:62:85:65:64:eb:b6:e8:5e:87:8b:da:
2b:6d:b3:0d:91:f8:c5:c0:41:ca:78:2f:9d:a0:8d:
16:78:46:fb:b5:29:aa:3b:e5:0e:d0:38:68:dc:55:
e3:23:9f:01:84:a3:fb:1e:18:bd:4e:62:5d:ee:26:
a6:1b:0b:a2:15:14:e4:0a:43:3a:cb:e9:54:17:2e:
fd:05:d9:7b:06:cb:c4:b0:c7:3b:fd:c3:c5:d5:78:
94:0d:31:a4:48:ac:33:04:5c:e1:6a:24:2c:90:07:
a5:25:cb:d9:26:b8:55:01:43:ef:08:10:c9:ac:db:
e8:91:67:04:07:5c:ba:d6:db:16:7e:df:2f:00:65:
ce:f3:f4:37:40:13:4e:96:f8:9b:6a:cd:63:b0:d6:
f0:dd:49:42:b8:81:c8:51:cf:89:43:0a:22:61:8d:
34:91:78:b3:6c:c2:6d:a8:b7:64:dc:eb:a0:cf:35:
6d:7b:8b:27:63:5b:e7:45:2b:9a:fd:06:5c:7c:b7:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:F1:CD:9D:21:EF:B5:86:E7:40:26:EE:45:60:13:38:76:82:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/628053d3-68c3-359c-966d-ca0fc8d397df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7a:8c:24:80:69:51:e0:a3:e0:44:85:72:12:33:ce:9d:db:
3f:40:e2:5e:91:24:0f:30:d3:b7:28:38:dd:7e:f6:f7:5d:65:
20:94:a3:a6:d6:d9:96:a3:00:49:b5:da:59:04:33:f5:5b:ce:
32:7f:3a:f9:93:34:ba:8a:7f:ed:0c:fa:ed:b6:ea:42:5d:04:
df:ef:25:91:6e:9b:6e:f4:c9:69:94:3a:ae:a2:87:d3:9f:6b:
b5:44:36:e4:45:37:f1:3c:5d:fc:50:fa:33:81:e6:01:90:80:
d7:aa:73:3d:3a:15:d9:94:be:99:7e:33:e4:09:02:34:ef:14:
3e:97:9d:25:59:21:64:2d:1c:16:52:58:99:c2:e3:ac:7f:67:
16:b0:42:51:d3:73:d1:ab:20:4e:f0:1e:fe:83:8e:b9:52:b3:
dc:f3:a0:0f:cd:ff:2a:86:5e:b5:98:06:80:4e:51:5c:24:46:
cf:df:02:77:54:2c:23:2e:b7:ec:43:23:46:f8:71:22:ed:66:
26:86:1e:bb:d8:3c:da:81:42:20:4d:19:db:7a:34:6a:51:59:
d3:61:a6:07:66:fb:9d:bb:1a:77:f4:b5:53:10:d4:14:6c:c1:
ba:78:12:c6:95:e7:a8:3c:b5:fd:97:66:8f:94:da:99:a7:17:
2c:0f:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org