Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6620d22e-378b-3d49-99fa-2f2bf6853077.roa
File: 6620d22e-378b-3d49-99fa-2f2bf6853077.roa (raw, json)
Hash identifier: 3knzc0iPSM5qqkzIE53mpU5wlBxVGYpzu+EijUQcBtQ=
Subject key identifier: 0B:83:66:F3:24:CB:2E:06:2E:2C:3B:DB:75:60:81:D4:95:8C:EA:83
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE43F786656E49202D50A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6620d22e-378b-3d49-99fa-2f2bf6853077.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 70.28.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:3f:78:66:56:e4:92:02:d5:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=32b9822d-8579-4ec1-8e42-570f3711d050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:01:94:dd:e7:f2:57:8a:7e:f7:a8:98:4f:
7a:df:9f:73:48:11:fb:f2:69:11:47:e6:be:2b:3d:
4b:c1:61:1a:9d:3e:7c:fb:6b:3f:6d:0d:90:2c:8e:
2e:26:72:e4:5b:e1:a2:61:8e:ac:d7:7c:02:43:dd:
ba:f6:50:54:9a:78:27:e8:a2:c2:f7:4f:ef:ab:c0:
d3:15:29:16:be:f0:98:60:a9:52:42:61:67:81:1b:
e1:b6:cc:2a:a1:33:00:c9:f1:b1:5a:71:b2:ca:89:
17:d8:44:3b:1a:84:bc:13:ae:03:d1:ec:75:ee:81:
d0:77:4e:0c:3b:ca:c8:28:55:64:0f:34:40:c7:e8:
b1:6e:47:bd:e1:da:90:72:60:3b:30:80:e2:de:b3:
a7:41:12:7a:df:2c:10:29:3e:f7:45:11:10:ab:70:
a8:52:e2:bc:52:5d:d6:ea:8f:da:aa:b3:b6:8e:7e:
4e:23:e7:ca:fe:a3:63:53:c8:83:b1:73:27:bf:99:
a7:da:10:29:ce:69:af:8b:21:31:a0:c4:5e:27:24:
5b:03:0b:dc:2d:51:4e:a9:4c:20:26:19:c2:b5:98:
35:af:a2:dc:2e:c5:5d:3e:6f:69:9d:fe:3a:a7:03:
53:53:cf:09:7f:3b:e7:e9:bb:31:35:8b:f0:a0:84:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:66:F3:24:CB:2E:06:2E:2C:3B:DB:75:60:81:D4:95:8C:EA:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6620d22e-378b-3d49-99fa-2f2bf6853077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ed:4a:00:92:19:5e:61:8b:34:28:5d:42:0c:20:79:74:2a:
13:0d:af:25:ed:b5:71:93:4f:ed:1f:92:db:8d:c6:a0:fd:88:
b8:1f:ea:b7:a6:27:6f:e7:f2:bf:29:9d:83:b3:8f:40:9c:1f:
39:67:79:4e:16:3e:ab:e7:18:9d:f4:91:29:aa:b1:65:de:d6:
84:f9:e4:01:5c:48:08:6a:92:ce:b4:c9:fd:0e:73:91:b0:71:
b6:b4:7a:cf:32:58:73:f4:33:4b:09:f3:6d:e4:30:73:c8:12:
c4:13:21:8e:70:b4:04:50:be:0f:32:aa:eb:cf:72:73:6f:54:
31:f8:10:7d:18:45:25:6a:79:5f:06:8a:ac:da:e4:d2:ce:20:
67:ef:cb:c2:24:a7:f7:14:b1:01:3d:a8:7d:0a:31:f6:90:40:
29:d1:6a:4a:7d:e1:2c:32:57:f3:bb:e3:6f:49:9c:8a:61:37:
af:f1:a3:c9:3e:73:56:28:59:7e:0a:c0:fc:8a:bb:6b:28:ff:
8a:58:c1:7f:e7:54:71:f9:b4:83:f2:68:0b:7b:de:c8:5e:ee:
c9:90:8b:07:e5:88:6a:21:2c:79:2d:14:cc:f6:8f:97:e1:a4:
56:e8:31:fc:77:8d:51:39:c4:49:1d:e0:4d:0f:c9:7b:be:d3:
88:0b:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org