Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6686277e-8869-31b1-ba5b-f29dc426323c.roa
File: 6686277e-8869-31b1-ba5b-f29dc426323c.roa (raw, json)
Hash identifier: HMIs9aEc8nfO1VqDCT1b8pBWSVoj+dy1ZRkN36ZhNmg=
Subject key identifier: B9:DB:BB:B6:76:AB:BE:55:A3:00:62:09:7E:DB:0F:21:1E:32:A7:31
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5C27E077BBC11412B8300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6686277e-8869-31b1-ba5b-f29dc426323c.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 209.226.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:c2:7e:07:7b:bc:11:41:2b:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=5cf3ae0d-21bf-4d89-af29-f7e7cd96f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:6b:65:d3:73:61:9d:8c:0e:18:c8:bc:28:
9b:3a:d2:f0:5a:3a:b4:d2:f5:96:b4:98:55:1a:d9:
3d:50:64:14:3a:b8:65:04:12:66:e3:d6:01:3d:49:
9b:e3:a4:21:a1:49:19:de:aa:f6:0d:3d:6c:11:2e:
41:81:f3:e3:7e:cb:5e:3e:5b:f9:f6:7c:6b:6e:84:
0a:67:91:31:66:d1:11:5b:b5:21:f1:0b:3e:83:a0:
aa:ef:f7:bf:bc:8c:d3:84:b8:ea:bd:f8:9d:3f:0c:
80:60:12:27:56:85:4b:b5:3c:d7:5d:bc:14:c3:11:
d4:15:91:47:f7:e1:c4:cd:83:9d:26:30:de:b9:2a:
df:fd:f7:f4:ec:0b:fe:aa:d1:58:54:bd:6d:cc:24:
7b:a6:18:64:86:5d:c0:9e:01:ec:4e:1d:e1:14:cb:
c2:78:e2:51:37:61:c2:aa:0d:8f:bb:15:55:da:92:
f1:e1:fd:45:fd:cb:c5:e7:70:97:0c:fe:ad:c6:02:
de:60:be:5c:c9:07:1e:10:c7:73:f0:25:c8:93:77:
64:9a:9a:f6:6e:3b:30:2f:f4:97:40:a1:41:9b:84:
ea:e1:0b:e7:62:26:75:7c:8a:81:1c:68:8f:58:3f:
87:e5:27:f1:64:3c:62:43:1f:78:da:6d:48:38:8b:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DB:BB:B6:76:AB:BE:55:A3:00:62:09:7E:DB:0F:21:1E:32:A7:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6686277e-8869-31b1-ba5b-f29dc426323c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:73:b6:83:3e:fd:f8:23:e2:2b:74:a2:ed:4f:28:33:fa:89:
6d:3f:dd:17:cf:82:b8:ce:03:99:74:94:d0:08:17:d8:85:11:
81:34:98:c5:ac:c4:c4:0d:56:cd:3e:ef:80:c9:5b:1b:b8:f7:
57:3a:bd:55:81:bf:b7:dc:93:6c:36:88:cb:b0:60:7e:13:b5:
36:64:97:ea:47:28:32:97:5b:93:57:ce:df:01:93:92:50:70:
08:71:53:74:b4:d9:f4:b7:47:fd:a5:9f:1e:1f:d2:13:a8:2f:
75:41:cc:26:38:54:5e:c3:09:d5:ab:09:5d:55:d4:de:84:b6:
72:09:6f:91:9c:6f:c4:0f:03:8c:cd:57:73:97:b4:5f:42:66:
1e:10:ce:e4:eb:5d:43:8d:42:96:b9:7e:2d:d4:fc:95:ff:b3:
72:39:fe:8e:30:ff:d8:73:44:9e:a6:f1:ca:dd:dc:7b:2c:36:
fb:af:32:60:d2:cf:7d:e8:75:62:73:19:45:db:a1:8c:b2:34:
c3:bf:b3:5e:21:4e:5f:7a:9a:b3:53:82:e4:01:c4:65:51:61:
ed:6f:0a:7e:5a:75:aa:b7:69:f2:4e:0c:69:61:e3:67:1b:78:
61:26:36:96:c5:f3:07:e4:f5:bd:2c:17:07:bb:3f:4f:93:6a:
a5:45:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org