Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6972fadb-0314-3abb-a6e8-25d50e8ca447.roa
File: 6972fadb-0314-3abb-a6e8-25d50e8ca447.roa (raw, json)
Hash identifier: 58K1YC5D/19wCa7wkCkXa05M5tGeFs9sxjTf+3lQh0Q=
Subject key identifier: 98:9B:0D:98:2A:76:76:53:5F:B2:FA:19:95:B2:21:40:CF:BB:C2:1D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE59E5498C4D52200040E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6972fadb-0314-3abb-a6e8-25d50e8ca447.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 209.71.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:9e:54:98:c4:d5:22:00:04:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=1431b921-7975-4122-9389-98fc3f268f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:c8:7a:4b:3a:b4:98:4d:92:f1:da:f7:d1:
8e:55:69:76:d4:0d:6d:e7:ad:86:c3:09:4f:5e:82:
b5:12:8e:fd:bf:92:58:88:fe:17:8f:d2:40:0d:0a:
cf:69:9c:56:3e:b0:03:de:4a:b0:3e:5c:23:fe:25:
85:08:65:5e:84:e4:45:a9:4a:e4:7a:ca:b0:1d:09:
d4:7b:bd:de:18:67:0b:33:c7:49:c4:fd:6f:d2:c9:
48:90:2f:51:b2:f6:dd:11:39:4d:82:96:a7:25:95:
25:17:56:89:0e:c3:cb:20:fa:9a:ac:fc:f1:53:66:
b1:91:51:b3:e5:cd:b3:ea:ce:04:0a:41:09:b0:b6:
c5:5b:77:22:32:f2:7e:e3:0a:64:92:9a:12:9c:83:
40:3d:21:72:af:fe:46:fa:42:51:3a:83:24:f6:95:
00:35:cb:20:7f:7e:72:0e:02:8e:ea:5d:78:e4:cf:
08:bf:67:6b:10:8a:16:b9:d5:15:20:80:b5:3b:73:
2f:6b:0c:c2:6f:2b:22:cd:48:b2:90:e3:f1:49:00:
80:8a:63:d0:f3:86:73:60:da:79:e5:bd:cb:7c:c4:
62:24:37:69:56:98:1e:3c:c6:0f:4d:de:72:5a:42:
9c:57:f3:fb:eb:5f:16:36:2f:d4:ae:3c:1a:9f:b5:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:0D:98:2A:76:76:53:5F:B2:FA:19:95:B2:21:40:CF:BB:C2:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6972fadb-0314-3abb-a6e8-25d50e8ca447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ee:85:ea:e7:39:e1:6d:e6:98:cd:e0:fa:7f:7e:ae:71:3a:
ee:79:dc:ed:94:6a:90:f8:1c:1f:d5:c2:d9:37:42:d0:6e:88:
79:67:da:f7:c1:80:f7:e7:f1:f8:54:43:dc:04:7d:b3:a7:c0:
81:00:0d:ca:cb:f6:ee:5d:6a:90:90:f9:b1:2b:1a:47:1e:6d:
e0:5c:f0:e9:f7:88:f4:18:cd:45:6a:76:66:fa:68:2f:25:a7:
9b:72:c4:06:71:ec:60:a7:89:fe:53:ca:2d:c4:6d:66:1d:5b:
f7:e0:a1:64:2e:5e:22:7f:ed:dd:5e:4e:30:3d:44:0b:8f:f5:
22:a4:06:82:54:ee:c1:e4:fe:b4:4b:e2:1c:1f:ab:ed:e1:9e:
bc:7e:22:20:6a:67:66:00:5f:b3:6d:5e:ca:b5:4d:5b:a2:b2:
4a:8d:ee:97:ea:b6:6a:ba:73:ab:d0:52:e2:63:9c:59:17:3d:
cd:07:e9:3f:d4:56:61:ee:bb:95:f7:2d:ca:f9:31:70:e2:43:
b4:f8:92:d3:be:2f:34:3d:f2:2f:44:9e:d8:72:ea:3a:9b:7a:
25:cc:fe:7a:71:3a:74:16:2d:cc:e6:f6:b6:0a:cb:39:f5:57:
4c:09:0c:41:50:40:a2:81:6d:e8:94:0f:35:21:80:8b:0e:2d:
86:cb:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org