Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6af6b49d-4f76-3218-a6c5-48c2d2acfa2a.roa
File: 6af6b49d-4f76-3218-a6c5-48c2d2acfa2a.roa (raw, json)
Hash identifier: YX4KBDMrBN5WDHf4Ndy2eVv9zOnmVsvyphjdKqiOg8g=
Subject key identifier: 00:B5:A7:C4:0D:0C:D4:57:11:4F:A3:A3:3E:57:54:EC:CF:39:7A:46
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314BA40C3B12D2348B38580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6af6b49d-4f76-3218-a6c5-48c2d2acfa2a.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 7122
IP address blocks: 198.163.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:ba:40:c3:b1:2d:23:48:b3:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=c81897de-8bcf-4677-8e26-07b8145b6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:30:5a:3f:0d:31:43:75:63:da:17:ec:8a:
2c:c9:07:ea:80:62:48:ee:8c:54:eb:87:fb:16:43:
14:ec:69:c5:6d:9f:46:fc:9d:32:77:35:9e:a5:4f:
46:4e:e9:fb:83:e4:dd:b7:a7:7d:ff:ce:5d:c7:18:
23:5d:ce:34:cc:84:25:96:f5:63:f2:c6:34:1d:14:
9a:f2:38:e8:e2:08:6e:a8:62:5a:08:78:75:7c:b8:
2f:ab:39:ac:36:cf:f4:7c:d5:12:b6:2b:9d:99:90:
e3:bc:71:94:6a:c5:1a:b6:51:e2:20:95:a1:b4:7e:
47:5b:ff:32:00:3b:66:55:39:02:3f:78:4b:d7:a0:
b0:29:15:57:88:6f:46:4c:d0:af:79:be:35:4f:d5:
8c:c6:6a:bf:b3:ed:17:d1:bb:a8:8c:a7:f3:c2:bf:
98:59:71:4d:fa:55:26:3a:11:88:af:db:15:a3:db:
ed:e9:58:b0:90:01:20:58:2f:ad:49:ec:ec:3e:9a:
b0:bb:4f:10:62:e2:26:41:ac:b8:2d:8f:80:93:23:
e7:31:70:61:52:4e:de:08:11:e0:7b:1b:e6:bf:5c:
78:27:eb:b1:a6:28:d3:22:58:d9:fc:9c:dc:e7:cd:
f9:b5:3e:6c:b1:79:7d:21:75:07:cd:2a:0c:d6:04:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:A7:C4:0D:0C:D4:57:11:4F:A3:A3:3E:57:54:EC:CF:39:7A:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6af6b49d-4f76-3218-a6c5-48c2d2acfa2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:56:99:c7:e3:3c:1e:de:a5:a0:23:f8:2a:cf:5d:d9:de:7f:
1f:43:ec:19:47:8d:06:bd:96:6c:21:7b:21:e5:26:29:8f:73:
90:ae:f4:1d:6e:d0:9d:d6:54:13:b7:21:7a:c5:a4:4d:90:bc:
80:5d:18:60:39:a4:c3:89:af:41:8a:59:7b:0b:c0:f1:0a:51:
f9:0e:90:13:f3:12:fd:3a:15:87:03:de:55:d0:98:ee:8d:a0:
46:3c:b7:09:04:d9:18:7b:5b:20:63:80:13:75:b2:10:09:11:
1a:94:8a:a7:cd:b5:84:28:d4:20:9f:5c:26:0e:55:d7:ec:81:
e0:96:f3:79:d9:a0:77:33:0c:ad:a4:dc:be:5d:74:14:0a:bb:
d5:03:76:09:04:8b:a4:82:99:82:54:11:95:28:0e:42:62:c8:
95:ff:aa:a4:f4:5b:16:6a:9f:2f:28:6e:89:d9:5a:9a:7e:c3:
49:d5:50:cf:3d:84:9f:ea:55:7c:ae:e0:66:08:4d:03:bc:06:
7a:4e:44:0c:90:cb:9e:4f:b6:ec:cf:89:0c:8f:f6:c3:10:e2:
51:a9:e7:86:cb:30:1a:06:20:d5:a0:4c:f0:a7:af:41:c5:03:
a4:a0:b2:64:6f:77:fd:1e:6f:a5:b4:32:dc:89:ae:68:43:1d:
a2:a3:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org