Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f0e938a-70c7-3191-b54d-8e54e9a6a107.roa
File: 6f0e938a-70c7-3191-b54d-8e54e9a6a107.roa (raw, json)
Hash identifier: ivx1r6UedOSrM6xPwY2MzsGDB5jGxB1RDCS41Pj7sS8=
Subject key identifier: CD:B8:0D:8E:DD:1A:D4:EC:27:39:EA:38:AE:2D:F5:F4:2E:89:59:82
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931565FFE61A198780CA8200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f0e938a-70c7-3191-b54d-8e54e9a6a107.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 395088
IP address blocks: 206.47.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:65:ff:e6:1a:19:87:80:ca:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=03a797da-4ce1-4287-aae8-bdc31a619e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:aa:59:99:b3:d8:a1:d0:d2:1f:d9:a2:d7:
7b:da:4c:ba:41:59:19:be:96:00:c1:c7:da:49:b9:
fa:24:72:9c:b9:05:65:42:84:16:1a:d8:b8:aa:1b:
9b:0d:e3:89:53:bd:33:d3:63:cc:d7:c8:ff:93:57:
e4:66:5f:ad:cc:e8:47:95:8e:08:d9:ad:62:77:d0:
45:03:da:93:ea:d0:e6:7f:a9:62:5a:74:23:4c:2b:
bf:52:1e:40:ab:45:3e:b5:fb:b4:4f:37:50:63:6a:
94:92:d3:5c:af:2d:4b:69:7c:64:1a:03:31:a3:0e:
25:08:19:47:b6:dd:1d:9d:42:fe:04:ee:44:98:82:
32:77:97:05:6d:c8:ab:52:af:51:0c:80:f4:28:95:
c8:20:88:58:dd:b7:3f:20:46:fd:af:c4:37:18:e2:
72:c6:0d:5a:ba:b0:55:f3:41:a4:b2:65:00:8d:5f:
7f:e0:55:44:3f:10:48:78:18:8f:8d:6e:45:76:57:
0c:18:13:36:ae:c9:ae:ea:85:30:f5:ce:33:99:58:
a4:98:cc:d7:95:c9:7c:4b:5a:df:5b:4b:50:96:c5:
b6:15:ef:1a:63:69:1b:83:72:61:94:c6:76:43:6e:
c1:19:ff:c2:ca:6e:ac:77:4b:bc:1d:81:70:38:5f:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:0D:8E:DD:1A:D4:EC:27:39:EA:38:AE:2D:F5:F4:2E:89:59:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f0e938a-70c7-3191-b54d-8e54e9a6a107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:35:ea:ce:c9:5c:4e:07:70:59:67:64:ec:95:80:26:c3:91:
11:28:45:e2:c4:6f:3e:35:bc:42:be:7f:81:cd:4a:2d:f3:18:
4d:a1:e8:17:f9:6b:51:3f:bf:8e:cb:b7:dd:26:13:9b:0f:30:
02:c0:cc:ea:9d:46:46:46:2e:9d:77:1d:54:42:74:a4:20:cc:
a6:68:6c:76:f8:8b:44:4a:fe:8d:9a:d6:29:24:23:4f:5e:4c:
34:a4:2a:a6:11:af:86:cc:17:25:59:25:68:7c:91:64:15:cf:
8f:e4:ae:c3:4e:fe:68:27:50:9b:c9:41:0d:ce:2a:25:6f:3d:
f2:92:63:88:6c:9e:6f:7d:08:5e:c0:2c:c9:9f:21:f7:2d:5d:
6e:44:44:21:ab:d4:dd:35:27:bd:e6:3d:71:b5:a8:cb:a2:ab:
19:38:5a:9a:1a:2d:05:6c:83:6c:4e:fc:5a:6c:33:45:30:a3:
93:12:60:35:b8:8e:8e:ab:1a:dd:00:72:ee:31:a9:2b:e4:42:
61:76:ef:8a:df:cf:65:4e:f8:fa:a5:05:49:dd:1f:a2:28:dc:
1a:00:25:2b:80:2c:6f:8d:8d:5a:44:24:f8:8c:55:c5:18:4d:
ee:4c:a7:4c:29:6b:12:a2:48:1a:91:ce:10:63:a6:10:87:d3:
80:bf:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org