Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f1744f8-e233-369f-ad5f-c0f1fb28df12.roa
File: 6f1744f8-e233-369f-ad5f-c0f1fb28df12.roa (raw, json)
Hash identifier: BPhQGQf+Q+553ZC/OiU5lR7oap5wRnnN9g6nWqJ6sD0=
Subject key identifier: BD:0C:9C:A5:FD:F9:B4:CF:AD:C0:03:5C:52:4B:CA:36:49:32:5E:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316C2D8030B92BF79472A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f1744f8-e233-369f-ad5f-c0f1fb28df12.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:c2:d8:03:0b:92:bf:79:47:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=bd0b7462-90ee-431d-a2e7-911a0df7b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:41:e0:b0:e2:4f:1f:5c:98:a1:2a:a7:ce:
14:6e:ec:47:eb:65:c4:6e:f2:16:69:2b:ae:22:67:
51:c3:91:4a:29:60:19:12:d3:28:94:39:76:9c:ce:
9c:05:60:33:93:32:ee:39:13:48:ff:bf:de:a6:a3:
7f:ce:ba:11:17:90:2b:f6:43:95:d2:d7:06:05:a5:
b5:3e:26:65:19:37:c8:a6:16:82:dc:95:2e:b0:64:
e5:c7:e1:91:ee:27:31:95:3b:b6:9c:3c:fa:24:8b:
56:ab:bb:1f:12:06:7f:f6:d3:71:33:52:70:32:83:
61:b8:28:a5:f3:be:0f:68:3d:c0:05:c0:10:47:d4:
35:90:49:98:43:c7:7c:65:85:b2:ba:9a:a9:dd:59:
3c:5f:5b:1f:ca:b3:9c:f3:f1:05:8b:a6:26:1d:4b:
ec:ab:7c:47:07:12:ba:f3:2a:bb:58:86:21:9a:25:
7f:54:07:3b:6d:94:90:81:c5:99:1e:11:40:f7:1a:
eb:23:cf:08:7e:c4:74:99:c1:50:b9:9e:f7:65:27:
5f:60:e6:98:2e:b1:80:7a:5e:09:81:ca:83:09:3c:
c2:49:6d:41:ad:e5:60:38:dc:12:33:15:4c:15:6e:
ed:11:2c:30:38:8e:40:9d:1e:d2:7d:53:bc:dd:67:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:9C:A5:FD:F9:B4:CF:AD:C0:03:5C:52:4B:CA:36:49:32:5E:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f1744f8-e233-369f-ad5f-c0f1fb28df12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:0c:1c:23:0f:c0:c1:31:dc:0f:f7:00:60:d0:c6:74:54:1b:
5f:11:21:fd:64:11:e4:69:42:1d:fa:64:39:70:24:65:61:f9:
bb:85:64:f5:04:8d:40:fc:8d:68:96:2d:a7:72:8f:90:a6:16:
eb:66:9a:93:ee:0e:a3:62:02:11:42:39:14:4b:12:f3:99:61:
79:5e:fa:40:c1:b4:79:23:71:8a:89:68:ba:5b:24:16:01:71:
99:dc:fb:f2:e0:1c:1e:7c:93:5c:ad:f2:40:71:66:63:7b:6e:
9e:ea:0f:87:a2:cf:9a:ad:b9:51:3e:29:d2:bc:7c:1b:70:8c:
75:78:c5:60:70:61:ee:95:52:55:d0:0f:ab:fe:42:0b:a6:48:
d5:d7:32:64:86:9c:2f:96:3e:c6:6b:0a:bd:81:b7:39:6b:7f:
9e:fa:b6:17:68:83:19:71:7f:7a:22:73:0a:cf:d4:83:85:3b:
41:02:ca:d3:57:24:dc:9e:0c:aa:16:52:b1:70:08:0c:56:cb:
d8:31:ff:a8:37:7d:a9:8e:5d:17:c7:3b:ce:40:99:63:14:c2:
98:a1:c6:ff:b5:56:60:6d:9f:e4:c0:79:4d:57:70:25:e0:47:
ba:bf:a5:9a:42:52:c2:d8:24:46:53:29:29:7b:a6:3c:9b:d8:
e5:0c:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org