Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f2cbd20-0fa6-3e58-83b5-dfbf64c3001f.roa
File: 6f2cbd20-0fa6-3e58-83b5-dfbf64c3001f.roa (raw, json)
Hash identifier: eo6w7a9ZdiZsAzlKkepQ8JRstOACE4yhReRi7Rmtg14=
Subject key identifier: 71:16:AF:BC:74:A9:0E:F3:5F:BA:C5:4F:56:00:34:6B:AC:FD:4E:6F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313B236BE4B24E4B72E3B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f2cbd20-0fa6-3e58-83b5-dfbf64c3001f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 69.158.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:b2:36:be:4b:24:e4:b7:2e:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a4359bde-2a4c-47d3-915f-bf54627499ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:6a:c1:f8:5d:7c:fc:d3:8c:15:77:f9:e6:
b2:8f:ec:cc:41:1e:0f:99:e8:26:54:e7:52:5b:37:
16:6f:81:09:fb:96:61:ec:88:ed:7e:0b:f1:a8:d5:
19:38:52:9c:d8:aa:b7:77:85:76:05:fc:8b:a6:1d:
9d:c3:ea:17:96:f4:e3:6a:c3:5d:b6:af:33:e9:03:
d1:72:1c:71:df:88:61:7a:73:3c:a5:a4:70:51:e0:
59:98:80:1a:34:58:91:7b:83:ce:39:a1:9a:40:c1:
6a:3d:75:93:01:33:b6:67:13:d6:89:ea:77:ec:00:
4b:19:05:25:b6:79:ed:f9:3c:01:00:e5:69:ee:b3:
5c:5c:9e:07:d7:6f:f4:87:e2:bd:a1:03:7c:08:3f:
41:54:d9:88:a8:cf:b0:b4:76:22:c1:8f:4f:28:ac:
55:b9:c9:6e:e0:91:3d:22:59:82:fc:2d:60:df:f9:
f1:2c:87:d4:a8:ab:e1:fa:ae:e2:fe:2b:f3:40:e0:
06:48:9c:56:b3:41:b0:d9:b1:fe:09:57:cd:68:f7:
00:9d:ac:3d:91:a7:f9:b8:2a:49:a3:9c:e3:08:67:
a3:63:59:42:32:fc:bb:17:5f:d0:32:0a:f1:36:af:
16:a1:58:0b:6b:fe:d2:22:05:33:eb:48:a5:6d:df:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:AF:BC:74:A9:0E:F3:5F:BA:C5:4F:56:00:34:6B:AC:FD:4E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f2cbd20-0fa6-3e58-83b5-dfbf64c3001f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
69.158.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:36:7d:d1:69:44:1a:48:0b:c7:51:41:9a:1d:b1:f2:23:17:
bc:0b:46:35:da:73:e8:40:61:13:62:b6:4c:6c:e8:85:9a:c8:
f3:07:36:4b:39:42:d2:f1:70:29:40:0a:7c:97:a5:68:4b:70:
84:c0:cb:bb:e6:0a:96:12:6c:d9:5a:15:85:ba:a6:2c:4f:a3:
09:52:d3:91:d4:8f:58:67:2e:1c:7e:37:5e:85:e1:ed:13:e8:
6f:a9:a1:ec:2f:54:a8:eb:6f:d1:a7:6f:fa:a9:38:39:a5:9b:
ab:42:19:ee:f7:1a:08:94:88:f8:a3:1f:c5:42:b3:5c:f9:49:
9f:94:af:e8:95:77:57:64:63:e4:5f:6f:8d:bf:66:ad:e5:e0:
54:56:e0:06:5e:e1:70:87:ed:37:6d:57:bf:43:db:5b:96:de:
d3:98:0d:a6:1b:43:c2:4e:6b:ba:6c:38:91:a3:07:34:a4:6c:
84:e4:8b:46:31:85:14:cd:5b:9f:f4:25:b2:ec:ac:ac:36:9e:
80:71:8a:af:d1:f3:62:f8:b9:06:57:29:08:9d:9d:17:0a:b9:
b3:33:b1:ea:ed:1c:ba:18:0a:1f:3b:67:29:77:bd:db:ff:56:
5b:1c:4e:44:2a:22:38:3b:55:ee:64:2f:54:bc:ba:62:c6:15:
27:88:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org