Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72540592-a430-3514-bf19-c7578930bd0c.roa
File: 72540592-a430-3514-bf19-c7578930bd0c.roa (raw, json)
Hash identifier: 0nqQZ4Yl9StlYPpTW5WT6fkmnRolH2l+IbPkQ45wz6k=
Subject key identifier: 57:EE:41:C3:32:C5:CF:EA:90:AA:EC:76:43:61:77:71:BA:C6:F3:DE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931388D0AD49F6C36DBF8B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72540592-a430-3514-bf19-c7578930bd0c.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 66.201.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:88:d0:ad:49:f6:c3:6d:bf:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=ea730776-a7f9-4d08-afcd-6064e8894170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:79:af:1e:9f:ec:72:42:db:66:ba:f5:b0:
88:1e:57:86:bf:a3:53:c1:df:35:92:9b:56:f3:d8:
6d:e8:97:03:bc:8f:d9:8f:f3:2d:1d:20:31:ec:cb:
eb:a6:41:12:c6:11:fe:c8:7b:66:d1:65:d3:da:d9:
7f:af:92:9a:7a:09:54:9e:98:52:a5:5c:c4:11:1b:
13:59:cc:35:1b:47:7a:23:0e:0d:25:ed:f3:f7:4b:
13:63:b6:da:35:3a:15:3c:e1:a0:c3:39:3a:6b:a8:
d3:a6:fe:10:44:24:51:32:d2:77:20:a0:d0:4e:76:
29:eb:57:dc:c3:6a:fd:d5:93:9b:9a:31:67:ba:e7:
e7:5f:28:5e:6a:e2:f9:16:8e:d4:02:f7:f8:fc:3b:
83:32:73:28:50:18:4a:bf:fd:07:63:11:00:86:7c:
a2:f9:ff:f6:bc:28:6c:03:c5:1e:ea:59:53:df:62:
bc:24:3b:a7:67:5b:8a:d3:7e:a2:6c:08:56:3a:28:
28:d8:57:f3:0f:98:77:0c:e7:45:fc:c0:c3:12:79:
81:1b:d2:bb:5a:ce:ea:48:08:90:32:93:3d:9a:0d:
19:72:f6:e3:2b:92:31:f6:f3:8a:9e:68:66:dc:27:
a6:8b:0d:2f:45:9c:fc:4b:1c:6b:a8:6a:21:75:bf:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:41:C3:32:C5:CF:EA:90:AA:EC:76:43:61:77:71:BA:C6:F3:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72540592-a430-3514-bf19-c7578930bd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
66.201.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2c:05:ed:3e:5a:7e:71:30:2e:5e:44:b1:b5:da:ad:30:b0:
ae:e9:1d:b9:1e:28:28:c5:f4:0a:27:a1:7d:26:8d:79:10:ff:
06:56:57:28:7a:c6:a9:b9:ca:9e:64:2c:5b:6e:04:f2:11:15:
d8:c6:e7:01:05:c9:cb:4b:3b:43:0e:aa:c1:d7:48:cf:0f:d8:
3b:5e:5f:fb:b9:6e:08:9c:96:80:12:4d:7b:50:47:c9:3b:69:
ff:47:76:75:98:1c:de:54:57:09:43:ef:f4:57:36:44:4e:a5:
c6:ff:54:0f:33:cd:a8:b0:fc:f8:36:53:2e:75:25:cc:33:b2:
4f:89:5e:71:63:a1:4e:97:a0:b9:0d:be:67:7d:09:ee:6e:3e:
d5:5a:e5:09:59:ac:61:31:ba:59:f3:b3:72:49:34:d9:ab:20:
70:8d:cd:68:1a:7c:64:f6:43:cc:bb:e0:2f:51:9d:07:64:99:
38:47:b6:7d:67:66:bd:ba:76:88:16:bb:2d:f5:b6:52:ff:34:
5f:19:8f:0f:7d:cc:54:f6:4c:6d:2e:f1:47:a5:09:3e:44:bb:
a6:4e:f7:42:86:5c:ca:c3:f0:9f:77:af:64:a5:11:79:76:d9:
7a:9b:9d:dd:d6:20:39:1d:f5:e6:5e:6b:eb:dd:7c:24:2d:e1:
17:9b:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org