Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72693584-56e5-3eec-b4ae-2f73e2bd73a1.roa
File: 72693584-56e5-3eec-b4ae-2f73e2bd73a1.roa (raw, json)
Hash identifier: Tt6rZeCnWJtDJFy07Amh/ldouJdQiI6XycrK22zD6cs=
Subject key identifier: C1:AA:98:9C:05:51:4F:B0:5C:4A:83:A2:B6:CD:57:B8:E9:A1:F7:35
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316A78A20279AF6484C6B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72693584-56e5-3eec-b4ae-2f73e2bd73a1.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 396306
IP address blocks: 216.208.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:a7:8a:20:27:9a:f6:48:4c:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=db6d5881-587a-4e74-906b-e2cf324cb168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:49:4b:cd:e6:00:fc:38:db:cf:17:eb:a9:
99:b9:2d:ef:0d:ab:b2:ad:23:65:37:2f:5f:d5:e5:
7c:aa:26:38:1a:5b:a0:98:f0:8e:82:f0:ff:87:d8:
6d:46:bd:ed:18:5f:7e:4e:ab:61:9d:4f:cc:60:80:
ac:c5:c4:50:46:e6:18:c5:cd:37:c2:85:98:15:2e:
83:33:2b:ff:cd:f9:2b:13:de:5e:db:48:45:eb:02:
e5:58:1f:01:73:24:b5:04:7b:8d:eb:b2:d2:70:8f:
50:69:b2:c7:57:30:1c:cb:6a:a7:86:cc:82:8d:8b:
2a:77:93:04:07:4f:b9:f8:08:db:f5:71:6c:c2:27:
c7:cc:4c:71:b7:48:5f:50:73:00:62:6e:8f:66:44:
8e:e3:ab:16:5c:91:84:c3:4f:49:c1:43:4a:e1:e2:
d8:72:63:21:66:08:3d:9e:94:14:b3:92:8f:9f:05:
73:b8:08:96:a0:da:2b:ef:88:51:90:57:85:1f:71:
81:23:b2:0b:c3:20:51:24:5e:c9:b0:ca:05:9b:9b:
fb:76:57:51:7c:93:1d:56:5f:0e:d3:8d:37:c1:11:
73:3a:d2:ac:37:f1:95:0c:24:a8:6c:80:83:9c:90:
de:98:67:89:f8:0a:bf:9b:be:1f:47:30:25:75:f2:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:98:9C:05:51:4F:B0:5C:4A:83:A2:B6:CD:57:B8:E9:A1:F7:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72693584-56e5-3eec-b4ae-2f73e2bd73a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:2c:34:53:18:51:d7:89:27:f6:60:c5:ae:34:93:f5:b4:49:
27:f0:c4:00:76:bb:e2:dc:7c:18:d8:34:0c:80:2c:af:af:0b:
f4:68:3c:75:e8:27:9c:dc:73:51:e0:22:60:ef:01:f6:1d:fd:
3c:60:8b:5c:c5:c5:ea:3c:31:f3:da:e5:ce:a6:bf:7d:85:76:
7a:e6:b6:7a:a3:9e:97:91:d3:e9:9a:84:39:28:64:f7:8c:71:
1f:fa:d7:53:f4:fd:ed:f8:8e:6d:b3:32:83:87:48:d4:34:d3:
09:80:59:c3:9f:b2:4b:d3:b1:8d:39:ce:14:38:4f:96:0a:21:
f3:88:32:60:ad:94:05:fd:85:a5:e7:dd:e3:71:71:8f:8c:4a:
bb:1f:b4:73:e3:5a:1b:74:8e:a8:0e:a3:56:9c:9e:6e:d0:e7:
31:3e:1a:86:c9:0b:cc:3a:09:0f:d9:99:40:46:2a:1e:0f:c9:
c3:2b:f9:ac:ce:dd:9c:62:d9:02:fa:ad:da:1e:c6:53:b9:ee:
34:1e:06:3e:8d:a8:2e:3a:ea:35:50:a2:96:bf:99:de:f6:12:
23:6d:78:b5:a5:f7:be:7f:1c:c6:ee:d0:89:c6:f9:1b:23:48:
30:39:09:de:16:5a:9d:a6:65:61:f1:0c:4d:ff:bd:1c:06:56:
21:0b:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org