Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/750dcbce-ec78-3038-9dd3-c32c4b7f3341.roa
File: 750dcbce-ec78-3038-9dd3-c32c4b7f3341.roa (raw, json)
Hash identifier: avhEaT1o2joWElnGp7CIOt1pezuVY/3SYEZk3cbNV5U=
Subject key identifier: E0:DC:69:3A:61:18:A0:1F:77:80:17:F1:C0:DB:BA:B8:48:51:0A:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931360EDA6E6DF043991A700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/750dcbce-ec78-3038-9dd3-c32c4b7f3341.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 47.54.2.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:60:ed:a6:e6:df:04:39:91:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=793d210f-9a1b-4d1c-8b30-b41931b190b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:c6:2f:4d:57:7d:25:54:1b:50:66:e0:3b:
1c:4b:96:bd:e6:f9:4f:60:c0:0d:8e:8a:d5:2d:c4:
3d:7d:56:9e:ef:84:71:60:dd:78:59:c5:92:b5:57:
49:89:b9:4c:89:92:3f:a1:98:9c:bb:4f:99:b4:59:
14:16:fc:f6:68:01:ca:d5:0f:82:8e:35:58:5e:d1:
70:fd:e0:5a:9e:9e:83:14:06:2a:57:ff:d8:06:71:
8a:9a:a1:2e:72:8f:b1:8e:8a:2d:d2:0f:5d:dd:ab:
48:19:c4:a7:42:b3:60:94:47:cb:11:29:2b:ce:b4:
26:d8:2d:7f:09:82:26:91:1d:fb:47:7a:ee:11:00:
09:00:e9:29:13:72:1e:d1:4a:6c:d0:cc:b1:de:d7:
0c:4f:64:1f:da:89:ca:c9:e4:13:b6:9b:b8:45:d0:
0e:78:f8:7f:db:c1:ed:e8:23:1f:47:fa:d2:61:4f:
29:f3:6b:f5:52:fb:c1:d5:0d:4a:ae:14:9e:21:b7:
d9:43:9a:33:3b:08:76:79:57:bf:bc:2d:d9:5a:b8:
ff:cf:b8:59:28:c3:bf:6f:2e:3c:4c:23:db:9b:80:
53:e3:f8:cd:32:50:1b:f9:d0:21:6b:63:15:3c:fb:
08:83:11:59:34:de:5e:a9:11:88:00:89:46:20:33:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:69:3A:61:18:A0:1F:77:80:17:F1:C0:DB:BA:B8:48:51:0A:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/750dcbce-ec78-3038-9dd3-c32c4b7f3341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
47.54.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:91:07:97:a5:fb:17:1d:d5:4c:41:8b:3f:02:52:1f:bd:9a:
3c:4c:d0:cd:45:86:ee:d4:97:2e:1e:d4:9c:04:09:b4:66:9f:
19:ea:20:8b:85:c4:77:e3:33:3b:ac:60:30:ce:83:52:94:6f:
42:fb:d6:66:f2:94:7a:09:44:65:6e:2c:69:a7:b4:8f:1a:b4:
db:24:c6:4d:35:be:f0:53:34:0c:f5:01:50:76:b8:15:06:ee:
e7:2a:c6:81:b7:89:a9:b3:1e:7b:68:7d:7f:05:c8:52:50:84:
33:8c:25:8a:16:aa:82:bf:4a:ef:1b:e4:d0:b0:da:2a:6c:d0:
90:75:d8:d9:81:14:6e:d6:16:e7:cb:4c:30:8c:a8:44:9e:86:
f3:be:22:59:93:d9:8d:68:e7:41:82:d6:6a:35:c8:c9:83:56:
2c:77:ee:e3:34:6c:bb:65:63:4f:0e:68:07:57:ee:1c:47:a7:
75:c1:83:e7:a5:9f:ed:41:9c:c6:5f:06:93:b9:96:ca:d4:3b:
e7:58:d8:ea:d2:60:f9:a9:d7:ee:c1:54:15:1c:ff:90:54:88:
cf:a3:52:6e:42:ca:d2:d6:0f:b4:6a:2f:49:0f:a2:c4:44:9c:
24:06:04:f6:40:b5:19:aa:07:fb:e5:57:81:34:8c:21:dc:cc:
b0:1e:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org