Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75502c42-fb06-3907-8beb-a8ca7a42e065.roa
File: 75502c42-fb06-3907-8beb-a8ca7a42e065.roa (raw, json)
Hash identifier: 8SCYOHaeabqBKgXnYP77v5A/GMmaxAArz5vZ1djmcSc=
Subject key identifier: 7A:7D:1D:DC:EB:FF:F8:B2:2E:FA:F9:55:B0:0C:08:BE:C2:68:69:84
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFBFFF532EB94C89974080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75502c42-fb06-3907-8beb-a8ca7a42e065.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 198.235.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:bf:ff:53:2e:b9:4c:89:97:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=f14508dc-7dc4-40ea-803a-31f5bfe604a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:44:76:46:07:fe:f3:4d:99:c2:c6:41:a7:
67:34:e0:5a:eb:8f:bb:66:58:86:f3:21:e2:39:6b:
00:d4:54:1f:a9:4c:06:ac:37:ca:75:ff:41:28:70:
61:f0:ab:3c:e8:3c:0d:e0:97:2d:67:4f:ae:0b:0f:
b1:cc:6c:4f:f2:2d:47:df:03:57:e5:5f:15:b0:75:
c8:a5:36:73:b0:b1:5d:19:cc:d5:7f:af:bd:70:37:
60:0c:2b:38:da:25:77:12:45:d1:7a:7d:8c:14:12:
d0:79:e2:40:27:07:29:92:fe:0a:47:68:8c:71:36:
ec:25:df:de:4e:78:b9:92:86:37:1e:1c:dd:9d:43:
42:b8:69:42:da:a5:aa:b3:c2:78:6f:5a:00:99:c6:
01:93:8b:ee:a1:8c:bd:0d:9c:75:99:0d:52:12:86:
d0:69:17:68:27:16:a8:5b:d9:af:7c:62:44:9c:97:
ce:2c:cb:5c:94:ed:9e:26:0a:87:6f:c2:21:57:3c:
86:cf:fd:fb:5f:2a:9a:55:71:f6:45:f2:50:d8:2a:
d6:7c:28:2b:d8:23:cd:03:da:9d:61:da:07:dd:d1:
e1:fd:2a:df:af:1a:74:d2:f6:3f:8e:d3:d2:bb:b1:
51:98:c4:ef:7a:cf:a4:63:6c:cd:42:60:8c:15:df:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:1D:DC:EB:FF:F8:B2:2E:FA:F9:55:B0:0C:08:BE:C2:68:69:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75502c42-fb06-3907-8beb-a8ca7a42e065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:48:94:a9:8f:66:2d:fd:2b:ba:42:5f:69:ba:47:ea:fb:d6:
67:4b:ea:2c:8b:4d:3c:a0:19:4f:dd:8f:97:ef:58:0c:d9:1f:
65:cd:19:e8:78:8c:1e:4e:f2:1f:f9:14:db:84:ff:6d:27:d0:
8b:77:a0:45:b5:8e:c4:12:fb:6e:df:1b:1b:6e:86:b2:eb:3b:
92:52:b3:c6:73:8b:41:e9:db:c2:69:ee:c3:53:3c:c9:8d:8d:
ec:e2:c5:65:46:9d:41:de:31:f7:27:29:17:a1:e5:ec:77:6a:
c9:04:53:68:fb:03:0c:28:e1:95:3b:71:b3:7f:cf:7b:12:22:
8c:f8:6f:bb:2e:0b:bd:52:cc:39:85:dd:37:fa:e2:64:9a:f9:
58:8f:07:5f:6f:ae:a2:5b:9c:25:49:60:c6:17:fd:54:9f:7d:
b2:c1:6e:39:69:2e:ae:e9:97:63:39:fe:23:cd:8e:9a:cf:1d:
d3:bf:4a:db:16:84:8d:3f:78:53:e1:68:7e:b9:de:3f:12:31:
14:f6:d1:b7:af:e1:27:dc:22:aa:e6:85:80:98:a4:b9:bd:e1:
6e:23:ac:75:d4:cc:4b:c1:82:35:a9:d0:ab:e7:f3:7b:d1:7e:
ad:a4:28:c8:d6:f5:c3:ec:b7:8b:d7:58:a5:65:18:f3:d8:f7:
ce:ef:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org