Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75f33d2d-aedd-39c5-a042-eb7aa3ad1799.roa
File: 75f33d2d-aedd-39c5-a042-eb7aa3ad1799.roa (raw, json)
Hash identifier: 2BFwUihraDPh113MUzYBIi3dXV158EZbDwjodj+sSr4=
Subject key identifier: 29:6B:AF:F9:3C:A5:64:5F:7D:04:BF:05:01:5E:27:27:BE:90:B1:29
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75DE6DA84F644105C1E500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75f33d2d-aedd-39c5-a042-eb7aa3ad1799.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 11831
IP address blocks: 209.139.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:de:6d:a8:4f:64:41:05:c1:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=ef5eb1ca-97ad-4f68-b973-1d52da33ac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:9c:26:35:a8:5e:ae:85:d8:d0:02:5b:56:
f4:da:d2:b3:07:e2:94:10:8b:78:11:18:82:e3:d5:
70:2f:28:bd:95:1e:a9:c4:aa:9c:38:65:24:88:28:
cf:8f:27:c8:38:42:86:50:f1:0b:d7:e5:3a:e5:62:
2c:87:a0:34:83:36:2b:d8:ca:6f:ed:1f:f6:3d:e3:
dc:10:34:e7:39:93:88:44:39:1a:87:ed:fe:ce:41:
da:9d:60:f1:65:95:33:b2:08:22:a7:bb:1b:ba:53:
d8:a0:d4:25:bf:a1:c8:6f:d4:48:18:53:48:88:37:
7d:6e:6c:6c:12:da:ba:1d:bf:b4:a2:1c:eb:ff:30:
ca:d2:2c:57:63:cb:29:3d:f4:c7:16:a0:24:a1:c7:
01:39:5f:cf:a7:b0:88:0f:46:20:66:ba:e0:15:7c:
bd:a2:70:96:05:e3:3c:bf:7f:39:34:56:54:31:dc:
e4:10:d2:05:0f:6c:95:8b:44:ee:f8:69:b6:34:e5:
5f:cd:66:7c:d3:e5:0e:5f:a6:49:63:ab:d1:ba:be:
c8:19:ac:3e:ff:92:24:84:96:27:83:55:30:90:7d:
3b:ce:4d:ba:f8:cf:bc:61:54:9e:18:e2:ba:12:25:
9b:1e:14:3d:fe:29:ff:fa:d2:de:eb:50:93:60:87:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:AF:F9:3C:A5:64:5F:7D:04:BF:05:01:5E:27:27:BE:90:B1:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75f33d2d-aedd-39c5-a042-eb7aa3ad1799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:76:4f:60:59:ad:61:0f:96:fd:44:84:c5:12:5e:04:27:f5:
31:8f:6d:18:ca:e4:28:42:28:df:38:f3:d8:35:01:78:69:63:
f7:39:0a:19:66:28:1f:22:f5:61:4f:d1:fc:27:7c:9b:8e:66:
b4:4e:75:4d:ac:92:0f:3e:7a:9d:34:c1:94:d7:11:9c:b9:93:
35:b4:c3:2e:7d:1c:50:23:45:dd:38:1c:02:d8:dc:d7:b7:22:
d0:e6:82:07:41:22:27:e8:fc:d5:6b:66:70:67:00:64:12:e2:
94:96:11:f9:67:6e:14:2c:9c:fc:ad:59:ca:11:da:21:e5:8e:
54:30:14:34:15:7a:7d:1c:c3:76:f5:dc:e2:89:47:48:b2:b7:
6b:d4:95:b4:e9:66:9c:9d:22:bb:9a:03:0f:45:d5:05:b5:49:
88:59:39:cb:6d:2b:4c:56:09:7e:68:0a:a5:c3:de:50:e9:a3:
42:a6:c5:41:55:37:9b:14:bf:56:43:7d:c8:7c:88:39:a0:f5:
1d:14:41:ce:66:f2:eb:48:8b:be:6d:7b:d7:c1:da:9c:10:5e:
cb:e8:8d:40:bb:11:32:4c:3b:86:67:36:81:5a:c4:6d:47:a2:
22:34:7c:c9:fe:f5:30:11:12:53:28:16:5f:28:26:b7:55:5f:
cf:ef:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org