Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/764a802b-a572-39f2-a3e3-7caf50ca34ca.roa
File: 764a802b-a572-39f2-a3e3-7caf50ca34ca.roa (raw, json)
Hash identifier: iBHmDpvuXaPSjJrcvZnq+bHJLKHwXVGEYHkT9Yy98yM=
Subject key identifier: AD:53:03:3E:1C:EC:55:25:D1:D7:30:45:87:1C:71:0B:27:45:95:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314D0624428ECB3BF0AD280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/764a802b-a572-39f2-a3e3-7caf50ca34ca.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 395273
IP address blocks: 199.243.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:d0:62:44:28:ec:b3:bf:0a:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7f5054c5-d8e8-4b00-9d52-e92e9748c3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:71:74:03:d1:94:f9:c5:a2:f8:65:9d:19:
84:68:21:4b:ba:9b:16:9d:cd:c4:01:e8:ea:a7:1c:
24:58:ef:d5:a5:1e:9d:de:8f:47:28:96:b6:6f:fa:
9e:b1:9a:a0:28:14:e8:7a:7c:37:ba:60:7d:9f:cd:
f1:36:b9:31:07:1b:e4:ad:bf:c2:ea:bc:36:c3:63:
58:f7:27:65:d2:66:e3:97:b0:01:52:c5:26:1a:bc:
e6:ef:c0:66:01:a5:5c:83:2d:cc:a3:32:78:63:0c:
53:27:ad:c2:ee:e4:e0:49:7b:40:a1:1d:f1:48:8d:
5b:87:af:ac:e6:6a:d3:ed:e8:b5:51:9e:9a:29:6b:
aa:5e:78:4f:3b:b7:b7:13:6d:7a:38:09:2d:97:a0:
c0:ac:c0:54:1d:be:da:9a:f1:be:f0:34:ba:25:e7:
91:ef:4a:35:0d:18:ae:ab:d3:f9:0f:90:20:8d:16:
17:d3:cc:1b:3c:9b:72:d7:44:e1:d2:51:59:27:e0:
b4:8b:e0:5d:80:4b:41:b0:5f:d4:c8:03:da:7f:b1:
14:d4:db:75:11:94:b9:ac:da:b5:c2:40:00:92:63:
84:ad:85:71:61:3e:24:31:7c:03:c7:d1:80:9d:08:
7a:f9:54:5e:06:0b:46:32:b6:c7:73:68:8f:db:cd:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:03:3E:1C:EC:55:25:D1:D7:30:45:87:1C:71:0B:27:45:95:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/764a802b-a572-39f2-a3e3-7caf50ca34ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:41:3c:b5:35:20:eb:6e:db:3e:f4:b7:70:7f:7f:07:f1:61:
ed:4d:59:ae:51:ca:44:1c:4f:2a:6e:aa:32:50:4f:d2:e2:df:
f8:be:85:28:5f:d3:ea:13:b7:64:ce:0f:46:fc:9f:6a:ba:cc:
44:43:4d:9d:ec:4d:df:bb:7b:f6:17:c5:6e:f3:7b:be:93:1b:
9f:5e:de:d8:f5:22:9f:1e:61:e7:0b:b7:3e:5e:f0:8d:fc:e6:
b1:c5:76:6a:6c:84:e7:50:81:13:08:b1:38:78:19:b2:3c:14:
6a:61:7e:7f:ab:9a:7e:ab:3c:9f:57:5f:f8:49:be:04:f9:e9:
9c:4e:ec:70:55:1a:56:83:ab:84:66:d2:a4:35:af:10:1e:2f:
84:a8:56:87:52:6d:11:d0:7f:57:ef:46:dc:75:d7:00:db:cd:
47:49:89:66:b7:f6:15:2c:7d:98:18:e1:e1:a5:f7:16:ee:f9:
91:51:b1:37:6b:20:76:1b:49:d4:63:c8:10:fd:33:84:5d:dd:
e9:8b:c4:0a:70:70:28:93:a3:f8:73:73:29:52:b8:76:bb:5d:
13:e5:32:97:f7:f4:3f:3a:ae:6f:10:75:85:7b:22:79:28:ed:
7a:e1:3c:f8:0c:f9:67:20:a8:e0:38:51:e5:e2:e7:4e:ee:28:
e2:66:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org