Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7681dd2e-1105-35ff-9c96-215d7d6beed7.roa
File: 7681dd2e-1105-35ff-9c96-215d7d6beed7.roa (raw, json)
Hash identifier: 02mC+DJ/YgHhxdpQSnXXpbPjwesnSxWP+1K+yZn5sNc=
Subject key identifier: E8:21:63:8F:67:ED:8D:94:EE:79:E4:39:AA:D7:A5:E3:4B:9F:EF:4B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE59CC84980234D74FC2810
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7681dd2e-1105-35ff-9c96-215d7d6beed7.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 11831
IP address blocks: 209.17.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:9c:c8:49:80:23:4d:74:fc:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=541472e9-728b-4eb6-a059-d8ee868aba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:25:16:74:d6:19:f7:a2:c6:98:eb:12:c8:
40:f4:9f:93:95:69:b7:5b:48:e7:94:01:4a:ae:c5:
2e:b8:39:22:67:26:40:ad:7c:02:6b:43:94:2e:55:
11:69:2e:4a:6e:ea:41:b0:03:8b:c1:48:33:ab:80:
25:78:0e:50:05:b8:2a:75:05:52:5d:c0:a3:3a:19:
4f:09:6e:9d:be:de:60:c4:32:b4:5c:66:90:a8:0c:
5b:f2:9f:4f:cd:20:2d:6e:88:1f:49:3f:db:64:c6:
4d:57:64:ea:17:09:5b:b9:88:13:58:ac:43:7e:a4:
50:60:ce:80:90:b1:39:96:c6:ba:f9:26:99:1c:53:
03:08:d9:a1:f3:aa:d9:01:0d:6b:d2:ec:0d:ae:b1:
98:60:fc:a4:a6:b5:fa:1b:0d:97:c0:16:19:8c:f4:
5a:7e:0d:9b:d4:82:06:63:81:f6:2d:e6:ba:2a:05:
ad:e2:75:f3:54:0e:8a:10:2d:6b:b9:3d:54:ef:59:
2a:55:8a:4d:b8:49:af:d8:ca:2e:48:18:36:87:62:
6f:46:54:49:f7:0f:5c:d6:21:37:28:ae:07:2a:9b:
ed:3f:ee:45:6d:ce:cd:24:68:de:a8:54:a5:7f:44:
42:63:4d:84:c2:63:55:56:16:69:26:d2:64:44:1c:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:63:8F:67:ED:8D:94:EE:79:E4:39:AA:D7:A5:E3:4B:9F:EF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7681dd2e-1105-35ff-9c96-215d7d6beed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4c:c2:b5:f3:6f:56:c7:1c:a2:3b:fe:b1:03:3e:d9:fe:28:
ea:b3:92:07:87:44:26:3a:27:00:f9:97:a6:73:6e:2d:6c:66:
7a:45:09:e5:c8:e4:f1:eb:79:39:36:e6:c5:93:ec:86:71:05:
c1:aa:48:72:6b:9d:26:27:2b:af:87:46:53:56:f6:fb:63:05:
f3:14:82:79:3d:68:b8:3c:53:a5:f3:73:c2:d9:79:da:68:4c:
49:5b:d4:27:30:d1:43:da:13:49:ec:c3:1d:1a:a5:6e:88:6a:
9c:55:06:2a:82:a0:1f:6f:0b:37:c3:08:e5:22:a8:49:12:85:
38:87:12:ef:2d:1e:21:60:be:65:34:ee:f8:9c:49:0c:3c:22:
ed:b8:5c:56:72:9d:31:48:e8:25:d0:00:d3:b2:dd:6d:10:bd:
1c:c8:b2:82:38:51:73:d1:96:e5:b5:54:3f:31:d4:11:ae:ba:
8c:d6:9e:70:a8:5b:e5:cc:89:22:a9:e5:ce:4b:8f:f5:25:75:
e4:0e:19:ce:31:29:16:25:2a:82:17:95:51:e7:af:ef:e6:da:
87:ed:01:b8:63:d7:bf:da:13:0c:e6:9a:65:0f:ec:e2:cb:93:
1a:b8:4e:5f:5b:f7:b8:ec:6d:2e:cd:e0:32:f7:ea:1e:6b:85:
6a:11:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org