Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78601fdc-b49a-30cc-bbf2-d8ac674b89d4.roa
File: 78601fdc-b49a-30cc-bbf2-d8ac674b89d4.roa (raw, json)
Hash identifier: 5xGNLtySVBEk3JuH8P31uswnYOM4FiEOSSNk7LtWUhk=
Subject key identifier: 30:BF:90:FB:3F:D9:EE:77:79:31:72:5B:55:03:E9:25:7D:96:3E:8B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493159B9DDD905286498BA8C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78601fdc-b49a-30cc-bbf2-d8ac674b89d4.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 4540
IP address blocks: 207.35.82.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:9b:9d:dd:90:52:86:49:8b:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7f758eb1-5837-4441-b09f-819836ef7263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:95:32:0e:d2:93:8a:c4:70:60:03:1b:57:
b6:29:ae:e4:a8:d5:b3:82:64:5f:c6:29:24:7a:31:
44:35:e1:1d:3f:7e:e2:b7:be:33:54:7b:42:98:3a:
a0:b5:46:65:fa:d5:71:49:28:4d:f5:79:8f:c1:80:
67:1b:8f:f6:51:64:22:32:7a:85:da:cb:62:58:64:
03:d2:f9:ed:72:10:d8:b2:4f:d4:94:fd:43:d9:b2:
63:a6:07:e2:ca:e5:d6:ef:a2:86:8b:f3:5c:d0:62:
d4:80:72:40:f0:40:28:ee:2d:2e:ad:6b:33:05:d0:
63:6c:5d:07:83:02:b4:6b:d6:56:f2:72:2c:f1:9c:
46:a5:9c:84:a5:b0:e8:2f:e5:f3:16:7f:a4:24:36:
46:ed:9e:81:49:c6:77:03:20:7a:f7:13:df:63:2b:
63:e1:d7:af:f1:8e:04:4c:29:6f:6e:c2:d3:17:3f:
4e:5b:32:5c:b6:ce:37:17:5c:50:fd:cb:b4:75:38:
20:e6:11:3f:66:c7:59:dd:64:fe:78:60:f4:10:ab:
42:1d:12:9d:42:bf:42:0a:94:e3:fe:06:12:fc:0a:
10:c3:6e:bd:25:23:52:cd:a5:4a:14:6b:0e:bf:6f:
0f:b4:36:19:fd:82:94:6c:90:79:0e:08:f4:cf:1b:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:90:FB:3F:D9:EE:77:79:31:72:5B:55:03:E9:25:7D:96:3E:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78601fdc-b49a-30cc-bbf2-d8ac674b89d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:5a:81:95:83:cd:4c:1a:33:91:c0:7c:da:5d:49:d0:1e:dc:
e7:f7:ea:60:c4:0b:6f:79:d5:78:64:e6:82:2a:e2:2a:c0:9a:
d5:8e:33:8d:03:6d:77:dc:3c:de:b8:cf:cd:3e:e5:66:0c:25:
74:21:86:74:df:82:1b:01:ec:43:ee:f7:8b:89:e3:4b:20:fc:
f1:36:f5:0a:f2:09:50:f8:bf:46:02:93:c6:d8:8e:11:ed:14:
f6:61:b1:dd:98:b6:26:c6:6c:76:b3:00:9f:93:af:40:95:7f:
44:36:26:e8:cd:e2:be:dc:67:85:fc:c8:ff:cc:0e:47:bb:e6:
cf:64:ba:bd:ad:a3:87:b2:7a:64:9c:38:14:b7:75:b6:9d:0b:
a7:a8:44:0e:45:3b:96:5e:30:36:7a:a4:69:b9:97:7b:4c:4e:
ec:47:3f:22:e8:4b:5b:fd:15:e6:25:05:c5:22:3f:a6:36:03:
1c:bf:2d:63:8e:8a:94:29:89:e0:ea:a2:17:8a:dd:77:40:fd:
ee:b8:c4:57:b1:4d:80:70:19:c0:be:d1:29:87:0b:e2:e0:e1:
e6:af:0f:67:c1:54:3d:80:4a:47:49:c4:bd:7d:07:eb:fe:71:
29:61:44:5d:83:a8:58:14:de:eb:78:ce:6a:58:2a:c8:7b:cd:
6d:c1:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org