Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c5bcfc7-2f83-3fae-9587-be1fbe7cd7ec.roa
File: 7c5bcfc7-2f83-3fae-9587-be1fbe7cd7ec.roa (raw, json)
Hash identifier: Mw5KlwnOSoZdPqQLrhmZD0LUWkW9V1cMFu2EQo9AEvs=
Subject key identifier: AD:39:2B:4A:8C:5B:B1:B4:07:C0:C6:C2:88:F2:9A:17:C1:8A:E7:07
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0BBE4F52FA430F248AB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c5bcfc7-2f83-3fae-9587-be1fbe7cd7ec.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 395387
IP address blocks: 207.164.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:bb:e4:f5:2f:a4:30:f2:48:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=f1e35700-87ee-49f4-a04e-66d29c5fd633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:07:f3:0a:fa:c9:ef:ba:b9:58:1a:6c:2b:
0c:e5:07:1b:1a:f2:d8:fa:5a:fe:b2:1b:c2:3f:92:
d4:85:8c:a1:cc:dc:f9:02:77:d9:fe:f2:e1:4b:bd:
13:d9:ab:ea:42:18:b7:6b:91:dd:e6:57:3f:32:f0:
ff:f6:32:64:67:5a:7e:67:06:c2:3c:79:1a:d0:43:
9a:28:50:a5:f1:aa:ca:16:ce:df:5c:8f:b4:f7:be:
88:c7:0b:0a:c4:2f:6d:80:71:67:7f:32:c4:f2:fa:
a1:7d:37:43:b7:88:49:e8:28:53:35:9a:d8:a5:59:
e5:bc:a8:ac:ae:66:4e:9b:c1:ee:2e:90:25:e8:de:
98:49:6f:c2:0e:bd:b5:84:2c:21:d5:ee:12:5d:3e:
8c:fb:42:49:1e:61:ed:4f:b4:98:7e:0f:04:1a:2b:
bd:f7:c2:01:c1:9f:7d:90:3e:5f:09:5f:ec:1b:6a:
4f:60:ae:d5:6d:cc:47:ec:12:4b:fa:41:8e:5a:e2:
a0:92:f3:91:a6:93:c2:77:79:3f:35:66:0c:70:8f:
67:9d:28:71:99:7b:5f:2f:13:9c:c2:60:87:ea:50:
77:c3:c1:fc:31:87:9a:bd:50:52:aa:ff:7a:85:55:
3a:b9:be:56:d7:fd:a7:4a:c7:26:a9:b9:1c:5e:db:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:39:2B:4A:8C:5B:B1:B4:07:C0:C6:C2:88:F2:9A:17:C1:8A:E7:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c5bcfc7-2f83-3fae-9587-be1fbe7cd7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:2b:e2:8c:a3:72:1b:f3:36:c9:88:ae:5e:47:ba:42:0c:b3:
b4:0e:2d:9f:30:eb:5e:9e:54:cf:88:63:a9:40:c2:b9:9d:0f:
0e:3e:71:de:6c:29:c6:f7:0a:d0:56:6e:a5:02:1e:99:ab:59:
73:e6:9d:37:e9:10:4c:44:11:ee:f8:86:f3:f5:81:ff:64:e1:
ec:a5:90:3f:b4:94:ab:c9:ef:07:82:ca:40:6d:49:ac:90:9e:
b3:92:88:8e:f8:af:83:5e:fa:15:c2:79:2a:0c:89:1f:a8:fb:
23:70:c2:db:1f:6e:32:b9:7b:34:46:3f:94:1a:33:33:c8:49:
2e:1b:b6:20:51:3f:84:b8:6b:db:7d:e8:87:f9:1a:bc:2c:7d:
ae:5a:18:2c:bd:11:12:df:c8:25:d9:11:82:2e:0f:5b:d7:78:
cc:c4:33:d7:f5:79:14:16:cb:8c:d1:c1:7d:70:54:f3:91:15:
ce:8f:06:28:46:f6:da:b5:c3:9a:c7:c7:0d:bf:fd:e3:db:b5:
85:03:64:04:63:c3:a4:60:00:83:6b:27:b6:a8:1d:88:ac:5b:
f9:d4:d8:b6:28:2b:98:a9:fd:00:e7:9a:47:0e:91:1d:61:ee:
92:c3:44:d0:00:6e:b6:1a:5f:59:5f:cd:b6:3d:af:78:59:d7:
e3:8b:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org