Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d050792-20bb-3974-a2ba-1565cfa5f20a.roa
File: 7d050792-20bb-3974-a2ba-1565cfa5f20a.roa (raw, json)
Hash identifier: wK6Nh9JRjjlDTc5J4O1OXiX1jhuDmR6GlshiE4bdYAs=
Subject key identifier: 61:7F:D2:66:A5:6C:71:5E:58:C3:D6:3D:0A:7F:33:1E:14:1B:31:92
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB080F279F337A067CFE100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d050792-20bb-3974-a2ba-1565cfa5f20a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 207.61.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:80:f2:79:f3:37:a0:67:cf:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=c24ed920-6c88-4a9d-adc9-796b4d49db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:60:96:0b:d0:eb:90:3e:eb:85:27:fa:b6:
0c:56:55:e0:98:26:55:00:37:d8:81:09:cc:cc:2f:
0b:7b:31:03:d7:74:e4:d5:f9:90:74:e0:64:8f:ac:
05:9c:68:5e:15:28:5e:d4:f7:d0:d1:9d:14:7a:06:
c9:cb:61:d9:fe:e1:02:9e:55:f9:2a:4b:23:1b:d5:
6b:92:1a:cb:b1:59:08:06:24:06:87:ca:e4:ea:32:
8c:e3:ae:65:cc:ce:c7:0d:60:83:32:6d:97:3e:5d:
7b:02:da:49:e1:af:91:8b:29:1b:40:97:34:dd:91:
d1:9b:ea:ac:2c:05:19:8f:93:69:4a:f6:ff:e4:e8:
f4:42:b2:5a:9f:b9:87:e2:03:9d:b7:21:94:ff:38:
db:60:1c:38:bb:b2:c9:7a:91:2e:ce:83:d0:f9:51:
48:45:0c:0e:02:ce:e7:17:97:45:0a:2f:a1:c8:f3:
f0:d9:25:6b:d2:b8:e3:cb:10:f8:f3:a4:1b:6a:74:
14:5c:31:6f:2a:53:7c:f3:40:57:2d:4f:1e:17:46:
c9:52:db:0a:62:ec:be:40:c2:04:52:ad:97:18:59:
91:f9:1b:c0:d1:db:6f:74:85:23:ff:32:8b:bb:0e:
00:7a:26:2e:86:af:6e:3a:e5:66:34:38:8c:b3:3f:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:D2:66:A5:6C:71:5E:58:C3:D6:3D:0A:7F:33:1E:14:1B:31:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d050792-20bb-3974-a2ba-1565cfa5f20a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:fc:be:c0:d2:1c:ff:21:2c:dc:d8:80:48:44:6e:9e:5e:b2:
5f:6a:93:26:c3:87:32:aa:43:65:c0:08:53:5f:36:53:ce:3a:
77:71:fa:4d:40:c0:2b:1e:af:b8:56:06:6d:69:33:bf:8e:09:
bc:46:3f:04:af:2a:08:a9:56:a0:2a:8b:e8:5d:3d:cc:a8:fe:
83:3a:a0:43:1f:02:51:0d:42:65:88:8a:84:02:38:f8:0f:f4:
ad:67:08:bf:72:78:7b:d6:1b:87:e9:39:15:48:e7:86:90:9b:
c9:7b:4f:f2:bd:81:05:d5:7f:92:82:a6:bb:6a:43:f0:4d:61:
6a:a2:40:c3:a5:82:9a:d3:cf:ff:0b:de:69:68:47:5e:f4:3c:
5a:d2:fa:2b:9f:04:31:fd:63:49:48:ab:f3:f7:79:2f:05:fa:
b1:31:d8:2d:51:10:36:f4:c0:98:51:40:75:8c:04:84:bc:3f:
9c:9e:ce:94:8b:fc:82:1e:07:8d:3a:95:d1:a0:3b:61:1a:c5:
af:1a:06:64:d7:34:ba:67:08:2a:c1:c2:03:00:50:1e:9a:9d:
66:ee:1a:3f:9a:ca:a0:03:0f:a0:38:46:20:6a:cc:85:e1:66:
32:3e:d1:5e:93:76:54:54:79:3c:53:eb:a2:1e:dc:67:0b:01:
db:90:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org