Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7edf2c8e-ed86-3d1e-957a-dbd20e38f8ab.roa
File: 7edf2c8e-ed86-3d1e-957a-dbd20e38f8ab.roa (raw, json)
Hash identifier: uMmJ8FqMi9+rt2ioz6uRnJBeMKeDmdsGM4qyq8DFWmc=
Subject key identifier: 25:7F:ED:6A:E0:16:C7:ED:EA:ED:00:F9:48:CE:97:DB:06:17:A3:C6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0BED4D45AC6B4F7BC5630
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7edf2c8e-ed86-3d1e-957a-dbd20e38f8ab.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:be:d4:d4:5a:c6:b4:f7:bc:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=dfd2f5cf-ebdf-4f63-b780-70ff2cc9beae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:17:b1:8e:94:a7:d4:79:d0:bc:fc:ba:77:
95:27:a6:84:33:9a:87:3a:45:07:49:09:90:98:5a:
fe:64:a8:62:30:70:6e:e7:00:24:81:7d:dd:f3:2c:
5f:42:73:83:20:75:6d:56:2b:a1:23:06:45:e7:d4:
d4:4d:96:04:4b:88:32:92:c3:a5:9d:9c:11:79:3b:
52:99:39:64:2f:fd:ad:9b:32:81:a8:6b:ca:fd:a6:
76:a0:75:4e:37:08:32:26:03:ec:e8:6b:6c:0e:00:
1d:83:55:9e:7c:83:40:dc:d1:d9:2c:30:4f:fe:8b:
60:cb:75:17:d4:e3:62:1d:43:5c:80:b1:52:97:59:
5b:8f:f6:a8:d3:fa:d3:be:5d:b7:fc:47:17:0a:97:
9c:26:36:71:fd:e8:d5:89:08:3a:3b:20:89:92:0a:
1e:e3:85:d7:de:1a:a6:7c:85:bc:e9:8f:fb:43:59:
99:d0:6b:75:93:61:52:92:8a:b7:19:73:53:20:14:
93:d9:50:f9:c2:eb:02:a7:38:85:5c:00:a9:da:00:
92:ce:59:22:2e:01:06:cf:58:81:6f:7f:ab:13:58:
48:e1:9b:75:23:d6:48:3e:c4:cb:2c:c4:61:58:50:
32:05:4a:89:d5:47:11:54:51:73:0d:47:c3:bf:43:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:ED:6A:E0:16:C7:ED:EA:ED:00:F9:48:CE:97:DB:06:17:A3:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7edf2c8e-ed86-3d1e-957a-dbd20e38f8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:22:06:73:c0:ee:ae:b0:17:d7:70:94:7c:2f:61:76:68:e4:
00:40:98:27:d0:d8:5b:18:43:57:21:cd:5d:46:e4:be:0c:0f:
11:1a:46:6c:0d:a0:34:30:98:a3:44:e4:75:49:0b:00:2c:74:
e2:07:a0:30:cd:c2:f9:ec:c0:e9:b9:df:17:50:86:59:c9:06:
7c:9e:ab:b9:01:ff:56:dd:56:31:40:8c:5e:44:b3:38:8d:c3:
39:b1:91:1c:1e:32:b9:41:51:87:cd:d0:6a:cc:bc:02:57:98:
22:b9:97:ff:c7:e1:ac:a2:61:05:54:3f:b6:aa:72:61:d6:be:
42:d8:6f:38:3c:98:4b:61:8d:9e:e6:50:66:cd:2b:84:4b:af:
aa:eb:2a:d6:18:f5:f6:45:4f:2e:ec:28:22:87:2b:12:6a:d5:
0f:d7:20:98:dc:86:ef:9d:72:52:7b:1e:af:d8:e8:24:d9:78:
36:d3:69:6a:a1:8a:5e:69:6b:97:aa:dd:ec:2b:c3:1c:a4:b8:
fe:f5:96:b9:d3:68:d4:61:bf:b9:ba:7d:99:8b:8b:c8:a3:b7:
15:7e:41:1b:81:2c:34:5e:b7:4c:8b:e0:38:61:d0:ac:6f:15:
ad:73:7d:f9:15:87:9d:a7:fb:6e:09:1e:67:be:8f:cc:a3:62:
4b:ee:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org