Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8331042e-4a84-31c9-a7f4-f473166d9722.roa
File: 8331042e-4a84-31c9-a7f4-f473166d9722.roa (raw, json)
Hash identifier: DE+ZDtM4ue7qN/Qz6z+NHStQWu5ry9T5lEsYMNBtGFY=
Subject key identifier: F7:C8:26:0E:9B:93:78:3C:DA:D9:F0:C1:87:F3:33:43:F9:AB:A2:1C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315FDE667BD2682E89C1A20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8331042e-4a84-31c9-a7f4-f473166d9722.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 29907
IP address blocks: 207.179.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:fd:e6:67:bd:26:82:e8:9c:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=70f3fca9-62cf-4045-b140-fcec50efb5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:73:0f:62:ab:8d:71:ec:d6:b7:cb:e9:88:
46:cb:95:5f:0c:97:9b:d7:3f:63:a9:7f:92:e6:b9:
3b:b2:55:55:f1:52:57:4c:d5:90:85:a0:49:68:72:
4f:aa:9e:78:9b:d1:0c:75:b7:ba:fe:a0:77:cf:12:
2f:15:4a:bb:27:ef:17:b7:fa:92:a2:69:ce:db:a8:
2c:71:3e:7e:b8:b4:f2:ac:e3:3a:5c:8f:46:11:bd:
45:ab:8d:28:25:8b:e7:a7:0e:1c:a3:4f:75:07:ac:
c0:2d:73:ff:dd:ff:63:d5:c0:86:b1:ca:b3:ac:b5:
96:c8:55:47:e1:3f:95:8e:7e:3d:ce:7b:2c:20:3f:
3e:af:d6:41:e3:7b:94:7f:2f:11:8c:e9:74:d7:15:
72:86:47:9c:e1:aa:76:fa:0d:83:8f:f9:ad:ea:33:
07:87:6c:92:72:b2:2a:14:04:18:0e:b2:46:73:c5:
ab:b1:21:27:3a:39:fa:58:e3:8e:62:b2:68:5f:ef:
c2:7a:f2:19:5e:83:4f:b3:ee:08:24:c3:50:29:b3:
6b:bb:0e:02:36:0c:56:13:65:89:bd:81:e8:6c:3b:
73:11:d8:e0:c6:45:0c:c3:c8:c9:50:9d:ea:72:ac:
68:c6:a5:59:e2:b9:c5:7d:70:40:f1:70:29:21:7f:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:26:0E:9B:93:78:3C:DA:D9:F0:C1:87:F3:33:43:F9:AB:A2:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8331042e-4a84-31c9-a7f4-f473166d9722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.179.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c3:d7:27:35:f2:95:56:74:8c:74:01:1f:e8:7d:f0:b9:ab:
73:2d:5b:c7:f1:fd:1e:a9:62:5c:ea:e8:7d:7b:b5:f1:b2:aa:
c7:29:d1:79:78:59:9b:7e:ed:48:f4:0e:66:e5:29:2d:79:95:
ff:8f:58:25:9f:70:fb:96:99:76:ce:48:d7:f7:5c:2e:3c:21:
99:fa:93:2b:27:26:ff:a3:33:50:b6:27:ee:c7:d0:d6:87:ad:
f3:82:30:6e:de:38:90:5f:36:57:78:bb:1f:e0:a2:2c:c7:df:
73:bc:c7:05:b7:2e:9e:59:d0:2a:be:27:9f:42:4e:13:b4:07:
e0:da:0c:39:b1:cc:20:e3:fd:fa:88:ed:53:cd:ca:16:e3:a3:
c1:ac:29:61:11:be:9d:af:27:60:b9:46:76:1e:26:dd:d1:5c:
38:b2:23:10:2e:a1:c9:c1:b4:72:78:3b:3f:cc:06:af:38:55:
57:bc:b3:91:f3:52:17:ab:16:e7:e1:5c:47:c6:4b:6b:21:a5:
6c:e2:68:3f:7e:2b:64:1f:2e:59:0b:ed:54:ab:cd:77:9f:2b:
74:f1:b8:55:9f:52:3d:24:67:98:ae:55:f1:06:55:9b:01:b0:
82:43:b7:0f:2e:1b:74:fe:d4:b2:22:88:02:f9:aa:0f:ae:8f:
d2:d7:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org