Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84e9c2fd-e913-33ee-a8f8-dfd7907d6ab6.roa
File: 84e9c2fd-e913-33ee-a8f8-dfd7907d6ab6.roa (raw, json)
Hash identifier: eyRVr0sHjdKtnwG7gSnAlIp7uuqlkMrmhZATsszmUPk=
Subject key identifier: 56:1F:5B:28:54:E6:17:4C:38:1C:B6:52:C1:93:50:E2:4E:3A:D5:D8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB043B71EF3EF49522EAA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84e9c2fd-e913-33ee-a8f8-dfd7907d6ab6.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.47.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:43:b7:1e:f3:ef:49:52:2e:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=02a9ed0e-045a-4743-b01a-b71f88939adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:c0:00:da:a1:8b:da:67:fc:d1:5f:a3:2f:
f8:d5:19:1d:d8:27:a7:96:cc:c8:c1:70:7d:b4:53:
70:32:6a:a3:28:45:5d:79:3f:14:f3:27:37:21:46:
ec:8e:cb:d1:b6:f3:57:42:3d:76:55:0c:be:0d:ab:
dd:54:19:76:45:d5:94:ed:ec:af:ae:a6:bc:0f:f7:
19:61:c7:aa:65:a0:aa:45:7a:7e:ee:f9:c3:c4:2b:
d6:ed:20:9a:fa:54:59:de:d4:bb:de:00:8a:a3:ca:
56:cf:7e:f6:2f:07:7a:e3:20:bb:01:05:a1:ec:5f:
0e:e0:71:f7:4e:66:01:34:2d:5f:30:14:c5:fe:08:
cd:ed:c6:5f:27:17:c2:12:e8:1e:a9:ae:8e:d0:09:
04:63:1b:85:75:82:6d:d6:ce:25:4a:13:5e:9e:ce:
d9:db:15:03:58:50:f7:b0:e1:ac:f5:be:5e:e5:53:
b9:ac:33:39:87:88:30:3f:bb:b2:9b:88:cf:a0:dc:
d4:f4:79:76:30:b6:99:63:a3:6f:8d:f9:93:9e:58:
c9:89:32:c1:fb:2d:5a:67:df:64:38:4d:71:38:11:
ce:9d:38:3d:21:08:42:1d:8e:21:09:d6:85:18:ec:
f2:56:26:12:d7:7a:a5:99:d8:04:e1:b8:68:be:3a:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:5B:28:54:E6:17:4C:38:1C:B6:52:C1:93:50:E2:4E:3A:D5:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84e9c2fd-e913-33ee-a8f8-dfd7907d6ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:84:17:09:a4:7b:c1:bb:9d:bd:ee:05:8d:25:0c:77:ee:e7:
48:55:b9:43:e6:d2:0a:13:3b:6d:3f:4d:28:56:71:1a:e4:34:
20:71:e3:fb:54:df:b7:86:f3:01:56:b5:29:be:ae:14:ed:c4:
e6:b7:bf:5c:06:5a:a0:ac:84:8f:a1:ac:59:38:23:5e:9b:56:
7a:f0:b1:c7:50:34:ab:c3:f3:10:bf:65:db:2a:48:43:15:6b:
c9:bf:78:64:99:49:29:a4:80:6b:60:f6:50:bd:9e:3b:d1:6e:
65:27:e0:c3:d7:c6:ac:37:23:cf:98:80:cb:ae:53:4d:68:80:
6a:e9:22:59:55:b9:89:47:1c:5c:9e:e4:d7:66:a7:33:6b:24:
95:c9:a3:c1:fc:d2:d4:13:b0:03:fc:c2:8e:51:47:b8:73:07:
c0:ff:f6:6d:a7:6d:63:f7:96:7b:41:69:11:e7:e4:1a:69:a7:
82:f9:c3:e9:c6:a5:c1:ae:a1:d4:fd:dd:db:cb:c2:c1:23:c5:
a2:3f:52:9f:8d:45:f7:5c:8a:9c:30:09:f7:ee:13:e3:20:1d:
51:2b:8f:2b:cd:ab:03:f3:10:02:11:c9:63:a2:bd:3d:b5:c7:
f7:ea:ab:2e:fa:a3:8c:81:bb:00:2d:98:5b:da:1d:9a:b0:5f:
b0:8d:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org