Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b16966-c107-3ccd-ab39-5e7de43008b2.roa
File: 85b16966-c107-3ccd-ab39-5e7de43008b2.roa (raw, json)
Hash identifier: X7CeTLJR4I4LXVxv03ZeBsQoGa3YctMQE09I8vpkf8g=
Subject key identifier: F3:A9:7B:15:BF:8E:0E:86:AC:EC:47:EE:77:32:1C:E9:03:60:3C:59
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0B11E3B21D3090565F780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b16966-c107-3ccd-ab39-5e7de43008b2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:b1:1e:3b:21:d3:09:05:65:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=38c97f4e-f266-42da-95da-11839def443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:9c:e7:a4:6f:42:fd:95:5f:53:6d:fd:c2:
7d:ee:98:f0:89:bb:71:b5:bd:0d:de:f0:df:4c:2e:
8e:ae:81:63:ef:58:5e:37:de:fa:de:e5:24:3d:3d:
59:48:38:16:dd:a4:37:58:c7:6c:b9:5d:c1:fa:51:
f0:27:fe:49:da:ed:aa:f8:1b:59:47:70:8b:15:db:
72:67:50:e4:84:41:49:1c:01:84:f3:96:48:63:cd:
c9:fd:e1:af:e9:76:2d:77:3e:30:31:5b:6d:0f:bc:
b6:c9:bc:fa:35:c2:9b:06:1e:3f:77:d1:c3:43:03:
71:80:74:29:1f:9b:5e:e8:5d:49:08:d9:80:ed:6b:
33:7b:cd:f4:2f:b8:b6:f1:b5:27:a8:23:23:da:37:
aa:cd:30:fd:ea:3a:88:c1:37:fe:82:02:7c:77:6b:
83:8c:42:67:04:53:f6:ce:79:80:f2:40:36:2a:23:
33:da:b0:e2:05:8b:bf:e6:8f:6e:af:ac:5c:bd:7a:
46:08:61:fe:07:d8:d6:93:9c:26:85:3d:26:14:04:
02:ff:9b:e5:9f:53:18:52:81:fa:0a:3b:e6:26:3b:
9e:cf:42:b5:10:f6:a5:07:82:82:5d:b0:e5:15:ca:
66:85:b5:c1:91:2f:ae:a0:f3:d1:ed:20:f0:22:ae:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:7B:15:BF:8E:0E:86:AC:EC:47:EE:77:32:1C:E9:03:60:3C:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b16966-c107-3ccd-ab39-5e7de43008b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:82:d1:83:a9:d2:15:a4:6c:f7:e4:75:17:4f:a0:31:90:a6:
8b:d7:61:12:61:bf:25:fc:58:50:e9:92:49:ce:e9:c4:96:2c:
16:41:b6:dc:57:e2:07:c9:b4:33:4f:86:98:b2:cc:9d:74:20:
b8:32:c6:38:9d:24:5f:67:7d:07:4c:e4:c5:5a:8a:2d:4c:03:
e6:51:b6:6a:46:7a:9f:58:25:d6:4b:28:07:4f:7c:50:81:34:
f1:cf:2e:20:0b:ea:c5:6c:76:b9:d2:cb:98:1d:8d:95:d5:04:
3d:1c:2e:eb:89:9c:3d:d1:f7:e3:35:3d:ab:25:5b:b6:44:12:
3e:ad:7a:a7:f6:e0:40:a9:47:9f:4b:93:5b:d4:67:d2:a2:f5:
c9:eb:ba:6b:44:6c:b2:44:fa:3c:1c:3d:39:dc:65:f7:9f:73:
67:d4:f7:36:2c:d3:1f:1f:ca:b0:88:cc:32:a1:f9:0c:e1:84:
1d:c6:12:a2:a8:db:cb:dd:b1:63:2d:bb:13:1e:36:cc:7e:27:
9f:6d:52:cb:b1:75:03:92:16:fb:57:93:7a:ed:21:f7:1c:36:
58:df:03:6b:6f:5d:29:e0:3b:48:29:fc:43:cd:6c:2d:ac:0a:
f3:c8:db:33:8c:80:a7:cd:e6:ee:82:d8:15:4a:29:fe:be:80:
bd:7f:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org