Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1de7cd-e19f-3e08-838f-3ef06159f9ca.roa
File: 8b1de7cd-e19f-3e08-838f-3ef06159f9ca.roa (raw, json)
Hash identifier: bzwWbBsGPPBiqlhOXnmMF7v4Ug6ExnST66O1dPlZrBo=
Subject key identifier: 4E:C6:AD:86:C0:A0:F0:33:B1:14:D7:EE:E7:4C:7A:1E:07:A1:4D:AB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0B20FF9CE29BCEC9B4280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1de7cd-e19f-3e08-838f-3ef06159f9ca.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:b2:0f:f9:ce:29:bc:ec:9b:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=d35df68b-19ba-4d9d-8b7f-347824b7b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:f7:c1:c1:2e:01:88:df:30:7a:7e:f8:30:
fb:2e:19:18:36:f9:3a:3d:99:46:1d:99:e8:9b:68:
a2:49:b9:34:4a:1b:6a:c9:b0:58:43:6f:14:7d:de:
bc:eb:51:18:f0:7a:f6:de:0f:36:25:d0:72:ad:05:
44:c8:10:6e:f8:f5:09:ce:16:06:43:af:f5:bb:42:
41:ad:3b:89:bb:7e:a0:34:de:81:54:4c:37:5e:2c:
eb:ea:0c:cc:2a:7e:cd:e3:ed:27:39:38:09:b8:a2:
00:9c:e7:16:23:b4:1a:37:7f:11:04:66:c8:54:08:
9b:eb:08:75:63:12:d6:df:af:ec:94:4b:01:e7:d3:
02:5a:50:f7:f3:2e:f1:88:44:89:c6:40:89:f9:e4:
13:47:44:db:60:2f:ce:34:96:bd:c7:ad:a0:fd:76:
5a:0b:ea:a7:99:33:1f:36:88:4b:08:fc:a3:1a:83:
54:ee:e5:41:76:2b:c0:9a:66:ed:e9:68:c7:d3:4d:
1e:f2:a8:3c:9e:6c:14:62:1f:a7:d6:40:48:0f:8d:
43:04:f9:09:ac:86:31:f6:6b:49:94:83:9a:14:ff:
31:b2:aa:aa:8e:21:3a:66:6f:32:bd:2a:15:d5:02:
c4:6c:0a:bf:e0:ec:c4:ce:03:4b:86:0c:b2:b9:e1:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:AD:86:C0:A0:F0:33:B1:14:D7:EE:E7:4C:7A:1E:07:A1:4D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1de7cd-e19f-3e08-838f-3ef06159f9ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:8c:d8:b7:7b:db:b4:f5:8d:3b:4b:73:66:ac:7f:4a:7d:77:
c2:9e:c3:c1:7e:23:cc:9b:1d:79:b2:5e:f1:c8:95:b3:ad:28:
a6:0e:9f:c7:12:4a:47:94:dc:56:ac:0d:ae:5e:ae:c8:c1:b9:
35:b0:2e:d7:06:71:5d:e1:52:09:72:fb:b1:f3:5e:ce:69:dc:
48:a8:d6:7d:49:3f:e7:4f:6f:69:3e:61:11:f3:7d:5b:60:61:
e2:9f:cc:86:d9:1f:02:15:00:42:59:aa:95:6a:ed:91:4d:dd:
77:9a:ad:49:1e:a8:68:ac:8b:16:c5:3e:ae:cc:6f:29:53:65:
7b:30:7a:74:1b:e7:ac:44:6d:85:69:0f:4f:b6:b3:77:c2:2d:
05:4b:45:b6:1c:8d:88:66:59:86:e5:76:5b:4f:4d:d3:63:fd:
87:90:c0:74:08:4e:4d:a5:39:3a:ce:a9:2c:9c:3d:43:a7:ee:
d7:30:1f:57:4c:30:a7:1b:9e:6d:69:b6:d2:5c:ec:ba:a4:26:
79:c9:a3:b0:9e:9a:fc:9f:a3:3f:31:e1:be:7b:49:dd:c7:79:
ef:9d:a1:54:92:98:1b:08:c7:4e:48:3a:07:29:76:11:9f:b7:
c0:67:d5:6d:6c:7f:03:60:ae:af:f2:1d:65:47:35:9d:87:a4:
a3:dc:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org