Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b715d63-a6e1-3cea-a33f-1573ad3c3237.roa
File: 8b715d63-a6e1-3cea-a33f-1573ad3c3237.roa (raw, json)
Hash identifier: GctQOeK9vSquOVoKhi8qz/i8tEZR5Hs+wcKSzK0nYzw=
Subject key identifier: AF:0D:E0:D9:36:DB:EC:2B:65:40:36:47:84:41:CD:E4:E8:7B:14:FB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB069BD9795BA71CACAFC20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b715d63-a6e1-3cea-a33f-1573ad3c3237.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.172.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:69:bd:97:95:ba:71:ca:ca:fc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=57a6b066-4b34-447b-b98a-7af044d080bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:9f:49:1e:6d:76:cc:44:3c:fe:18:09:80:
cf:f8:73:ae:15:06:c4:ee:ae:9e:b1:fd:ae:a2:4f:
b2:fe:a2:fa:fb:5d:9d:72:90:8d:56:0c:33:49:2f:
e0:b1:8a:ed:2c:44:ff:f0:7b:3f:af:28:a9:97:13:
d8:31:2c:40:9a:1f:8d:05:e4:ec:9b:ff:7c:e2:d1:
34:83:ec:e7:eb:49:b6:7a:8e:82:1c:1f:0f:5a:e2:
02:63:65:23:06:0d:13:51:16:0f:cd:b3:d9:a6:f3:
5c:b5:92:38:80:2d:6f:2a:4b:99:2c:1e:e8:75:58:
82:22:8f:02:57:4c:2f:2e:38:72:0f:9e:4e:b0:d8:
1c:6f:ef:a0:dc:47:67:ff:d8:ce:8a:5a:72:02:da:
5f:b2:38:61:35:b4:05:f0:71:82:be:32:c6:91:9e:
8f:31:2c:a9:52:4f:d1:f4:fa:55:d1:b6:f0:8f:5b:
e4:18:9d:72:72:6e:4a:5b:26:61:68:6c:d4:60:e7:
f2:24:99:64:8e:65:e6:14:88:99:79:54:87:76:08:
ca:e4:fa:7a:48:07:2e:9d:b8:0a:57:67:b5:b4:26:
71:82:56:bb:ce:eb:55:19:06:c0:b6:86:03:03:db:
e8:5f:86:e5:25:aa:87:f7:b9:e3:de:2c:6e:c5:fd:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:E0:D9:36:DB:EC:2B:65:40:36:47:84:41:CD:E4:E8:7B:14:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b715d63-a6e1-3cea-a33f-1573ad3c3237.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:fb:47:38:19:04:d2:64:97:ef:79:e8:8a:80:0a:b4:59:65:
81:8e:5d:3c:cd:f0:e4:4b:52:0c:6f:8b:73:d7:6b:6f:86:78:
fd:cc:28:d1:05:5b:34:c5:e9:6f:c2:92:91:4c:19:7b:ee:10:
75:3b:63:bc:cf:5f:8b:2a:a6:c0:45:1b:d6:71:5c:f7:d1:08:
f2:58:ed:df:a7:dc:5e:f4:b8:bb:ff:bb:c4:63:30:59:d0:b2:
61:a0:5b:6a:9d:f5:2c:87:74:0c:06:16:81:5e:46:66:98:49:
ec:e2:ac:cb:43:0f:52:ab:77:3f:82:78:5c:97:40:65:70:b4:
46:ae:e7:ff:bd:3b:e0:7e:8b:79:a9:09:5b:d1:d3:d1:92:b9:
01:c9:54:1c:af:13:d7:42:63:2e:dc:06:ff:aa:28:60:36:22:
a1:1f:45:98:6c:13:12:e0:f7:2c:ca:f9:a5:f2:da:cb:14:15:
2e:a9:da:e6:7a:8f:1c:d3:23:9c:4d:7d:f6:b9:49:1a:4a:65:
7e:11:54:e8:00:52:28:5e:b0:e3:ed:25:28:99:57:83:69:b3:
52:fd:13:5b:ed:d8:af:a2:ae:6d:2a:f0:d5:2a:bb:56:27:d7:
7b:cd:45:7f:05:ae:45:74:d5:05:c2:94:e3:32:52:a0:db:be:
77:6c:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org