Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d8ed854-b695-35a0-a2af-8bcf1000a994.roa
File: 8d8ed854-b695-35a0-a2af-8bcf1000a994.roa (raw, json)
Hash identifier: xXpqKpatNH+3H0SX3afBLdTGZZyI5/o50QC4MAdtCNE=
Subject key identifier: 00:E8:33:CE:8F:53:C5:28:DB:75:15:71:DB:F5:39:C6:09:81:64:87
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285843847D5AD38C899D338B329980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d8ed854-b695-35a0-a2af-8bcf1000a994.roa
Signing time: Tue 10 Oct 2023 12:00:00 +0000
ROA not before: Tue 10 Oct 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 30048
IP address blocks: 209.226.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:7d:5a:d3:8c:89:9d:33:8b:32:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 10 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=8d2bac53-369a-4bcb-99aa-eec35f125ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:f7:56:93:33:46:5b:7c:ff:be:fc:9d:21:
c4:d6:85:5e:5f:fb:a7:73:b7:69:b1:4c:4c:10:dd:
b9:02:1d:f1:93:48:55:30:89:51:0c:68:5b:12:ba:
26:12:30:a9:d4:a7:09:8b:17:81:f3:d1:9f:bc:db:
f4:e0:44:c7:09:e0:35:18:8f:df:34:eb:de:b6:3d:
72:05:65:28:af:7c:06:86:50:75:30:44:a6:26:a7:
20:f6:80:9c:3c:54:4c:19:aa:67:df:f2:01:57:f3:
d4:d0:37:d3:dc:fd:e2:e1:d3:0b:d0:25:b6:25:09:
c0:07:eb:86:3f:00:fb:60:a1:3e:98:d3:8a:39:6c:
5b:af:ab:1e:ae:bb:d2:85:ce:80:ca:c5:65:6a:a3:
86:74:5e:ef:5f:ce:cd:95:db:61:ec:bb:80:1d:1e:
b7:3e:33:6e:0d:4b:a5:6b:03:04:55:92:5e:78:19:
0e:ab:75:78:cd:f2:68:cd:a6:a0:7d:59:e0:a9:61:
7c:1c:74:14:26:0b:ac:9c:f3:fc:bd:28:43:30:bb:
ca:48:39:b7:ed:8b:4d:2d:8f:96:96:bd:4e:dd:c3:
aa:ec:e0:1e:a9:9b:f4:35:01:98:bb:67:0b:41:16:
e4:aa:20:52:25:da:a1:dd:a7:14:de:c7:b2:ba:a4:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:33:CE:8F:53:C5:28:DB:75:15:71:DB:F5:39:C6:09:81:64:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d8ed854-b695-35a0-a2af-8bcf1000a994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:c9:18:46:e4:b2:d6:17:70:22:bd:88:cd:ef:bd:31:7d:7f:
d9:96:59:20:0c:cf:87:a2:a0:e3:19:80:03:4f:b0:8f:a5:ca:
08:6a:d7:d6:65:a7:9a:07:5a:7b:14:10:e3:17:83:ae:b0:46:
2f:77:4a:43:c0:1c:72:f7:8f:bb:a2:80:95:f1:bb:4c:d6:a3:
43:bf:38:0e:52:ea:87:d0:ee:a3:62:75:ec:d6:ee:94:db:c6:
d4:9d:eb:dc:43:f7:bc:12:a2:38:06:40:d2:86:b3:ed:c7:4c:
57:67:ee:b1:92:88:73:64:28:85:b6:b9:80:9b:c0:7a:56:48:
45:bf:2b:a7:5c:f9:9c:fb:a4:b4:ad:f4:9b:59:06:4a:91:22:
38:00:a1:01:b2:f7:f1:07:a4:3f:bd:2a:39:1c:73:14:73:d3:
96:4a:97:23:b3:ac:3f:4b:1f:0c:94:5a:41:f4:78:c6:c3:84:
73:c9:67:6d:5f:e5:12:90:6a:a9:0c:93:f0:d8:ca:36:1e:9c:
bd:b1:59:6c:89:f7:dd:18:47:cb:6b:70:59:79:98:68:6c:00:
43:ab:8a:fe:a9:4c:27:ca:43:7a:87:29:c6:f1:33:a2:e5:f7:
53:33:f5:0e:ae:f0:58:4a:a4:b6:6b:87:7c:0a:74:b2:38:c2:
3a:7f:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 05:18:05 2024 by rpki-client on console-fra.rpki-client.org