Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f28e67a-b865-302f-8e04-314a8488a2e4.roa
File: 8f28e67a-b865-302f-8e04-314a8488a2e4.roa (raw, json)
Hash identifier: x+W5a+O3EKfUg4ggjcjPa2GmzQ2DwlDst/XcXPuXB70=
Subject key identifier: 86:4D:D1:8D:69:F9:8E:48:43:AE:96:F4:AC:07:2C:1A:F8:4E:08:B7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0228519732E087961D440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f28e67a-b865-302f-8e04-314a8488a2e4.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 19842
IP address blocks: 206.47.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:22:85:19:73:2e:08:79:61:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=20acf630-5bcc-470a-bb21-b4ff032d963c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:ab:4a:b8:52:a8:42:b8:5a:ce:9c:70:39:
0e:40:40:55:7b:97:f8:71:f5:0f:cb:4a:2d:47:3d:
d7:c5:2e:3e:93:28:eb:bb:cf:ce:f5:0e:1b:0c:e1:
76:ea:92:e1:f8:da:1c:02:35:f6:fe:2d:5e:3c:4a:
cf:4b:08:86:0e:a3:af:71:f9:e1:5f:ca:30:b8:05:
39:27:9c:e8:cc:b9:30:f2:23:66:76:fa:e6:64:6a:
0d:3b:d6:13:96:b6:a0:4c:a8:9e:49:51:9d:91:06:
e5:6e:41:97:8e:bc:b8:4a:8c:af:15:2b:d3:5f:1c:
e8:ee:e3:ff:8b:fb:39:5f:f4:01:70:7e:f9:1b:e4:
8a:ec:8f:57:25:61:39:ab:2d:52:03:f0:96:61:93:
92:7a:70:4b:57:74:e6:05:68:ed:bf:a8:32:87:20:
98:34:41:90:9d:2a:36:2a:40:3b:aa:80:e5:c2:20:
f7:36:0d:cf:1b:7f:75:54:f7:46:a3:cf:a3:0c:a0:
d9:95:87:e7:3f:77:8d:fa:19:bb:4f:e3:51:0b:06:
77:f3:d6:e5:b8:ad:f0:e8:d4:ed:c5:f0:bf:b3:30:
a5:fc:8e:b0:f5:3a:59:ee:7f:51:db:01:27:ac:4a:
94:62:f0:8f:16:b2:b7:f3:fe:26:b0:65:9c:16:e1:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:D1:8D:69:F9:8E:48:43:AE:96:F4:AC:07:2C:1A:F8:4E:08:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f28e67a-b865-302f-8e04-314a8488a2e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:1a:62:bf:56:e1:53:5f:1a:69:89:0c:7b:e6:94:b2:ef:a9:
7d:2e:87:1c:9e:e0:e6:10:be:20:62:c4:96:0f:e9:74:80:7a:
2e:fc:57:f1:3d:3a:62:88:ad:7d:2b:88:25:a1:ec:70:c2:5c:
df:1e:9c:f4:00:56:13:ca:5d:ba:3d:cb:d4:6a:e1:b7:19:12:
23:08:bd:f4:7c:76:d7:3a:ad:29:89:c1:89:0f:60:3e:42:62:
d9:c7:2e:d8:85:1f:96:35:44:33:fb:7c:eb:2b:a8:c0:3d:fc:
f2:a5:71:6e:08:f8:ff:50:17:26:5b:25:f9:a2:90:e6:97:d6:
49:a4:1d:3b:17:8c:15:01:36:44:13:f8:50:43:71:8d:61:78:
12:db:87:dd:b0:22:e4:de:cd:a6:57:17:81:a3:09:64:5b:fe:
04:82:57:81:22:59:48:48:1d:9a:85:e8:72:d4:dc:ae:94:36:
cc:16:27:31:dc:65:e4:63:79:aa:75:1a:2c:7a:98:0b:d1:5a:
09:80:4c:e2:09:dd:58:6a:97:bf:5a:de:db:e8:c1:29:ce:fa:
38:4e:76:1f:f6:5a:cd:24:17:51:9c:d8:48:85:57:b9:a3:bf:
07:ec:e7:2f:eb:99:c0:df:87:b9:0b:f5:f6:b2:e8:8d:c2:50:
ef:f4:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org