Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90240446-8b3a-37ba-a0b2-1e97937ef264.roa
File: 90240446-8b3a-37ba-a0b2-1e97937ef264.roa (raw, json)
Hash identifier: lcYWys54EXebFUivnSwlpeHSZrPtWQWEugM7k9qF7ps=
Subject key identifier: 9D:7D:22:A3:64:7C:4A:D8:F1:08:A6:01:07:57:5D:DE:BC:C1:D7:57
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0A084B1940EFFB6523280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90240446-8b3a-37ba-a0b2-1e97937ef264.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:a0:84:b1:94:0e:ff:b6:52:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=266a23d7-9738-480a-9b9a-26f8192a3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:66:45:ba:60:04:9c:53:0b:b9:25:90:39:
22:e0:a7:8f:a6:99:60:d2:f3:12:2b:78:ac:92:d7:
2a:2c:4a:7b:3a:8d:74:15:66:a4:58:d2:85:ae:c7:
2c:8e:e2:7c:e3:59:0c:37:00:36:a8:b3:90:e2:8a:
e2:b9:7a:1c:6d:a1:2c:86:3f:23:71:0d:9a:f8:cc:
85:78:3d:57:17:20:38:e7:2e:b4:a8:4d:cb:bc:4f:
cd:99:13:9d:94:39:14:67:e7:da:e4:7d:0b:33:8a:
32:94:b8:28:9d:aa:46:c7:ce:7c:e2:95:48:3e:aa:
26:7d:83:85:16:a4:3c:cc:e6:cd:73:59:2f:d9:7a:
b6:c3:53:fb:04:96:ba:81:53:bd:3f:5e:1c:f3:23:
47:72:d9:62:4a:6d:95:69:91:03:fe:3d:a8:47:c2:
7f:d1:8c:a8:ca:0f:db:0d:31:0e:26:88:cd:4a:cb:
6f:f6:27:af:c8:00:00:f3:a9:be:fa:34:50:8a:d4:
59:19:33:20:e6:5b:03:46:29:83:13:3e:d7:06:ee:
c1:97:93:90:39:d7:43:68:8e:62:e9:3d:5f:dc:43:
9b:d4:3f:d6:a1:e4:d9:ec:9c:d6:e9:b7:37:15:20:
b7:65:1c:bf:7d:2e:77:68:4d:f6:01:ce:64:10:ff:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:22:A3:64:7C:4A:D8:F1:08:A6:01:07:57:5D:DE:BC:C1:D7:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90240446-8b3a-37ba-a0b2-1e97937ef264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:4e:7a:43:5d:a5:93:61:e9:b7:d8:8a:bc:de:12:38:fe:f6:
db:d3:e5:15:06:5d:1f:8a:2a:61:b6:35:f7:7a:b7:86:f7:05:
c8:a8:c5:fa:2b:d0:03:42:ad:8b:d9:06:07:ba:de:c7:24:ce:
db:54:51:96:c1:1b:0d:2a:61:24:aa:f3:3a:23:73:fe:25:a7:
cf:a3:cb:45:3d:f5:88:21:ab:30:12:0d:37:60:57:7a:d3:f4:
33:36:70:9c:1d:a3:15:d4:70:21:1d:83:6c:06:97:99:e2:bc:
ee:df:5c:58:25:fb:e7:bc:21:66:e2:20:94:99:66:b3:72:eb:
45:cf:c2:8d:df:e9:00:86:d9:1a:10:c6:ad:75:b0:79:7c:c5:
15:fa:0a:43:20:a7:ab:88:42:ea:d8:72:e8:49:e7:20:28:90:
32:b7:7a:3e:5e:c5:3f:8c:f4:55:29:86:49:41:bc:99:dd:a5:
7c:e5:24:3c:91:92:9e:1b:cf:99:bb:8d:87:f0:1f:0a:54:f0:
eb:71:80:dc:92:10:c9:dc:a9:5d:3d:70:c8:10:4a:25:34:9c:
b8:6a:cf:b6:98:a7:05:ff:85:33:64:e4:93:e7:4f:51:ec:96:
4b:93:5f:9e:7f:14:77:1e:2e:70:0d:b0:f2:2c:a0:b2:d3:b2:
32:09:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org