Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90d5d4ce-3e86-3d8d-a209-98e17eab65ab.roa
File: 90d5d4ce-3e86-3d8d-a209-98e17eab65ab.roa (raw, json)
Hash identifier: qHTBcvcnqlNHuKgHQS+evQaERE7E/DDdUftWY0/+tU0=
Subject key identifier: 77:42:8C:C5:1B:1D:17:C1:51:04:89:D0:1E:61:5E:29:8A:71:8B:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFD292A4F66AE029911900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90d5d4ce-3e86-3d8d-a209-98e17eab65ab.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 204.101.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:d2:92:a4:f6:6a:e0:29:91:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=8e2043d3-9f5f-4912-baa9-062158cb57fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:66:43:fe:fb:88:83:da:23:51:1b:c0:e2:
3e:7c:b0:22:34:b5:40:57:32:e2:6a:cb:f5:dd:86:
84:dc:af:8f:78:f5:9d:5c:18:b4:e2:fe:c6:42:28:
01:48:cf:fb:14:71:d3:7c:19:4c:0a:c4:fd:3d:d6:
94:99:00:03:80:aa:c7:b4:36:96:99:57:41:f3:de:
4e:ed:56:54:7e:38:7a:28:97:ac:6c:3f:92:54:1c:
9d:15:d5:3b:76:ab:59:42:26:41:6f:cd:a7:09:f5:
0d:7e:1b:73:5c:8a:23:a8:4e:bb:8f:36:e4:2e:43:
72:e7:7a:e9:51:74:5c:e4:d1:dd:81:c0:50:ca:8a:
cb:ea:7a:0b:10:d8:30:bd:a3:ab:b9:0d:43:2c:50:
4f:4a:6d:9e:61:29:44:70:ac:35:72:9c:d8:9b:8d:
01:56:c4:81:f0:35:73:bc:d7:22:8f:51:68:d8:7e:
61:68:28:b5:78:d1:51:e3:1a:f2:25:88:78:23:26:
01:ff:83:c4:b3:28:73:da:45:74:ad:53:ec:49:1b:
29:5a:d9:37:7b:ab:ce:bc:d8:4e:30:86:fb:c4:8d:
0a:c1:52:28:2d:86:5a:66:32:47:78:04:55:a2:e8:
74:62:2d:cb:0b:94:51:b9:76:b0:35:27:85:1d:22:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:8C:C5:1B:1D:17:C1:51:04:89:D0:1E:61:5E:29:8A:71:8B:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90d5d4ce-3e86-3d8d-a209-98e17eab65ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:15:3b:27:88:da:44:73:08:a5:f3:93:49:48:8f:0f:85:24:
5a:54:e7:53:7b:38:59:fc:77:8b:7a:20:a8:0c:ca:8f:b7:62:
34:6d:a6:66:96:6a:76:05:dd:0e:f8:0d:17:c1:49:7e:70:aa:
44:50:be:27:2b:44:5f:ec:03:e2:e2:54:d4:64:a0:6f:73:2b:
a7:a5:fa:b3:13:4a:d7:15:4f:a1:92:33:f4:f3:bd:21:f0:5f:
5b:6a:9e:12:99:b7:d2:5a:8b:db:3a:a0:66:bb:e1:ee:04:83:
6e:00:3b:12:37:05:2d:27:41:92:4e:8a:fa:2d:99:1e:7e:42:
d2:d8:7b:09:ae:1e:da:33:ab:e2:fa:4e:fd:a7:7c:7b:a2:74:
f7:5f:e4:16:f6:db:84:18:49:a3:fd:1c:98:8a:1b:72:4e:f9:
06:e2:03:25:f4:e9:97:43:ed:ec:e5:4f:28:b4:15:60:84:e7:
e7:b5:07:59:90:14:ac:18:6b:a2:87:6b:be:a6:ff:cc:47:61:
ac:e7:ed:19:04:9a:b0:00:15:23:c0:93:2a:40:9f:8f:35:9d:
84:66:56:1c:a2:d6:a1:32:3e:d3:d9:3a:a6:f8:ee:d9:d6:81:
c8:a1:2b:2f:3f:e0:16:b2:d6:5a:93:a3:52:50:b6:68:b5:66:
bc:32:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org