Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91b9ef1e-2e60-3caa-9fe4-e963d5c9cbaa.roa
File: 91b9ef1e-2e60-3caa-9fe4-e963d5c9cbaa.roa (raw, json)
Hash identifier: JKMoJKK0Do1yMrIvzhaREmkl0C9+e5HI2+oUeJJhtfc=
Subject key identifier: 1C:AA:74:42:65:F4:25:08:F7:90:35:3A:35:D8:E5:AB:EE:C1:78:77
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314FE23F712ACCB87012954
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91b9ef1e-2e60-3caa-9fe4-e963d5c9cbaa.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:fe:23:f7:12:ac:cb:87:01:29:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=b99d1fcd-bcea-4d58-b2cd-58d5f7a81672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:e0:ee:29:d8:01:04:18:e2:28:9a:63:75:
9d:1b:3e:2d:77:28:68:af:ea:33:e0:8e:97:c8:d7:
91:3d:e1:93:9b:c4:49:77:db:f9:e1:2d:32:19:ed:
2a:7a:62:18:dd:55:66:bf:ba:fb:b5:5e:24:6c:88:
c2:72:07:e0:f8:32:a8:6f:d0:38:8c:96:0b:c7:d8:
57:d0:04:d4:4a:39:a6:ad:f0:d6:88:f3:15:18:d9:
e5:fc:88:6d:bc:83:f0:b9:34:ba:bb:2b:47:a9:78:
b9:f8:09:ed:ba:41:21:22:be:c3:f0:30:94:62:0a:
c9:b5:78:69:ad:ab:1b:44:b1:ff:08:a5:76:f2:df:
7f:75:18:b5:6d:6f:de:a4:18:8d:b7:1c:48:dc:d8:
17:e4:46:74:dd:3f:c8:93:6f:9f:28:6a:6a:ee:44:
28:ba:3c:11:89:ce:5e:b5:03:86:d6:f6:41:bc:85:
05:dd:6a:fc:4d:c7:72:60:ca:53:f5:b6:eb:2e:ee:
55:06:d4:43:98:1f:c2:cb:11:85:bc:72:8e:ad:ee:
37:3e:31:00:96:9f:cb:ca:0c:41:37:17:ca:cf:0d:
a4:84:03:66:3f:df:c2:4a:87:9a:5f:90:a0:82:da:
66:a0:ae:3e:5d:c7:cf:3f:f6:13:e8:2c:d0:09:8c:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:74:42:65:F4:25:08:F7:90:35:3A:35:D8:E5:AB:EE:C1:78:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91b9ef1e-2e60-3caa-9fe4-e963d5c9cbaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:dd:5c:58:ba:a7:79:53:1c:0e:3e:6c:94:32:d8:5d:aa:ca:
80:36:0e:26:63:2e:97:e2:6c:0a:75:52:e6:84:f6:6e:09:03:
e6:b1:36:73:04:08:0e:ce:13:f7:60:f5:fb:b0:d7:76:8b:28:
1a:23:5f:73:ba:49:a1:97:6b:6b:8b:0c:91:be:e5:31:64:39:
f9:8d:85:15:6e:9c:35:41:d1:af:c6:58:ce:7a:35:a6:8b:ad:
85:16:02:f1:ef:20:50:9a:29:87:85:70:fd:80:a2:fd:5c:7b:
c7:f3:85:7d:54:7e:5a:bb:94:2f:b2:c2:7b:7e:a6:16:3a:f3:
cb:79:4c:99:81:39:92:68:e9:80:80:dc:e0:0c:d5:06:47:a7:
5a:d2:9f:19:f4:05:2e:65:36:c2:ca:5b:1f:36:8c:d1:cd:d2:
8d:77:b9:5a:d3:28:b8:dd:bc:10:fd:5a:cb:2c:ae:dc:55:73:
fc:d4:74:43:23:29:e3:a5:0c:66:d1:58:3f:dd:83:20:ed:fc:
b7:48:be:57:19:37:c8:2e:00:80:a2:dd:45:20:af:fa:1d:99:
7f:5b:de:cc:5d:fb:43:ed:16:db:50:14:0d:83:bd:0a:3e:1f:
87:fc:e7:cc:7d:81:0b:aa:d4:ff:80:f7:2e:5b:1d:6d:28:a2:
0d:b9:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org