Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9724da9d-2183-3ce8-9c63-3bed1902f8fb.roa
File: 9724da9d-2183-3ce8-9c63-3bed1902f8fb.roa (raw, json)
Hash identifier: cWPdNxPtTfutWZH8mX1V1EhTcMtbfLQSxV2b8diABV8=
Subject key identifier: 2F:2D:E6:04:64:90:87:E5:9D:63:ED:88:83:44:6D:AF:9B:15:F3:7C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315F3F0E608A3EF2C1C3560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9724da9d-2183-3ce8-9c63-3bed1902f8fb.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:f3:f0:e6:08:a3:ef:2c:1c:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f3a7be63-f969-449d-83b4-9fd74a80642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:0a:8a:a4:58:c6:4e:12:00:95:90:ec:24:
84:8b:33:ba:2e:6d:61:a8:38:29:bf:09:3a:77:cc:
49:4f:cc:b6:8a:8f:27:1b:0c:16:ea:c5:ab:a7:a5:
3e:e3:51:4c:f8:d4:d9:aa:f3:4a:8f:c5:b2:d0:4a:
f2:cc:67:04:d9:82:3f:c4:45:92:30:1b:c2:c5:2e:
a0:a2:b4:2b:1f:2f:bf:ee:3e:0f:b4:04:18:c2:8f:
57:f9:49:c6:3b:0e:00:aa:b9:20:ee:b8:ac:38:0a:
e7:4b:15:06:05:e1:92:e8:ba:b4:56:47:79:49:d0:
c4:a3:73:0d:5a:e8:15:b3:78:00:8f:9a:32:1e:e2:
5d:f0:de:19:e3:a3:d5:e4:d8:bc:d2:49:3a:30:f4:
d7:94:b3:e8:65:72:bd:52:06:5d:6b:bc:1e:a2:4a:
73:9e:16:b0:7c:04:af:77:8e:5d:2b:c2:ad:88:ae:
14:ce:54:0c:d4:ba:4d:e2:9d:da:c7:a8:31:e0:86:
bb:dd:a7:7e:8c:b6:57:f0:32:2a:15:24:03:87:35:
44:6b:96:b9:82:89:a9:95:a3:a1:b0:32:99:e9:bc:
fc:c0:a2:ff:68:2f:e6:91:7b:99:a1:e6:6e:8c:52:
f1:5e:4a:5c:0d:f8:9c:70:79:da:f9:41:f4:70:e6:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:E6:04:64:90:87:E5:9D:63:ED:88:83:44:6D:AF:9B:15:F3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9724da9d-2183-3ce8-9c63-3bed1902f8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:f7:f0:64:02:b9:3a:eb:ef:2b:0b:e6:b2:67:91:d3:04:7d:
49:3d:92:22:b3:bb:23:ad:77:68:10:a4:c7:87:26:0e:63:91:
81:f1:e1:7e:26:6a:40:46:da:30:27:0b:c3:25:96:c9:5a:48:
7a:90:d4:1f:2d:00:98:1a:ca:ce:60:3b:60:39:ca:fd:96:b2:
39:db:b1:da:f9:a0:b5:05:c5:22:13:e1:a8:6c:33:0e:fa:c8:
59:45:80:f2:94:d6:24:0c:a3:ec:67:5e:8c:2b:a3:ee:32:e8:
6d:06:95:95:4d:fa:11:82:3e:de:31:f3:5b:64:a3:07:b0:7c:
70:94:99:f5:0e:38:3b:5e:8c:29:7f:aa:0f:4c:b6:8a:dc:7f:
81:39:a3:9b:b7:b1:05:66:c6:32:03:30:dd:fa:11:3e:0f:33:
cc:d0:07:fe:8e:d0:db:ae:cb:5e:45:4d:77:f8:d5:bb:46:0c:
33:2c:4c:e7:c9:38:f3:73:d8:50:b1:1e:fe:c6:47:f1:01:9d:
32:9c:23:ab:d8:b7:81:90:47:b4:01:c6:c4:48:1f:44:ed:d5:
c3:4e:6a:1a:c3:a2:b0:08:5e:b8:69:a8:6f:45:aa:6b:4f:73:
dd:e6:61:27:14:3e:c7:76:b6:74:9a:6c:b7:e2:4e:1c:8d:0d:
c1:90:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org