Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c9e1212-23ad-33df-8761-d3c354ab2260.roa
File: 9c9e1212-23ad-33df-8761-d3c354ab2260.roa (raw, json)
Hash identifier: bK3gEC+x8SgvOOFgEbKgVJ7gDk0xoTtYWzqcC/kpxww=
Subject key identifier: 90:33:BE:D3:75:D7:E2:B1:5F:FB:1C:23:FD:89:78:00:D8:78:2A:21
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314B940E03EDAB54E141138
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c9e1212-23ad-33df-8761-d3c354ab2260.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 184.151.118.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:b9:40:e0:3e:da:b5:4e:14:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d6a2a14c-145d-481a-8a28-a10cf4d79298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:5a:5c:7e:8d:92:72:bc:d7:71:f3:74:2b:
12:11:1f:33:56:00:ec:66:ca:72:58:2a:85:19:af:
6e:df:26:64:2c:59:19:b6:ab:3b:90:8a:5c:c1:e0:
46:02:e3:b7:6c:01:0a:f6:20:be:40:b8:6a:b6:27:
85:3b:8f:28:87:84:d7:9f:4f:21:2a:d2:4b:1a:e7:
ea:51:05:65:9c:e6:0c:ba:fe:8d:5c:54:b8:fa:3a:
98:1e:1a:05:87:76:56:ab:2d:fa:b3:6b:db:c1:30:
68:92:01:68:5d:40:75:8f:c4:e1:a5:35:a8:9d:13:
31:c3:05:4c:15:19:73:b5:b9:d6:f3:80:37:82:32:
fc:92:2f:5e:57:f8:a5:c4:f7:b4:ef:49:03:dd:9d:
e3:16:2d:5b:f2:0e:69:d6:2f:da:0d:61:7f:2b:f6:
61:86:7d:eb:fd:8d:74:1f:6a:65:65:9b:34:b5:62:
ed:dc:92:d2:bf:3e:18:61:ce:57:d4:3f:a5:45:db:
2f:5f:ec:53:31:dc:df:31:f5:f2:06:fc:91:66:bc:
eb:82:87:7f:aa:42:d6:30:fc:ce:cd:5c:88:d5:e3:
18:2c:c9:c0:d3:fc:cc:6f:60:91:4a:26:76:c9:d7:
f2:2d:ff:10:ee:37:c0:01:05:fc:f2:d3:e0:a4:26:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:BE:D3:75:D7:E2:B1:5F:FB:1C:23:FD:89:78:00:D8:78:2A:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c9e1212-23ad-33df-8761-d3c354ab2260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.118.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:68:65:53:86:7f:33:8a:c5:fc:86:a3:bc:9c:ad:f0:80:90:
b7:42:18:ca:25:71:9a:09:f9:3d:95:50:6e:d2:8e:b5:3f:4c:
bd:40:9b:23:ed:dd:43:6c:90:ff:5e:84:6d:0a:ed:d9:91:d0:
6c:64:ea:1b:a4:fe:9c:60:de:55:20:4f:89:2d:bd:2c:ae:bb:
cc:dd:0e:fc:cb:8d:7e:bb:72:b6:7d:6b:6d:a2:0c:ed:cf:2b:
99:9a:9b:64:87:f4:9c:e6:58:68:2f:79:dc:1d:5b:82:a0:d5:
f1:2a:c1:21:75:ca:0d:84:ad:23:85:fa:c9:ee:d7:1f:16:8d:
d7:55:60:37:86:d4:bc:6d:99:4f:50:e0:d6:42:f3:72:7a:41:
b6:54:e6:eb:a4:1c:8a:5b:64:f9:fa:18:97:d3:2c:f0:ae:a2:
b2:27:5b:14:84:a2:8f:be:fb:ad:64:e0:b1:4f:5c:2f:cd:b4:
0c:d0:83:19:7d:53:5c:94:0c:ec:86:83:d4:e7:ea:01:a0:4f:
e9:8b:68:9a:c7:9d:95:fb:59:af:9d:eb:59:cc:4d:91:01:11:
af:29:af:70:a0:a8:5f:91:3b:eb:e2:95:2a:02:d0:99:b7:a8:
5d:d0:1a:b1:05:23:68:66:83:83:30:48:af:16:12:61:45:d4:
61:2f:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org