Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d8d5ee7-6167-3871-b04d-f1473bf8b8ab.roa
File: 9d8d5ee7-6167-3871-b04d-f1473bf8b8ab.roa (raw, json)
Hash identifier: QIiPgIMflBHMAOQRoJFCwkLVP8frPHYzEw8R0hFxwQQ=
Subject key identifier: CE:B4:AF:8C:F7:DE:04:38:3B:85:17:24:94:78:1C:8E:CD:7B:65:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFBA5D575FC261219A0B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d8d5ee7-6167-3871-b04d-f1473bf8b8ab.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 198.235.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:ba:5d:57:5f:c2:61:21:9a:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=0f166422-458c-47b6-9246-b16423767d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:7c:d1:94:e6:ae:46:47:ef:4b:77:9a:88:
65:be:25:20:7a:90:f4:80:9d:2e:58:d4:11:83:d3:
63:74:84:72:b7:31:07:92:59:82:56:25:db:63:83:
55:cc:e8:ec:b1:b9:ff:de:00:cb:de:05:67:5d:d7:
47:44:88:1f:3d:41:a9:6e:33:a2:cb:cd:59:84:1a:
c3:48:34:3f:6e:53:de:41:b4:80:9f:0c:87:ac:95:
6c:38:83:05:c6:5d:8f:75:e7:6d:42:d4:da:72:79:
a6:03:76:c6:3d:fe:86:9b:db:20:93:4c:0d:0b:79:
2f:e6:a2:d9:a8:28:65:84:5d:e6:f2:0d:ba:23:c2:
e5:86:5c:d8:71:25:71:0e:94:65:95:17:d9:20:d6:
49:c9:d8:29:70:c8:8e:67:7c:29:ff:79:9b:a7:77:
8e:88:20:b9:f0:6d:29:cc:f4:ed:94:11:01:96:05:
a2:28:60:da:fe:39:e7:85:0b:d4:ab:02:9a:02:44:
71:5f:d6:d8:c3:cc:b5:68:1d:7b:e8:5c:12:b3:22:
58:81:76:31:d7:38:65:54:fb:71:01:3e:4d:7d:6a:
05:6b:c3:33:65:68:68:7d:15:75:af:63:4b:b9:dc:
b4:bd:0c:a6:5e:e8:8c:df:fe:77:21:7c:8b:69:e6:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:AF:8C:F7:DE:04:38:3B:85:17:24:94:78:1C:8E:CD:7B:65:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d8d5ee7-6167-3871-b04d-f1473bf8b8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0d:da:37:22:3f:9c:ec:16:e0:9b:64:38:46:3a:ae:06:00:
4b:d6:9f:b4:ba:d4:60:1b:55:7d:7b:08:a7:a4:a8:41:dc:e9:
c6:9a:38:b4:5c:ef:59:8f:df:fa:05:e7:02:50:af:3f:c7:ca:
7f:4d:4e:5f:f5:8e:89:75:d4:8e:aa:90:06:07:c7:69:c1:18:
d7:0f:fb:5b:65:34:10:25:0f:37:d6:fa:ce:58:b6:9e:a9:ba:
26:79:78:2a:15:04:d5:9f:78:19:74:3a:df:e7:15:2f:32:c6:
75:be:6c:46:9f:60:3c:0b:2a:be:99:57:95:69:e2:77:84:7d:
8d:04:4a:2a:4e:a6:c3:59:19:31:35:6a:c6:9a:01:82:6b:a1:
28:6b:28:c0:44:ef:2b:0e:03:f8:56:7d:6e:77:e5:a1:61:a9:
b6:2c:28:9e:76:87:7e:41:52:20:80:09:bd:14:c0:24:a3:1e:
c6:71:3c:b0:95:19:41:2c:be:b7:95:b7:35:e4:79:e9:42:3e:
b2:82:ef:c3:3b:04:46:da:94:37:0f:86:bc:50:16:1c:cc:3b:
af:db:c0:b0:c6:8e:bf:67:c4:1f:d5:29:f2:4f:38:ac:2d:bb:
82:16:f6:f9:45:94:6c:ac:d6:97:57:f6:b3:34:df:23:bc:7e:
8f:41:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org