Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1cdf917-efc0-333c-91f8-132bd3ba2967.roa
File: a1cdf917-efc0-333c-91f8-132bd3ba2967.roa (raw, json)
Hash identifier: JVZzKfAA/en/GSzerKPawd4H1XOdvnLJkthq/Jl4Sbs=
Subject key identifier: 0D:EB:1A:B0:0A:53:A9:BE:A5:4B:41:4A:A5:19:AF:C4:DE:E4:57:3B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493152577E2B39DE6262B83C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1cdf917-efc0-333c-91f8-132bd3ba2967.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 33017
IP address blocks: 204.101.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:25:77:e2:b3:9d:e6:26:2b:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=b5def73f-5be7-4b05-a4e0-56e3ac8330ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:85:bb:f8:07:a3:95:84:f9:67:23:96:67:
3b:3e:ee:a9:11:cc:c1:7f:96:b5:86:91:67:d1:2b:
5c:0f:65:d0:bb:b0:ba:b9:dd:82:cc:61:d7:5c:b8:
71:86:21:5c:a3:47:d7:ea:4b:d0:53:3d:e2:aa:de:
ed:56:ec:e9:d4:72:6a:30:84:e0:89:59:e3:8e:ba:
18:3f:02:60:4e:56:56:57:cf:2d:11:50:01:3b:db:
c5:77:28:f4:e1:26:63:29:3b:0a:1d:e2:0e:4e:06:
ae:4e:6a:67:58:4c:17:71:69:0a:fb:b9:6b:53:9e:
1c:ea:fb:56:ba:1d:5c:bb:74:c1:f9:5d:12:6e:51:
7b:c0:07:15:84:20:44:3b:cf:52:1a:f0:77:20:f6:
25:b5:5a:4e:42:d7:63:41:69:eb:3d:70:d6:bc:d4:
33:cf:b8:b5:07:4f:29:c6:b7:4d:a5:18:70:44:a0:
0d:13:8f:d2:ac:97:1d:1f:3f:81:93:f9:06:c3:50:
7b:b0:61:9f:00:6a:3b:ff:23:ab:d0:c0:7c:5d:40:
97:61:1c:a5:85:a1:16:7e:1c:77:85:05:93:7d:e8:
a0:28:a3:5b:30:77:4e:b6:d2:e9:dc:35:f0:66:90:
7d:fd:c3:47:3f:2b:a0:3f:b2:02:5d:17:1a:f9:b7:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:1A:B0:0A:53:A9:BE:A5:4B:41:4A:A5:19:AF:C4:DE:E4:57:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1cdf917-efc0-333c-91f8-132bd3ba2967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9d:c3:f2:2e:c8:78:31:d2:0c:4f:aa:7b:9e:75:df:db:4c:
61:0d:66:ad:e5:84:9f:de:9b:18:5a:c1:bd:00:f1:dd:63:31:
6f:44:50:36:16:03:6f:6a:71:75:49:54:03:c9:ee:50:41:36:
1e:29:b6:ea:7f:97:38:30:56:3f:f1:c2:cd:ea:2c:7a:14:2c:
8c:41:58:fd:bb:cd:bc:fa:76:c1:26:6a:63:d1:79:1e:55:90:
d0:0a:8e:32:41:5f:3d:10:60:49:5e:78:e7:23:1e:f7:96:7d:
a1:90:bb:a5:09:a5:f1:12:01:cc:59:7a:5d:3c:36:3b:d5:3a:
aa:5b:2e:07:9a:ee:c7:cf:67:35:a6:a3:e7:1d:63:7f:25:03:
9e:0a:36:f9:c0:71:a0:87:39:3e:87:ed:ff:2b:48:41:c4:d2:
dc:15:dd:23:bd:2e:a5:8b:b6:f5:72:60:34:1b:d9:db:61:0d:
55:86:41:63:39:cc:ac:09:bd:aa:24:12:f1:de:01:63:7e:4d:
ab:77:55:89:e7:de:87:0b:dd:02:ea:eb:06:c0:57:4b:57:7f:
dc:bc:78:47:53:b2:1a:6d:87:43:71:36:51:f1:8a:e4:95:56:
4a:de:be:85:90:7c:9c:ec:1a:aa:32:37:e0:09:e6:57:23:06:
c2:eb:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org