Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2cd09d8-b790-3893-9e3f-cc4f01fdf7a2.roa
File: a2cd09d8-b790-3893-9e3f-cc4f01fdf7a2.roa (raw, json)
Hash identifier: ELDtLqeotnHijg3qqtUJfaV2UUOp2EkCRBUN1eHwLLA=
Subject key identifier: D0:20:BC:3E:D0:DB:9F:D3:91:97:BA:20:4C:1E:0F:EC:E5:B1:9F:D2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB07AB2BF3099181413BE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2cd09d8-b790-3893-9e3f-cc4f01fdf7a2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.35.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:7a:b2:bf:30:99:18:14:13:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=b48953bc-5e44-47c3-8d42-1b970c37655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:cb:d1:5e:fc:c9:56:3c:63:32:e5:63:f4:
4c:ac:98:a4:74:82:a0:ad:6f:17:bd:e5:73:3f:9e:
81:93:96:a6:c8:0c:c3:ca:ea:ff:0f:95:cd:fd:f8:
b6:a6:ff:b5:d2:45:ec:d9:a6:e6:da:a2:b6:05:83:
80:f2:4d:06:d5:a7:ee:03:12:7c:60:d0:89:bb:f6:
aa:ac:0d:a8:14:f7:0a:e0:e5:d9:2a:92:1f:21:a9:
12:7f:fa:46:74:b5:d5:cd:c2:2a:03:40:c1:b0:50:
5b:ef:7a:e4:34:4c:4c:86:85:a4:6e:3f:c2:ee:19:
4d:ef:02:ac:4d:1b:d2:bd:d3:4c:07:d2:75:28:3f:
3b:a2:ba:86:ab:9a:19:98:ac:de:6d:96:ee:51:a7:
a8:41:59:ff:ee:e1:d2:c5:8f:60:5e:42:a8:82:84:
30:8f:c7:8a:1c:46:07:54:9c:06:c3:da:dd:56:e0:
f0:ec:ed:4e:6f:2d:a3:8e:b3:f5:52:fe:4c:77:61:
5f:e0:dd:52:55:fe:98:ca:53:63:25:06:43:fc:3d:
38:5c:22:5f:f4:4f:80:02:4b:ab:54:d2:b0:23:e2:
1b:68:65:38:78:75:65:25:1d:38:e4:0c:6c:e3:0f:
b6:d6:99:7d:bd:c6:c1:30:41:3d:6d:c2:f5:09:fb:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:BC:3E:D0:DB:9F:D3:91:97:BA:20:4C:1E:0F:EC:E5:B1:9F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2cd09d8-b790-3893-9e3f-cc4f01fdf7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:dc:40:87:35:bb:b1:55:2d:b0:8d:dc:31:b7:08:a3:37:08:
4c:77:fb:8d:9f:18:16:91:c1:b9:26:33:dc:cd:18:99:28:c0:
ed:a6:78:71:b4:f2:fa:96:84:f1:67:f6:fe:4a:5f:69:2c:42:
9c:0f:29:62:7d:fe:81:c6:78:ce:b0:6f:a2:4e:d5:5a:eb:49:
56:7d:56:0e:55:df:a9:0e:a5:35:56:19:90:04:80:d8:f0:cb:
bc:08:b6:06:8c:1f:1b:74:38:55:83:4b:dd:1e:09:c7:ba:47:
bd:31:82:d2:cd:1b:38:c3:ec:bd:3b:f4:b8:49:ee:e2:4a:ae:
c0:8e:e7:10:71:fa:42:f5:fc:c4:3b:e4:b0:a4:85:70:e4:b2:
c3:99:15:14:66:83:3b:3c:20:18:70:ed:36:5d:55:4a:e1:17:
d7:27:2f:1c:3e:08:81:87:ea:f7:dc:a7:bd:60:78:ba:ea:9c:
21:8c:3a:bf:7b:d4:1a:30:b8:ef:f3:01:a7:93:97:89:16:91:
4e:09:fd:9e:37:90:1d:fb:8d:05:c8:93:7f:39:91:a6:2a:cd:
b5:29:db:c3:2a:10:ab:97:9c:13:e6:9f:d4:27:39:5a:81:27:
37:df:77:9a:f9:aa:4d:ce:c4:a7:ab:6f:ed:22:0c:65:fd:70:
1b:11:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org