Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3c9daec-cffc-31ab-b611-5daf9c204624.roa
File: a3c9daec-cffc-31ab-b611-5daf9c204624.roa (raw, json)
Hash identifier: OsMmBOlBngu61mg/g0g1lnbaAePAceR0rVWgeDXPAOk=
Subject key identifier: D6:68:94:19:3C:C8:AA:1C:56:08:DF:74:6A:95:0E:CD:67:22:C2:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315C06FF343B86002719A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3c9daec-cffc-31ab-b611-5daf9c204624.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 10965
IP address blocks: 207.161.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:c0:6f:f3:43:b8:60:02:71:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=39d970ab-941b-4b61-b9fb-a6bd87360763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:37:a0:68:7b:bf:3f:a1:3c:55:a5:82:e2:
47:46:b1:02:7b:44:bd:63:84:6a:2c:cc:1a:85:23:
ec:ae:c5:7c:e9:e7:bf:cb:44:84:7b:32:9f:fa:cd:
05:cf:73:ff:2e:c0:36:f2:25:51:09:64:f0:56:a4:
47:20:64:11:62:bd:60:c5:aa:87:75:0f:96:b6:2e:
f3:f8:66:b4:c4:f7:6c:15:3c:bf:e3:b1:fb:aa:45:
26:ff:23:e2:ff:bf:22:98:c2:ae:dd:49:44:8c:16:
c1:0d:dd:8b:46:81:af:59:dc:9f:1c:7d:33:82:08:
6c:0a:a3:9a:1b:5a:b8:38:04:b2:fc:7d:2c:64:0e:
98:e1:b5:ae:61:64:4e:3e:97:b5:0e:dc:b7:a7:91:
92:59:55:0f:56:e0:48:86:1d:6a:f0:56:d7:45:0c:
e5:77:68:d2:f8:c9:f6:44:89:14:c9:56:ae:e2:ed:
d7:38:8c:a7:e4:bc:7c:26:d2:72:84:be:8a:1a:81:
fe:8b:3a:3c:3f:7b:17:f5:73:21:86:b7:65:41:ea:
30:dd:2f:41:d7:ba:0b:68:41:2a:a8:6f:9e:f1:63:
2e:4c:fa:1b:68:17:a3:0f:8b:92:fb:be:c0:ce:50:
1b:ee:af:5c:b1:26:52:d9:8b:f8:52:11:c4:3b:c3:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:68:94:19:3C:C8:AA:1C:56:08:DF:74:6A:95:0E:CD:67:22:C2:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3c9daec-cffc-31ab-b611-5daf9c204624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.161.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9e:b4:a5:f5:4f:32:58:c4:3d:53:1f:26:03:c4:b3:a0:92:
c5:27:7e:03:88:4c:34:98:15:bf:28:b3:c4:fa:1d:a5:bd:cb:
68:b0:ca:0e:41:ee:b8:e4:c0:41:2b:17:f1:fe:f8:58:84:f1:
13:0c:ad:04:24:2a:79:ae:c0:34:fa:78:ae:eb:0a:61:15:80:
0e:a1:c8:00:a1:73:c1:1d:17:74:01:62:c0:e0:cb:7d:ec:8c:
c9:d8:fc:79:07:5c:b9:39:5d:ce:9e:88:b6:8b:ca:49:7b:60:
bd:78:ef:66:d0:02:38:51:11:20:c1:b3:e7:fa:5a:15:07:45:
9f:73:8d:fa:be:ab:d7:f7:2d:22:b6:bb:a6:1b:58:a0:79:c1:
09:a4:a9:ee:1e:ed:66:48:82:ab:57:1e:28:ed:f9:2a:cd:e7:
02:17:ca:83:31:d7:2d:f8:82:1f:22:ef:92:d2:58:5f:fe:e5:
51:4d:01:e0:be:07:53:bf:fc:47:91:23:82:e6:27:f7:9a:95:
79:9b:cb:93:44:98:36:26:79:37:e6:4d:cf:5f:f2:90:7f:f2:
16:4c:da:38:09:e0:b0:ff:40:3c:2d:72:bc:98:3b:70:b5:00:
3d:e1:11:91:ea:31:06:24:3e:46:7f:0e:4a:10:20:48:27:cc:
dd:1c:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org