Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5946283-0457-3e70-8887-4643105ece0b.roa
File: a5946283-0457-3e70-8887-4643105ece0b.roa (raw, json)
Hash identifier: eEDTGfMhHNeQ/BbGQQtUuvqaVqphgqYPtDMnQn2/qXg=
Subject key identifier: DF:50:F5:A1:CC:EB:31:C4:68:0A:77:C1:EA:D6:F6:C9:31:BE:53:FC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5780798A72691A5E7D000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5946283-0457-3e70-8887-4643105ece0b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 21774
IP address blocks: 206.45.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:78:07:98:a7:26:91:a5:e7:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=a41ec3fb-9c11-47eb-8d47-e1a741634fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:a1:c9:0f:e3:02:d0:9c:54:42:ad:9c:3d:
c9:36:d8:c8:4e:b7:7e:21:cf:b8:62:59:df:7b:44:
56:00:f1:22:f7:8d:08:80:be:5c:a1:de:3d:48:14:
fd:a0:9b:e7:11:4e:e8:cd:09:6d:75:56:0c:2c:75:
d7:ef:2e:00:4c:3b:15:56:76:32:df:c4:19:cc:04:
7c:19:2e:b5:75:cb:05:77:3c:7e:a8:b3:4f:ce:d5:
87:e8:f0:f2:59:37:96:40:bb:fc:2c:59:bf:94:4d:
f1:c7:f0:43:02:17:bf:6b:63:fd:06:10:b5:74:02:
ce:0a:13:23:bf:6c:7c:48:a3:f0:24:c8:91:1a:52:
8d:88:03:fb:2e:95:7d:46:69:2e:cf:4c:fe:a3:c3:
d1:7c:e4:83:52:39:5f:f2:94:49:81:5f:bc:40:82:
64:c4:e0:0f:72:67:ad:a5:ef:3d:06:75:cd:b7:66:
93:4d:cb:2a:54:5b:af:6b:49:f1:d8:62:49:0d:b6:
23:e8:9a:ed:7b:f3:85:23:bf:a0:43:82:e8:82:ad:
da:1e:a4:5e:06:bb:b8:03:61:c3:9f:e4:6b:10:75:
ac:e7:14:f6:99:c0:64:cf:d9:20:3e:59:d6:a3:0b:
85:44:24:73:ea:2d:2b:26:8f:58:9e:09:4e:bc:40:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:F5:A1:CC:EB:31:C4:68:0A:77:C1:EA:D6:F6:C9:31:BE:53:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5946283-0457-3e70-8887-4643105ece0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.45.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:5c:d1:8b:c3:0b:f5:a6:f4:5e:f3:29:a8:b2:45:2c:64:f1:
c1:a5:be:d0:0e:c0:80:06:17:02:50:3a:7f:1d:1d:c3:cd:ed:
55:4c:38:2e:ed:ac:ff:ef:a6:a7:44:24:3a:5e:49:52:f6:f4:
ca:36:89:60:d0:e0:ed:59:fd:20:20:30:2b:02:87:fb:74:02:
f0:49:b9:11:13:4e:d7:2d:cb:57:8b:1d:57:c8:ac:62:10:52:
89:63:04:9d:0d:54:bd:2e:37:5a:2a:f3:77:7f:78:0e:ae:e0:
58:a2:8b:0b:a5:d8:36:80:04:c0:9a:d6:06:39:84:13:e7:59:
f1:a1:27:da:82:f9:c6:c7:45:38:2b:63:e2:cd:89:fc:7b:91:
dd:13:51:b1:d8:a8:03:8c:b3:41:f6:f1:96:1a:a3:b5:35:ba:
8b:83:cc:b9:c6:e5:38:ca:ea:98:12:c2:66:db:53:54:b9:0f:
0e:ff:e7:eb:3e:62:c6:13:e4:11:cb:8f:23:67:2f:fc:a6:f7:
28:19:b9:b7:ef:37:24:4e:03:d7:78:bd:9e:c0:07:23:9d:49:
16:0d:e2:ef:22:fc:71:89:a5:38:75:44:2d:ba:04:39:1d:86:
d4:bd:8f:df:96:79:8e:0e:c8:47:09:f4:c8:de:a0:d1:23:6b:
9d:13:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org