Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a851404c-e084-3c36-b9b7-dd09454e9580.roa
File: a851404c-e084-3c36-b9b7-dd09454e9580.roa (raw, json)
Hash identifier: iscHbAxhdBCo4ImTRqb2mCXrwIrSNUiFUBMV5Oxy/bg=
Subject key identifier: 21:32:0D:4F:21:28:0A:2C:35:B8:1F:B1:77:A8:90:78:D2:B0:8A:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493159A88DABDEB5AFED97520
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a851404c-e084-3c36-b9b7-dd09454e9580.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 4540
IP address blocks: 207.35.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:9a:88:da:bd:eb:5a:fe:d9:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=07f0aa8b-5ef5-4248-971e-3b469a2da5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:54:17:3f:b8:a2:65:fa:c0:0c:f6:86:38:
58:f6:81:42:16:b8:2c:4e:a4:42:41:b0:80:ab:60:
1a:9d:a0:7c:9f:e7:9f:77:7e:2b:ff:da:9d:35:21:
50:08:24:21:dc:7b:be:ca:62:a3:e9:54:ed:03:3e:
71:a4:4b:69:be:c5:ca:a6:f3:36:ee:16:e5:f9:d5:
10:97:73:61:f0:51:d1:c1:c5:b5:e4:69:8d:60:b7:
8c:a8:ee:cf:09:4f:b7:3e:ec:b2:13:6c:de:e0:24:
ee:b4:c9:66:5d:c7:db:3d:d3:47:55:5c:87:33:2d:
66:60:40:d6:72:09:d0:05:8a:fc:b8:9e:a9:21:07:
b7:4d:f8:7b:41:e6:10:15:d9:7d:c2:7b:bc:76:ee:
67:b8:a2:ad:1e:84:a5:c0:43:d3:36:d4:34:bd:5f:
4d:18:4e:6a:e6:e9:77:d0:c8:7c:90:d9:ed:bf:7b:
42:5d:f5:c8:66:31:fa:ab:68:97:13:09:a6:c4:42:
63:e5:fb:12:cd:b5:b5:10:da:6e:46:13:a5:94:a8:
d5:86:33:88:ff:56:b2:50:05:b2:31:35:38:a1:fc:
3a:ca:b1:7d:a5:80:cc:18:fb:ca:a3:d3:45:2f:21:
1e:c7:b3:1a:25:5c:9b:56:92:59:8b:f5:6e:14:ff:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:0D:4F:21:28:0A:2C:35:B8:1F:B1:77:A8:90:78:D2:B0:8A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a851404c-e084-3c36-b9b7-dd09454e9580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:fc:63:f3:1f:26:7f:85:82:ae:07:51:f6:86:62:e2:44:20:
75:41:f5:4c:54:c9:ce:58:25:5e:f7:60:58:3e:3f:ca:b2:9c:
13:19:83:19:54:df:f5:94:75:cd:4e:70:b6:98:b3:b2:39:74:
77:d1:ef:99:2e:36:9b:93:7f:1d:48:c8:89:83:36:97:6d:12:
28:e2:44:28:8b:f5:da:a2:b4:57:08:d1:6b:da:cf:6e:0f:4f:
3e:a1:3b:b9:1c:16:23:78:3c:9f:98:d2:4b:bf:2a:b9:7f:5a:
70:78:0f:45:34:d4:8c:8a:4d:7e:74:63:83:13:c2:4e:ac:91:
90:64:12:80:4d:75:d4:78:62:cf:a8:a1:7d:c7:e9:7c:22:ae:
bb:2c:75:9d:ed:d3:73:b4:0f:73:ef:28:bd:76:19:6f:27:f9:
7e:63:16:a1:8c:84:d4:7d:75:90:ad:d2:56:69:f7:af:1e:cd:
1e:3b:35:b9:74:3b:ca:6a:7c:4b:5e:5f:90:11:df:f5:21:6c:
58:79:0d:fa:02:f1:82:97:d2:8f:0c:66:b7:92:41:5e:bd:7d:
e0:10:5d:52:5c:43:f6:7d:78:b4:35:02:42:84:69:d1:a2:94:
45:c1:31:8d:bd:e2:90:e1:07:e0:7f:42:25:27:07:92:2e:f8:
84:0e:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org