Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa11e926-6b0d-30a4-8c50-7688bdc830a3.roa
File: aa11e926-6b0d-30a4-8c50-7688bdc830a3.roa (raw, json)
Hash identifier: /pKnltBQZ96gj53C+cbV+mJ/eNN55jIsb6uGEe4eT6k=
Subject key identifier: 47:48:67:F1:77:F1:81:A2:77:87:4E:5C:55:7C:33:83:9C:65:F9:6A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB09078A2573E3DA8834A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa11e926-6b0d-30a4-8c50-7688bdc830a3.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.61.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:90:78:a2:57:3e:3d:a8:83:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=106b2be7-9827-473c-b7d6-14eaaccca68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:ba:07:7d:cc:7e:9d:59:e4:8e:d7:4e:2c:
c4:4e:ca:d4:f6:94:b2:4c:e8:95:8c:de:e5:7d:2f:
ab:dd:d0:4a:78:7f:f3:63:f7:43:8d:12:ed:0f:7e:
7b:2c:96:59:9b:0d:1f:e5:fe:20:83:de:20:42:57:
af:1f:5d:8d:b5:06:61:4d:9d:44:dc:f1:a0:ce:62:
89:ef:ad:e3:b7:b4:52:7d:0f:0c:38:79:a2:22:d8:
1a:40:eb:af:11:85:9a:ac:52:8c:55:c2:4c:0f:e0:
f1:bb:ab:33:f0:2a:88:1c:90:c7:fc:32:24:b8:10:
b7:9e:d2:13:97:fa:11:a1:70:d7:f7:3a:c6:22:3a:
76:59:2a:14:48:65:83:7a:96:45:53:90:98:be:cc:
58:78:0d:be:aa:33:5e:31:5b:f0:c6:9d:22:2b:a0:
a1:29:e8:5b:e7:a7:0f:c7:fe:8f:71:51:b0:ea:4d:
de:8f:28:4d:35:c5:ff:31:e5:a3:9d:cd:0f:a3:0f:
60:0a:a1:b4:a5:0c:f9:77:db:35:d7:75:c0:e5:36:
ac:79:98:7e:ac:b6:f8:ab:71:b1:fa:ae:e2:03:27:
9f:1a:ef:e4:c5:1a:54:9b:60:87:95:a6:74:cd:1e:
a7:9f:ff:78:e8:25:45:bd:61:23:c8:41:c2:f0:c1:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:67:F1:77:F1:81:A2:77:87:4E:5C:55:7C:33:83:9C:65:F9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa11e926-6b0d-30a4-8c50-7688bdc830a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d2:af:7f:b8:52:78:3e:23:86:02:e3:a9:da:12:e0:f8:d5:
83:b1:cc:71:f6:0a:1f:43:b5:b8:10:13:a3:26:38:2c:ef:b6:
cc:85:14:b8:e9:d5:6a:73:47:71:be:b4:2e:45:06:87:62:77:
c2:33:11:28:41:56:78:06:6e:46:f1:f0:79:ad:d8:a2:f5:e9:
db:d0:2e:29:a4:e2:23:74:d0:59:ae:69:a7:75:54:32:82:a0:
f9:97:78:55:ba:84:90:94:5b:b2:82:55:d8:e6:54:23:b0:1b:
07:e4:9f:e0:c5:34:fe:b8:18:de:53:15:ff:61:ef:04:1f:98:
a0:73:82:20:b1:af:60:07:5f:d5:0e:57:a6:c3:7b:59:e1:fc:
43:ff:05:d7:72:d5:1a:96:25:f5:83:db:8c:b6:4d:94:87:7c:
6e:ae:5f:3f:70:21:10:86:a5:90:7b:7e:8f:a0:4b:3f:4a:32:
75:db:f7:d0:e2:b7:22:db:67:58:e9:54:38:e1:68:ff:41:8d:
8c:a4:2a:98:55:ea:e7:b3:1a:1d:14:48:40:91:a0:ec:eb:a6:
11:d3:96:cd:34:6a:9a:7c:ab:f1:c3:aa:f4:a1:ff:29:54:25:
c9:76:03:48:59:25:7c:ba:34:c8:de:75:18:3e:2c:ef:e5:2c:
f0:09:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org