Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac901256-7c8f-3664-a3d1-7374c75b95fa.roa
File: ac901256-7c8f-3664-a3d1-7374c75b95fa.roa (raw, json)
Hash identifier: PnRksKkP4x+ImijR/qQM10Z7cME972/mtc5glBKRyro=
Subject key identifier: A8:66:C1:50:11:B3:FE:CD:17:1C:92:F6:0C:04:ED:7B:EA:B3:AA:24
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5A5C47442E6A3E92A9D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac901256-7c8f-3664-a3d1-7374c75b95fa.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 6579
IP address blocks: 209.128.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:a5:c4:74:42:e6:a3:e9:2a:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=91571754-b6cb-4848-ad67-834b0b4e94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:de:0f:8c:6d:04:26:0e:93:36:9f:02:54:
c7:71:11:c2:39:75:75:10:ff:22:fb:32:37:6b:83:
7e:b0:f9:53:97:1c:e9:da:74:aa:13:90:29:ed:16:
ba:31:c7:b7:9a:af:f8:ed:d8:f7:d0:64:dc:07:0e:
34:68:29:cf:9b:d9:75:bd:e6:00:69:ba:7f:37:0a:
de:d5:f4:e5:13:9a:9e:ab:23:a6:56:16:fa:74:9f:
61:2e:b5:e4:b5:7b:a7:a0:6f:d9:3e:f8:49:10:0b:
6c:33:9a:01:6c:cb:ab:17:c1:8d:fb:71:d5:9f:ce:
96:0e:db:68:fa:44:56:5f:8c:bb:4a:fc:0c:18:da:
e6:27:01:ee:7c:ba:cb:f0:b5:3d:68:56:80:8f:9d:
b3:56:39:aa:cb:c4:eb:0f:2a:ef:b3:a5:73:b9:65:
b9:a4:32:98:25:b7:9f:18:3d:43:4b:25:9c:ab:a3:
95:91:7e:7f:a1:c2:4a:87:00:95:10:7c:1d:b4:7e:
35:db:fe:e2:8c:7d:82:6a:e6:6c:fd:e8:de:ff:d7:
c5:27:8b:19:17:85:32:50:d6:62:be:86:7e:ed:82:
11:b2:48:25:cc:d0:b0:de:60:23:69:04:7d:e1:9e:
8b:1a:cb:fe:0b:4e:4b:e2:34:77:31:eb:0e:36:03:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:C1:50:11:B3:FE:CD:17:1C:92:F6:0C:04:ED:7B:EA:B3:AA:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac901256-7c8f-3664-a3d1-7374c75b95fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e8:7f:d9:50:54:44:94:ba:25:9d:e0:18:e6:c6:41:90:65:
3a:13:b7:33:ed:12:05:33:19:cf:96:f8:fd:1d:4d:a6:86:b7:
c3:87:43:60:a0:b6:8c:20:fa:d0:17:ee:2c:22:d0:6d:d9:97:
db:ff:ef:c2:83:16:9d:5d:e5:98:25:f6:cd:d7:27:ad:86:6f:
77:08:80:01:2e:8f:0c:1d:f6:7a:98:45:2c:d8:9c:c9:ff:f2:
65:ba:34:88:11:7e:ad:7c:0a:bf:84:bc:61:55:da:54:f8:ad:
e3:78:3e:ac:a0:85:65:73:25:91:7d:8b:18:f8:57:3b:91:cd:
c4:14:ba:bb:b3:fe:b9:4d:a4:4b:2c:73:98:af:97:4e:e0:32:
63:3b:47:ba:54:9a:31:c8:f1:d3:2b:c3:04:43:18:2c:3d:f5:
a6:2a:76:34:3c:5a:5f:d8:3c:0f:c8:5b:3e:99:32:53:6d:e8:
37:d9:00:28:bb:0d:db:7e:09:3d:b1:0b:4a:44:5b:24:6e:5b:
9d:2e:4e:56:58:f5:92:13:91:20:73:e7:0a:36:2b:44:c0:34:
12:88:1d:95:7d:c6:49:b3:9f:4f:07:a7:2f:5c:84:ab:90:96:
65:e9:72:20:42:98:f1:8a:99:77:97:24:54:52:d4:8e:ef:d0:
45:e5:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org