Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acf86092-daf2-37ae-8d2d-8192aff3bcf5.roa
File: acf86092-daf2-37ae-8d2d-8192aff3bcf5.roa (raw, json)
Hash identifier: uZ02WzpP72/yHP90lP9hPDzC+Wj4zFHh5txXlYxv8uM=
Subject key identifier: AC:87:F4:5E:E0:E6:57:EB:51:48:E7:34:F3:6A:B7:6B:D5:CA:7E:27
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE6657259AD139F1396FEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acf86092-daf2-37ae-8d2d-8192aff3bcf5.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 216.209.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:65:72:59:ad:13:9f:13:96:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=4820091a-f50d-4c71-9656-90dce57534c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:70:dd:80:fb:cf:62:09:72:28:0d:91:3f:
e1:2b:84:33:36:33:9f:dc:b7:b7:d5:bd:f4:9d:26:
38:d5:05:07:a0:76:ec:e9:b3:fc:dd:cd:f9:27:6d:
30:51:2b:a3:c0:2e:5b:02:d0:17:35:89:1d:bb:15:
99:66:19:44:54:92:d4:ca:a9:b1:ff:be:2c:7d:83:
18:69:6c:78:d3:38:b1:6a:82:d6:2c:66:14:32:a9:
3d:d3:0b:bc:04:fb:9c:64:0e:a0:32:a3:a5:db:b8:
23:f7:31:f7:aa:51:f7:a8:a9:72:55:a3:5e:95:b9:
08:ec:b2:40:cd:2a:1e:2a:33:3c:22:65:54:16:23:
4b:16:60:f3:5f:69:d6:31:e0:d3:c6:8d:79:07:d5:
ee:ff:e2:98:d1:22:5f:7a:15:28:23:61:cf:8f:a2:
92:a8:8c:ef:b0:61:b4:e9:28:94:d7:c7:1d:8a:83:
a1:28:5f:ea:82:b1:02:32:d8:33:36:1e:9e:fc:61:
a4:d5:c9:f2:4b:b0:9a:52:85:79:b6:06:dc:98:a6:
11:f6:33:6c:de:01:c2:5b:5c:fc:a4:46:98:eb:fc:
c9:d5:38:56:1f:3d:23:d6:50:f8:cc:c5:13:cc:e2:
8d:b4:2a:3e:d1:71:0c:08:41:dd:17:f1:1d:75:1c:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:F4:5E:E0:E6:57:EB:51:48:E7:34:F3:6A:B7:6B:D5:CA:7E:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acf86092-daf2-37ae-8d2d-8192aff3bcf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e5:f9:6b:a8:ca:3a:8f:a6:0f:5a:db:64:22:a9:53:03:08:
ab:0a:ec:57:22:cd:c6:e8:92:95:f0:52:d8:18:ef:34:70:4b:
9b:ec:af:d9:76:e6:a5:44:cb:82:f1:70:d5:6c:35:19:0a:3f:
13:b9:23:80:32:5a:7e:ad:2a:dc:39:2f:c2:cb:bc:25:c4:4f:
dc:5a:1f:30:3f:8a:40:bf:3a:70:0d:11:c5:1b:a6:f4:ab:fb:
b9:c9:80:ca:b3:90:a8:b5:71:8d:26:49:8c:4b:a1:56:a3:10:
7f:26:d8:8c:a4:4f:36:18:52:72:cc:2b:90:b0:f8:df:57:52:
09:5a:78:e2:b8:75:fc:fd:f6:33:74:68:5f:25:d4:97:c0:01:
f7:9c:58:17:cd:c0:c9:84:60:5f:70:0b:8e:95:2c:91:39:3b:
e4:0a:82:c6:f3:6c:4b:62:f1:da:61:45:0d:1e:b6:bf:35:39:
0c:6e:24:7e:15:80:34:88:9b:82:20:f5:9f:88:27:ea:03:b9:
15:0b:1d:36:3b:8a:20:11:33:60:e9:6a:fa:28:b7:80:23:8c:
56:8d:7c:af:8d:17:e6:13:7f:1a:8b:fd:b3:b5:f8:ce:17:9d:
19:e6:f9:6b:97:69:e5:4c:0d:8e:2c:2d:43:c5:eb:20:06:37:
0c:97:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org