Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad8e23a5-0b09-3ede-a3be-75775cdbdd08.roa
File: ad8e23a5-0b09-3ede-a3be-75775cdbdd08.roa (raw, json)
Hash identifier: DSvkcTTJVszBZ9W9gsdYtLK8cXZJDzi0LIU15aSYLyg=
Subject key identifier: F2:4C:BF:5C:98:3D:A7:F5:F6:E5:60:6B:61:1F:F4:F9:20:C2:ED:79
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313FEA4C7B22D27564C7C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad8e23a5-0b09-3ede-a3be-75775cdbdd08.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 76.70.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:fe:a4:c7:b2:2d:27:56:4c:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=cf0d2435-a86c-4f47-9823-5a848f3c2c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:06:c5:1d:26:42:ec:f7:56:1c:1d:a9:ca:
7f:58:3c:89:a8:94:cb:52:e2:13:b1:d4:21:cb:ee:
54:0e:f4:5b:ee:32:a7:05:6c:c2:82:c0:e6:1b:b5:
1b:53:0f:c2:e7:36:83:58:51:4d:1d:95:e6:43:14:
83:35:9e:d3:a1:34:35:b1:95:d5:ce:1b:f5:d2:06:
23:c8:30:09:6e:e6:90:ef:af:80:50:1f:e0:77:7c:
c3:db:28:74:8e:98:b2:cb:35:71:54:f5:6a:23:a9:
83:4b:ad:3a:e4:55:42:96:9d:ec:45:6c:a2:1b:73:
b6:b8:3d:cd:14:e3:c2:20:2a:e2:ce:41:be:5e:f4:
79:8a:7a:38:34:cf:88:2d:7f:45:4a:75:49:d7:d9:
d7:d4:e6:15:dd:6f:fb:1c:2c:06:a7:a5:4f:2c:e6:
f8:17:df:d2:f2:2c:c2:40:5c:cd:72:92:d3:bb:e7:
66:e7:c7:5b:fe:84:02:6a:99:00:8c:61:c7:85:18:
3b:00:a9:49:2b:d8:af:76:6c:77:a2:8d:3b:e4:0f:
67:54:2e:df:81:a6:3c:0c:16:c0:35:de:8f:40:08:
79:c3:ff:e2:61:ec:5e:96:a5:9b:4d:b5:8c:51:98:
2b:a6:48:c1:b3:be:87:d6:5c:fa:cb:ce:ad:30:03:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:BF:5C:98:3D:A7:F5:F6:E5:60:6B:61:1F:F4:F9:20:C2:ED:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad8e23a5-0b09-3ede-a3be-75775cdbdd08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1a:68:d1:67:4f:7a:38:03:62:d7:5e:04:3b:ab:c3:8b:db:
bf:dd:92:ac:10:6d:0e:41:eb:07:f1:b9:6c:d2:3a:a0:37:cb:
bc:96:f6:74:f5:99:ee:96:a2:28:f5:06:70:0b:66:9d:99:ab:
d9:db:34:71:49:65:0e:cc:00:b6:fc:67:4d:5e:43:6e:80:31:
94:7e:66:8b:ca:d1:6b:30:33:d0:2c:e3:a1:21:6c:82:fe:6e:
8f:19:1b:94:04:a9:96:50:ef:73:66:6b:ac:ac:46:ef:64:77:
b7:ab:e3:67:da:61:8b:54:8c:59:de:3f:89:95:84:29:5f:10:
32:8b:bc:05:f9:8f:b5:5e:fe:16:38:45:55:60:19:c1:c5:68:
c3:e6:e4:a5:6b:1c:e6:24:ac:21:21:3d:6b:c8:21:7f:74:ed:
d7:5b:f8:25:33:21:61:60:e3:14:12:b0:13:aa:59:99:14:2e:
41:ba:5e:6c:d3:d3:28:9e:90:12:8d:c8:00:6c:94:03:88:a5:
4b:d6:15:b1:c4:7c:8b:87:50:0c:0e:64:b4:62:96:0e:fe:d3:
17:e4:4c:2b:a8:c0:82:56:c9:8d:ae:e7:7f:e2:fb:37:e7:74:
58:7c:9b:74:65:05:80:98:c5:1c:96:54:57:37:2f:29:6d:19:
a5:5a:fe:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org