Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af2da7a6-081f-3e03-9aaf-60356eb1c924.roa
File: af2da7a6-081f-3e03-9aaf-60356eb1c924.roa (raw, json)
Hash identifier: xE1ASYF82T4JTnBfQhPEkyBmpO4R5tvoKih1qiGdgUo=
Subject key identifier: 22:64:A9:B6:A0:B9:CB:7A:BE:F1:E7:44:B4:05:20:A8:E8:1A:39:4D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE413CCAAFAD8C5D8ADC780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af2da7a6-081f-3e03-9aaf-60356eb1c924.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 12132
IP address blocks: 67.70.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:13:cc:aa:fa:d8:c5:d8:ad:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=8538ba6b-2c77-4316-8dc9-943d9efa9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:56:94:8f:89:30:c0:52:10:66:05:b2:60:
88:f6:57:e5:0f:b6:88:a7:4e:67:f3:39:1b:e9:ab:
94:ad:25:59:d9:12:50:df:cd:84:a9:49:8f:01:45:
4e:53:0e:73:d1:73:dd:96:07:6d:fb:5c:d5:b3:3c:
15:3e:54:51:9b:05:8d:c7:56:b8:55:0a:f3:17:88:
50:1a:20:c4:f7:fc:7e:00:4b:8f:22:ca:9c:2e:fd:
81:61:f6:71:5f:09:50:50:2d:ce:df:bc:2f:c8:05:
29:e2:ae:f1:2e:2d:88:fd:d1:67:d8:0c:e1:d9:c8:
0a:f9:37:45:0b:23:08:24:d6:58:71:bf:61:d0:b1:
b1:80:17:76:e1:56:10:f8:62:9f:92:9e:92:26:67:
50:0a:29:6c:32:4f:d6:bd:67:11:31:62:f9:2a:ff:
b5:cf:36:40:96:09:dc:7a:86:eb:26:f1:b7:62:65:
8b:62:94:1b:35:02:83:ca:4c:44:14:14:aa:db:11:
16:21:32:50:f3:11:b2:e8:c8:4d:f1:e9:68:4b:fa:
f2:ad:90:d2:9c:68:7e:9c:db:9a:11:3b:03:45:c3:
c9:5e:f3:10:b9:e0:5c:65:32:c9:71:81:56:33:60:
a8:63:db:aa:09:68:9b:27:9e:5d:ac:85:0d:df:d8:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:A9:B6:A0:B9:CB:7A:BE:F1:E7:44:B4:05:20:A8:E8:1A:39:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af2da7a6-081f-3e03-9aaf-60356eb1c924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1d:5e:92:c0:92:8e:79:e3:56:5c:7d:28:4d:40:b9:f4:5d:
ef:51:ff:ca:db:da:b2:64:63:1b:18:26:ec:39:58:b5:ef:d3:
d0:db:f8:ee:e5:30:93:90:94:ee:0a:27:e0:2f:7b:c2:e6:d5:
b4:31:f8:27:8d:92:32:88:03:c2:c7:8e:61:1f:ae:5f:b3:de:
d0:c7:a8:fb:33:8a:d7:95:9f:da:4a:52:8a:a5:f1:95:97:54:
db:f9:66:c0:79:d6:53:8c:04:da:bd:55:13:79:c1:f6:02:fb:
52:72:06:1e:4b:68:08:62:05:2f:9f:06:7c:d5:99:ed:f5:d5:
d6:bd:7a:1e:28:b6:14:11:7f:a2:15:c0:2c:d9:80:b2:80:5b:
91:f5:1c:c0:c6:c2:6b:33:6d:b6:d2:a3:35:ad:62:cd:84:f8:
c1:15:6f:04:5e:fb:ea:c3:43:1c:92:5c:92:89:7e:26:a8:4e:
9b:49:72:3c:be:ea:61:db:b6:6e:0c:6d:da:29:b8:51:df:d6:
07:0b:cf:a6:0b:b5:b0:c9:9a:0f:ef:8e:ef:84:a9:e2:42:df:
b1:f3:82:a3:1e:4d:91:c1:65:66:e9:39:03:8a:2b:55:4b:4f:
5a:7a:15:11:d9:57:2b:a1:66:7c:30:7d:49:a8:73:ec:f6:60:
3e:9a:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org