Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af80a6db-e2fe-35cf-86e7-41970f9ffc73.roa
File: af80a6db-e2fe-35cf-86e7-41970f9ffc73.roa (raw, json)
Hash identifier: /fIayyz8JTPIj7X3GjhyfUYyuabZ5Mz+me8O+CX4RoQ=
Subject key identifier: 92:F9:27:4A:C2:37:83:98:EA:06:48:13:BE:58:E3:F4:20:E0:A9:08
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0D80EE43513082773F2C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af80a6db-e2fe-35cf-86e7-41970f9ffc73.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.236.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:d8:0e:e4:35:13:08:27:73:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=a97a2b47-68cf-40dc-b150-b198442470c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:41:ff:7a:7b:43:38:80:73:98:c2:45:db:
2d:72:7d:a5:d8:27:1e:36:88:26:06:d4:27:0f:97:
33:4c:cd:91:ef:65:b6:fc:7b:2b:2f:10:72:cd:15:
05:d0:26:65:a1:07:24:41:70:25:d5:c8:b4:e9:72:
23:d9:fd:fe:0b:ae:56:7d:8e:d1:f8:e8:4d:a1:af:
64:f5:4b:1b:f1:2f:c6:ef:69:71:d1:37:56:8d:9d:
ca:e2:34:2f:fa:cd:ff:0c:7b:36:70:a7:b6:ea:68:
06:19:e7:b6:84:47:50:7f:62:29:b5:93:fe:d5:81:
44:b4:97:21:d3:00:09:41:43:21:19:02:8d:62:53:
30:aa:4d:5d:7c:48:cb:cb:08:5c:2c:92:d9:47:2f:
85:03:90:6e:18:e1:91:3e:52:f9:6b:2f:ac:82:9d:
7e:20:4a:53:d6:6e:44:3f:f7:a1:8b:3a:fc:98:7c:
15:de:42:de:ef:27:e2:7f:78:7b:ce:ac:72:a0:c4:
7b:91:25:a4:bf:46:4a:eb:14:24:8f:b3:05:a7:19:
8c:04:f2:f8:77:a2:60:03:d2:24:bb:34:6e:f2:5e:
95:69:ec:66:b3:38:ca:84:9a:09:24:5b:5d:93:ba:
78:8b:1b:e6:c3:b0:60:6c:84:22:a8:2a:30:f4:c5:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:27:4A:C2:37:83:98:EA:06:48:13:BE:58:E3:F4:20:E0:A9:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af80a6db-e2fe-35cf-86e7-41970f9ffc73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:fd:ae:9b:06:d0:12:44:a7:a8:11:bc:78:1a:59:64:c6:bc:
4a:b8:2a:97:f3:f7:4d:ab:26:2d:d2:f5:6c:30:d6:fe:a3:5c:
f3:b8:aa:93:18:da:8c:76:96:6d:6c:d9:c9:d1:47:93:d8:07:
cd:33:f3:e1:b2:aa:92:0b:65:47:c4:cd:33:a0:5a:c1:a7:50:
a1:12:c0:ea:9d:51:02:4d:79:97:d5:68:f7:e9:48:af:d7:c6:
ca:e8:1b:9d:a7:25:99:ee:07:d9:ee:a1:10:9f:7a:e7:c3:20:
7d:61:79:9c:88:e3:a8:21:c7:f6:d2:8d:5a:02:1c:97:ba:7c:
10:37:57:62:5d:3f:be:a4:6e:c1:a9:14:32:e9:ac:ee:b6:8e:
e9:72:46:5a:07:36:22:99:7d:82:0b:73:bb:6a:5c:43:bc:93:
91:3a:89:77:08:04:ca:c0:63:52:3d:20:1a:a6:f5:ec:9a:ab:
d0:d2:be:7c:5c:54:b0:d3:6a:45:08:2b:b1:5f:10:7b:9d:26:
cf:c5:69:a5:68:c8:0a:86:2d:3e:65:de:c4:c0:8a:ac:eb:5c:
46:c9:35:c0:86:8d:1d:0f:b4:13:46:d0:9b:e0:5a:41:5d:ef:
09:cf:56:2f:25:a2:62:70:e3:b4:84:c7:2e:0c:57:54:d0:0d:
32:ee:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org