Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11eafc0-02b2-3117-8fc5-99b6f2d32313.roa
File: b11eafc0-02b2-3117-8fc5-99b6f2d32313.roa (raw, json)
Hash identifier: UBgxgAkSKcLioZEN3dy/UE3+42hmdBHCKI9/MrVAxwQ=
Subject key identifier: 80:8E:67:11:78:71:C6:CC:E9:9B:46:AD:AC:05:36:82:4B:99:32:CC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315F12C6198B89762346B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11eafc0-02b2-3117-8fc5-99b6f2d32313.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:f1:2c:61:98:b8:97:62:34:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=052ac543-9308-4cbc-813d-2cd8a5108999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:e8:b3:dc:c9:c8:b7:69:b7:57:be:ae:28:
47:03:2e:27:03:89:a7:d0:99:81:f4:6b:89:fa:56:
c9:31:1d:e4:2f:7c:71:03:d5:16:19:2d:f4:bf:9a:
75:22:bb:74:02:dc:b0:66:57:d0:c8:92:f4:03:d3:
9e:52:f3:04:2a:fd:fa:fa:df:b2:0c:9a:2a:bd:dd:
d4:2e:c2:1d:50:e6:29:4c:48:73:3d:2f:b7:cc:79:
0a:dd:99:de:f5:8e:2a:11:5a:0f:f5:ac:b2:86:94:
b6:de:65:07:bd:74:07:4c:04:77:97:a1:12:19:6d:
bd:d7:1b:cb:f9:65:a0:eb:fa:26:ef:d5:79:76:f2:
e0:5b:a1:7f:34:73:7f:cf:1b:5d:c9:49:f9:17:e0:
16:67:0b:74:c9:6c:8d:29:c5:39:b7:b0:8c:ab:d1:
e8:44:15:64:5c:77:42:46:66:53:fe:25:3f:dc:65:
4b:2f:76:86:5d:af:81:64:48:19:49:a8:be:0a:64:
b1:15:f3:14:51:97:d1:0c:0b:20:67:41:93:7f:a8:
d8:64:91:6a:b6:b0:1e:f9:8d:d6:58:c5:46:94:56:
22:95:82:d0:9c:99:34:aa:c1:68:09:2a:a5:1f:79:
3c:7d:4a:37:5d:a4:c2:a1:14:14:26:25:28:11:8d:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:67:11:78:71:C6:CC:E9:9B:46:AD:AC:05:36:82:4B:99:32:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11eafc0-02b2-3117-8fc5-99b6f2d32313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f3:81:2b:2b:b3:ba:de:0a:7e:8c:91:d1:88:11:98:9c:be:
f4:44:3a:04:ca:a4:2f:60:33:4e:ad:7f:2b:57:ca:a6:44:d9:
07:b6:aa:89:ef:39:90:d8:75:0f:b4:ba:89:00:8b:4b:25:36:
c4:0c:42:4c:25:37:39:38:68:22:80:19:4c:f7:a7:6f:41:8f:
77:d2:c9:5c:60:dd:f7:ca:a9:89:4b:a8:48:ba:9d:f7:21:71:
4d:75:35:1a:c0:ae:b3:b5:57:ab:8b:5c:40:8e:52:18:fa:05:
81:44:8c:ae:b5:75:4b:4e:38:00:71:56:a0:e6:a3:75:e7:2e:
fe:31:53:a1:16:e3:06:d9:24:5b:d1:5b:2a:84:f3:7f:f0:62:
2c:7a:88:53:5a:c1:f8:22:c7:2c:fa:77:30:50:01:04:54:48:
9d:6b:47:3c:b9:8a:ad:5b:30:05:87:ea:36:f2:ff:8c:5d:e6:
07:06:eb:ff:5d:d7:f6:c7:8d:a1:6b:01:42:31:28:37:69:37:
5e:12:90:20:1f:55:cb:56:6c:22:67:24:e3:e0:c6:7e:15:af:
15:8d:41:b6:0d:7f:d6:9d:bd:25:2b:5a:4b:14:c1:c3:bf:0a:
22:d9:64:08:1e:f3:e7:f4:85:bd:9c:9b:76:37:ae:f0:87:bd:
b3:a3:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org