Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4bbba82-2ecb-3d3d-8312-c9f877708005.roa
File: b4bbba82-2ecb-3d3d-8312-c9f877708005.roa (raw, json)
Hash identifier: MgAMHcrNAuGuWE4hcUMnnI74L4SqI07/LMzHMS0SJzs=
Subject key identifier: F5:44:6B:08:F2:DB:76:29:31:5A:95:0B:E2:2C:E3:C8:9E:35:CA:10
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE599C68745A0D40D1C6980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4bbba82-2ecb-3d3d-8312-c9f877708005.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 11831
IP address blocks: 209.17.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:99:c6:87:45:a0:d4:0d:1c:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=3a79b5a5-38f2-4c0d-8c3c-68b7373d5fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:8b:4b:5b:47:15:80:ea:f5:40:2c:08:fb:
2c:92:12:01:94:92:86:0b:9b:f6:cb:e9:dc:86:18:
f2:35:e5:1a:62:24:90:6f:fc:3b:ef:cb:ff:e7:da:
c1:4f:05:08:6e:13:44:6b:9a:7a:85:b4:ee:c7:c9:
ca:24:50:e8:1d:e8:c7:f6:79:9a:30:61:f6:1a:31:
78:a9:58:61:be:05:93:70:a2:fe:1f:4a:94:70:28:
96:0f:3d:97:99:c3:53:5a:28:ce:d3:a3:9e:59:fa:
f8:95:7e:86:22:e6:2e:32:5f:eb:84:78:fb:86:41:
f9:48:76:36:65:ab:94:6a:59:19:57:ed:23:5e:dc:
09:95:5a:46:c5:ab:e6:c4:77:c2:c2:16:f3:0e:02:
de:a5:41:cc:a3:70:2b:ba:01:49:62:d9:e2:36:67:
24:94:e0:d8:24:50:8d:61:fc:99:aa:a6:b4:c3:26:
e7:8a:43:6f:db:d1:0a:bd:fe:35:05:d9:37:a5:15:
37:74:fc:09:53:44:83:f9:6d:f7:a6:03:36:3a:0e:
a0:8d:fa:9d:34:80:b5:8b:04:a3:2a:09:5d:56:16:
88:14:42:49:59:2d:35:f4:d6:d8:5f:8c:ed:1d:67:
be:05:75:22:0e:fa:0f:a9:e2:1e:fc:a9:c2:b6:b2:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:6B:08:F2:DB:76:29:31:5A:95:0B:E2:2C:E3:C8:9E:35:CA:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4bbba82-2ecb-3d3d-8312-c9f877708005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:48:e4:a9:d1:6f:22:60:eb:d8:80:a5:4d:f0:5d:27:8e:5c:
d2:7d:0b:d2:40:c0:74:ac:c2:84:0a:a5:9d:fe:27:26:bf:cb:
d8:1b:2b:10:cf:e9:ad:eb:8b:d5:c3:cb:d4:89:c1:89:df:a7:
d8:d5:07:47:63:45:7b:62:67:fe:59:f2:8c:d8:cd:a4:d6:c7:
66:7d:28:9d:68:f4:b0:24:2f:7a:bd:22:44:56:b4:0d:e4:4c:
53:2f:82:77:f3:bd:a9:09:9d:6a:24:bd:04:c0:2c:90:a4:ce:
c4:6f:8e:34:c8:55:6a:2e:6b:71:43:dd:bc:d0:e2:11:7e:5a:
1f:e7:ca:a4:55:35:90:10:6e:7f:c8:76:52:64:20:16:66:67:
30:27:13:ce:21:6f:cf:5f:94:c9:a5:0c:6e:fa:34:78:20:15:
c9:3b:6a:a5:28:c8:38:d8:79:21:80:b8:6f:45:fd:1b:5f:f1:
0b:fd:cf:cc:9b:19:4b:55:12:03:29:db:c7:7e:81:97:20:d5:
62:4d:56:8d:6d:5c:53:8e:4c:57:4c:9d:fa:20:0b:9f:b1:f4:
66:f0:19:b2:30:d3:3b:f8:ac:d0:0a:90:2c:51:48:da:2d:43:
8a:2c:53:8b:28:54:95:ef:d3:ba:6c:5e:22:f6:3b:7b:90:53:
1f:d7:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org