Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b98a39d0-62b1-3639-8f86-a8347e6126c2.roa
File: b98a39d0-62b1-3639-8f86-a8347e6126c2.roa (raw, json)
Hash identifier: fo08fbfDuDWtQ/Tb/UUZG1gxpHJmZf5x6TEUaMqs5/I=
Subject key identifier: B0:D4:7D:35:BF:82:80:5E:1F:E6:2A:30:32:DD:19:09:F3:FB:08:AB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB09AB7DDE2DF7F50DDF100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b98a39d0-62b1-3639-8f86-a8347e6126c2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:9a:b7:dd:e2:df:7f:50:dd:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=90525474-6ecf-4266-9f40-d88a53b48328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:14:8f:42:1c:66:24:4a:1b:22:41:6a:95:
38:ff:17:33:f6:21:ba:a0:ae:55:44:cc:d9:d0:19:
6d:ed:02:eb:75:38:a5:74:39:0e:04:71:4c:6a:2b:
4e:5f:e7:08:3e:d9:6b:ac:b7:ce:e5:97:e3:0d:54:
11:2f:cd:17:a1:85:21:cb:95:30:08:35:7e:c0:f6:
99:55:aa:71:3a:f1:f7:b0:17:b0:40:d9:41:23:f8:
83:bc:4a:16:20:c4:1c:3c:71:57:2e:f7:e8:cd:eb:
70:d6:f0:6c:47:ce:ea:2f:e0:71:e0:da:76:5f:9b:
8c:4b:29:42:63:f7:6f:b9:7a:dd:98:8e:f8:5a:c0:
86:fe:3b:66:61:cb:50:19:69:64:61:78:e9:df:d0:
26:21:2b:fd:68:1a:96:d6:16:48:04:9a:d2:9c:24:
f6:bd:7c:36:58:c2:fb:2e:3b:55:4f:55:e2:e2:c9:
ce:61:6d:09:e2:dc:20:b7:c4:66:f0:2a:4b:24:ec:
22:d7:59:77:a5:7f:e3:b9:db:4c:32:2f:3b:5e:f2:
91:7d:d3:a9:67:6b:cf:ed:1b:16:1a:fb:2b:5f:f2:
8c:17:01:ea:a9:51:b9:2c:f7:ae:e5:72:6f:a7:73:
76:96:3c:36:55:4a:51:6b:45:7d:c1:29:90:0c:a7:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:7D:35:BF:82:80:5E:1F:E6:2A:30:32:DD:19:09:F3:FB:08:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b98a39d0-62b1-3639-8f86-a8347e6126c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a1:76:91:93:2d:d7:73:e7:8e:59:47:e3:cd:6a:98:83:9f:
6c:df:67:34:da:a5:64:f4:b9:51:8f:c9:1c:dc:81:74:94:bb:
d7:f5:16:f0:13:88:43:2c:ec:ad:48:ac:93:e2:59:a3:3a:d0:
68:f3:80:c4:ba:7d:36:62:26:48:3b:5a:fe:5b:f2:d2:e6:c7:
fe:13:09:5d:1c:b2:7b:28:b3:b5:58:c1:83:cb:5f:62:06:11:
b8:01:80:f3:15:27:4b:ae:9c:5d:9f:af:39:8e:3f:0e:1b:76:
43:c7:4f:a6:b8:f1:03:ed:6f:8a:c3:54:7d:04:80:bc:1a:15:
45:0c:f8:dd:39:a8:41:2e:6a:ca:98:b2:94:bb:d7:a3:4c:0b:
bc:cf:19:53:38:5a:7d:27:d6:76:94:54:aa:94:fe:91:27:d9:
8a:67:87:a9:ca:70:0a:47:76:4c:14:48:9d:76:6f:37:38:c1:
8a:ad:d2:a2:81:1e:df:89:2d:36:dd:9a:65:ac:e8:32:17:f8:
80:ad:7f:33:38:0e:b8:e4:87:a0:09:a9:e1:cf:94:4d:8d:18:
06:1a:96:78:a1:2b:42:1a:32:2a:0e:4b:16:90:83:d8:25:b8:
b1:50:1f:6e:49:71:69:15:88:df:5a:02:0f:10:68:59:bc:37:
25:c9:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org