Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba667a9d-ad82-300d-be19-9c66ff3a2c3b.roa
File: ba667a9d-ad82-300d-be19-9c66ff3a2c3b.roa (raw, json)
Hash identifier: ArRuSsucS/ufnQv6R+AowT+Ql3FjALHhSxTA/hBRiEQ=
Subject key identifier: 59:E4:BD:78:00:38:5E:B4:CA:83:A9:52:11:A2:B5:99:C8:9C:5A:ED
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE590ADABDA49C3665D3000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba667a9d-ad82-300d-be19-9c66ff3a2c3b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 32441
IP address blocks: 207.179.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:90:ad:ab:da:49:c3:66:5d:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=f4bfce45-11c1-4dd7-8040-bea35decf259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:f4:bf:6a:88:0d:93:87:09:cf:2c:57:41:
ed:01:0d:56:d3:f8:bf:8b:48:b3:95:47:4a:68:06:
23:c4:74:c3:92:a2:25:d7:c4:4c:78:a9:e3:5e:cb:
c9:ce:91:e2:67:6f:f7:f0:ca:01:40:ac:ed:f0:89:
49:a8:38:dd:f8:33:e2:87:48:5e:18:1c:78:65:9f:
db:d0:04:50:df:5e:f4:af:86:6f:09:d6:5f:c9:80:
ee:55:5f:de:ae:48:a7:ad:59:ff:a2:63:ba:d1:e6:
3f:cc:02:41:f6:01:86:e3:ec:90:ce:c8:1f:07:87:
13:57:03:58:60:f9:3e:ed:2f:46:e2:a2:cd:c9:c8:
de:9c:46:65:5d:73:ea:3a:32:b6:33:0b:76:64:99:
a8:c0:99:26:f9:99:de:09:47:24:29:2e:07:7c:1d:
d0:f2:77:b3:c6:fe:1f:14:4f:38:cc:8b:37:a0:22:
79:bc:8d:65:00:15:64:f4:0a:d4:c4:02:f3:5f:af:
4f:a2:3a:93:f1:cd:2d:90:b8:f2:73:50:f1:e3:33:
f4:37:75:c7:20:25:76:bd:2b:38:c6:39:6b:2c:cf:
ab:27:d4:e6:89:09:d2:cf:08:db:11:95:ad:02:3c:
5e:45:c3:d4:9d:ef:a8:64:b7:6b:80:52:95:85:41:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:BD:78:00:38:5E:B4:CA:83:A9:52:11:A2:B5:99:C8:9C:5A:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba667a9d-ad82-300d-be19-9c66ff3a2c3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.179.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b5:d2:a4:f9:55:f9:4a:33:cd:e4:1a:df:e9:67:c3:7c:b4:
94:91:e2:95:9a:cc:c4:98:59:a0:f3:5a:48:64:4b:3c:4c:c0:
1e:24:f1:d1:ca:79:1f:3d:aa:86:9d:ed:2f:e0:94:a9:28:d6:
3e:39:e6:cf:8c:ca:69:2a:a9:2d:fe:1b:f5:95:5e:e7:9d:fe:
c1:05:16:c8:35:86:a7:a7:ad:18:12:03:f9:df:e9:c3:9e:89:
b7:dc:64:0a:af:6e:d7:6a:f8:6f:c7:0d:52:83:95:7b:54:fc:
ca:34:28:42:5a:da:f2:95:33:c9:1f:36:8b:75:c4:60:22:a1:
d1:ad:a2:1c:da:d1:6b:66:00:e9:c7:28:1e:ed:19:99:f5:7d:
63:44:49:df:ed:7c:de:ef:a7:59:5d:b0:2a:cf:36:b8:8a:de:
4f:ea:3d:88:96:38:44:6b:9c:15:2f:52:3b:56:82:aa:87:a8:
af:40:c6:6d:01:6c:5b:5d:5a:10:9b:d4:3a:e0:59:d3:61:73:
4b:5c:dc:74:76:c0:73:65:d1:20:58:e2:c3:7c:d3:82:e4:8a:
53:98:f2:73:3c:93:ea:9c:55:39:f9:da:a0:33:a6:16:8e:86:
5c:26:0a:1e:eb:1a:98:1a:03:5d:17:cd:d2:ca:d9:15:50:aa:
35:57:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org