Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb4d80a3-111e-39f1-ba00-8aacf0156104.roa
File: bb4d80a3-111e-39f1-ba00-8aacf0156104.roa (raw, json)
Hash identifier: HQTZVQitDMZlVgr3scd0rdYHwUTplANkVUo/ClTeJiQ=
Subject key identifier: 2A:96:D5:88:B7:41:60:03:4B:5D:C7:D3:48:F2:7C:89:5F:3E:AA:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315D831C96430FCECE28D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb4d80a3-111e-39f1-ba00-8aacf0156104.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:d8:31:c9:64:30:fc:ec:e2:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=93f37f75-b3c1-4c5e-9b01-8ec14cb78206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:00:73:8d:13:8e:84:b8:31:89:a4:de:5d:
4c:56:af:83:b7:1f:13:e1:b4:9d:1c:ff:03:d8:48:
e4:d5:77:ca:0d:54:44:b5:c6:5c:aa:ff:cb:7e:d1:
ba:6f:e3:9d:81:b4:d8:cf:0d:c1:c1:3a:1d:bc:51:
ab:1a:96:ab:ca:9d:0b:6c:f6:ee:23:52:46:de:a8:
fa:aa:7c:6b:4f:1e:61:de:ef:d9:a5:86:3b:60:05:
ac:e4:04:9e:c0:2f:de:07:5e:fd:13:89:25:29:cb:
40:28:81:bb:b6:f2:7a:e4:0e:67:ef:60:90:6e:62:
51:21:35:3c:bf:0f:a0:19:ee:38:dc:7a:36:17:6a:
1e:07:9b:8f:0b:73:4b:7f:af:6b:2b:54:41:38:fa:
6e:9f:fd:3d:b2:fb:c5:dc:82:9a:bd:8e:23:13:be:
97:ab:8d:14:ff:ed:4b:9a:a9:2a:86:af:2c:43:07:
2a:2f:49:1e:6b:2c:91:03:c5:0f:b5:e3:9b:cf:55:
0b:d2:98:ac:2d:0a:80:13:2d:b4:76:1a:7e:70:1c:
96:42:d1:e0:05:95:79:da:b0:30:e9:b5:f5:4b:d5:
cc:d6:0f:57:cd:32:cb:3d:93:0a:d0:5a:5c:b1:19:
b5:50:44:9b:76:d1:2b:55:cc:37:db:82:c7:81:8b:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:D5:88:B7:41:60:03:4B:5D:C7:D3:48:F2:7C:89:5F:3E:AA:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb4d80a3-111e-39f1-ba00-8aacf0156104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:43:d8:48:c2:02:07:ec:af:82:41:e3:29:69:c2:26:a2:5a:
c3:7c:a5:85:ab:d5:5d:99:88:33:62:3c:ac:8c:6b:51:4e:9a:
66:d0:fe:3f:8a:36:b2:fa:2c:94:60:1c:e9:93:aa:85:a0:41:
dc:f0:4f:cd:87:4f:93:5b:c6:33:86:60:ec:10:d3:cc:49:7c:
b2:ca:26:70:79:05:bc:77:8d:77:08:17:32:fa:5d:fc:55:19:
7c:f9:e4:9b:a0:2d:5e:61:e8:24:02:0a:b9:90:4b:28:02:4f:
67:2c:2a:ce:3c:96:62:f6:a1:92:ca:0b:d7:7e:78:a6:59:30:
5f:ce:df:d4:15:d9:0b:6f:7e:2b:0f:04:78:ac:7c:39:ad:f0:
6c:7f:3d:5b:a9:cb:b1:27:c1:33:75:02:40:8c:29:d4:97:57:
26:45:9b:44:ef:5b:8f:b1:c7:87:f8:52:e3:0e:5d:a2:b1:3c:
92:e7:6b:d6:71:34:e4:d4:c3:e2:e1:a2:ea:19:b1:3e:64:c8:
44:c2:0e:2d:1c:d5:ea:33:61:3d:f5:2a:98:eb:6a:5b:4d:9d:
42:94:8c:4b:69:75:d0:f0:83:55:e2:e8:e4:cb:85:8d:61:1f:
7d:6e:9c:c7:7d:45:03:6b:a6:bb:25:12:14:42:f0:be:c5:88:
17:ff:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org