Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbb8bae6-7e08-3e7d-9a4a-65ebde505b0b.roa
File: bbb8bae6-7e08-3e7d-9a4a-65ebde505b0b.roa (raw, json)
Hash identifier: zqKgnQg/t/5ZNYlAtuDqBpbFRWzynn+VX2T1z/6Zaq8=
Subject key identifier: 9A:64:FC:2D:7D:86:C1:A7:BD:09:A1:49:2B:01:9C:5E:66:80:B3:F3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE61DB6ABA1B7AD2B563A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbb8bae6-7e08-3e7d-9a4a-65ebde505b0b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 216.208.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:1d:b6:ab:a1:b7:ad:2b:56:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=b30345c2-72e9-410f-87e9-49096126dede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:97:2d:64:76:af:4c:61:2d:a4:43:53:d9:
35:db:52:0e:2d:9e:f8:e3:3b:4c:98:a5:b4:28:79:
eb:2d:22:49:00:da:81:ce:11:87:5e:e1:c2:88:b6:
01:0b:03:d7:84:d4:95:c2:a0:db:d8:7e:29:9a:f0:
70:8a:26:cb:c4:95:41:bd:d4:0a:e0:d2:d3:3f:1c:
ed:46:84:d2:72:24:7a:67:2d:52:8b:e8:1a:99:cf:
c5:17:15:97:34:f7:df:cc:09:9e:70:05:95:ae:67:
6a:a3:03:23:69:79:58:96:9e:9f:f8:64:37:cd:d7:
91:fa:c0:d0:c2:06:fb:09:07:54:15:ef:d2:c5:39:
46:a2:53:b0:38:c5:c8:be:8c:76:2f:bb:96:7c:a1:
41:18:48:9a:87:8d:ba:67:da:40:59:8f:ca:14:8f:
8f:cb:a6:8f:fa:a0:a9:63:e2:bb:2f:73:3d:95:cc:
28:e9:20:4d:17:ea:db:b6:0f:cb:f0:e1:df:0d:89:
56:29:41:6a:b2:cd:d9:9f:28:b0:9d:67:e1:99:77:
3a:b9:c7:e4:99:8f:1e:2b:1c:81:4f:5e:4e:ce:b4:
e9:c5:02:91:14:c0:48:40:a2:00:af:86:ff:14:63:
dd:89:5a:4d:07:d1:04:b3:18:58:7e:0e:5a:ed:6e:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:FC:2D:7D:86:C1:A7:BD:09:A1:49:2B:01:9C:5E:66:80:B3:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbb8bae6-7e08-3e7d-9a4a-65ebde505b0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:bd:54:7a:d0:17:12:71:b4:93:74:d5:f1:1e:2b:2f:6d:a7:
4e:a9:49:98:d8:a1:4c:57:3b:e8:37:ed:e6:89:90:d3:fd:77:
b8:00:af:ee:31:8f:a6:f9:d7:6f:fc:91:65:b6:89:92:6a:63:
bb:02:40:be:01:f7:71:75:69:c3:cb:9e:96:43:18:12:27:b9:
81:00:88:91:10:ac:44:33:40:45:fe:45:18:2d:c2:42:24:51:
b2:d7:92:36:db:ac:6f:21:11:5d:2a:79:35:95:c2:63:4e:04:
77:3c:1e:00:91:00:b4:c1:aa:67:ff:5a:d1:ac:36:33:8b:3a:
e3:16:0a:cf:b9:cc:10:b6:67:5e:7d:dc:70:e1:35:d0:8b:ec:
b8:bc:79:94:fa:fc:ee:1d:cb:f2:20:83:e9:79:ea:62:24:50:
56:06:b7:92:a7:d8:ef:b5:96:2a:a0:4c:da:01:ab:e5:64:db:
0c:d0:9e:e2:11:18:71:e7:8e:21:76:e2:a7:85:83:b0:16:6e:
c0:23:78:b6:ad:a0:68:1f:ac:f9:53:c9:b7:a4:4d:2a:e6:c9:
bb:02:84:93:6f:59:d5:5c:1f:14:75:f9:e2:8d:a9:15:8c:67:
d9:8a:9e:d0:89:38:ad:a4:b9:a5:5c:3d:dc:eb:b6:6b:3b:eb:
58:cc:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org