Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd47cf54-9b72-3744-8631-5c6d5e7ec64c.roa
File: bd47cf54-9b72-3744-8631-5c6d5e7ec64c.roa (raw, json)
Hash identifier: dO2NZhQ7QNRXt5eZ/IGIQd3kpSRcxG0gMS4P0fbZWpQ=
Subject key identifier: 7F:25:03:9A:0B:D4:C6:CD:DF:B0:01:94:64:93:20:D8:D0:27:42:4B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB04E6683F6F8748F6D8C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd47cf54-9b72-3744-8631-5c6d5e7ec64c.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 25946
IP address blocks: 206.47.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:4e:66:83:f6:f8:74:8f:6d:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=fa53ece7-3f9b-4d3a-b564-685e441020b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:de:15:c6:9f:86:84:90:76:04:14:0c:74:
bf:52:64:73:81:6a:d0:b1:9d:04:f7:16:5d:60:0e:
36:e5:d3:c5:82:7e:e9:08:17:d6:e8:a0:0d:38:e9:
9d:f2:09:12:c7:37:3f:ff:c5:38:0c:11:ad:82:13:
2a:24:aa:8f:87:a6:c2:7a:52:60:95:30:42:38:e0:
9c:2c:41:db:07:77:14:ce:6d:9d:64:de:c0:88:f1:
80:c6:e5:3c:20:a4:20:ce:01:a9:be:52:db:b3:1b:
8a:e2:19:c3:74:c5:fc:e7:72:be:73:0d:5b:a2:22:
e4:ae:7f:0c:1f:47:bb:d5:03:08:1f:10:ad:05:12:
de:d0:24:64:0e:84:6f:39:88:e7:19:83:22:d5:45:
64:b1:8f:05:10:ff:97:aa:73:39:48:d2:25:ec:2e:
ed:70:c3:bb:1e:7b:76:07:ad:5e:5c:fc:64:ca:46:
c3:07:02:a6:5e:6e:1d:bb:3d:53:99:15:48:23:a6:
ab:63:8e:74:5e:92:19:39:5a:f2:3c:01:67:25:df:
a3:0c:31:e9:8e:b7:2f:21:73:83:d7:12:04:5b:ee:
39:36:f4:e4:38:d3:1c:3b:72:20:74:b4:4a:2b:a8:
16:47:d0:3b:36:f7:49:d3:59:7f:95:59:96:86:b0:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:03:9A:0B:D4:C6:CD:DF:B0:01:94:64:93:20:D8:D0:27:42:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd47cf54-9b72-3744-8631-5c6d5e7ec64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c8:7e:6b:90:e6:76:87:6a:2c:90:19:4a:7c:e1:58:39:d2:
de:96:2b:25:91:1a:6b:bb:5e:f5:a8:a4:6e:74:4e:ff:c0:2f:
e9:c3:0e:b1:64:e0:d9:f8:c4:9c:a3:b1:11:d7:7b:88:33:54:
66:71:1c:74:cd:aa:ee:3f:3b:ca:22:ee:91:6b:52:22:ef:b9:
f8:5a:0e:b5:84:16:d5:ce:f7:8d:b6:56:c6:2a:e4:04:30:e7:
39:21:90:83:f7:fa:52:fe:49:8c:f4:81:59:f6:71:86:77:5d:
9c:42:7a:2e:27:2a:de:a8:2c:78:a4:e2:f7:0a:cc:38:3d:da:
56:af:45:eb:7e:ed:95:df:58:bf:1a:68:6d:60:d6:4b:4b:f3:
2d:df:ff:86:78:51:4c:1f:c5:e1:1f:67:fe:b2:bf:e0:29:0b:
80:cc:56:29:3c:a0:98:7d:d1:b1:0a:12:7a:e1:a6:b3:c3:9a:
d5:4a:81:7a:f9:69:2a:c6:b2:40:b0:fa:58:54:ce:7d:e0:bd:
c2:10:82:9a:1c:c9:15:f6:69:ee:5d:c9:73:30:fb:d2:46:37:
0e:7c:19:cd:a0:8c:6d:b2:70:59:77:f8:72:96:27:a8:fb:30:
d1:cb:47:ba:34:37:33:46:65:9b:b1:2b:69:3c:7b:0c:a9:fd:
71:38:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org