Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5ffa38-a40a-3ae6-b9b6-89890f1aba69.roa
File: be5ffa38-a40a-3ae6-b9b6-89890f1aba69.roa (raw, json)
Hash identifier: xlsU+kz0RoVJ10XAP/Hb45hrp+S67oywT6ylYtNQEWI=
Subject key identifier: 04:6E:29:2B:C0:7C:22:EE:97:6F:CE:80:C6:C5:F4:BD:7C:72:20:AE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0AE366AC01EF557569444
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5ffa38-a40a-3ae6-b9b6-89890f1aba69.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:ae:36:6a:c0:1e:f5:57:56:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=619adedc-74e3-481d-98a8-afc087e7c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:18:15:25:13:12:d2:f5:f4:b8:5b:53:a7:
85:dc:65:82:b2:92:f6:16:ec:a7:66:0e:d7:d7:89:
92:5b:6e:56:a1:40:a6:79:ce:01:5b:07:13:ab:9e:
0b:e2:57:80:a9:12:c1:32:5c:b0:96:e6:3d:fb:6c:
4c:c4:5e:2f:a7:f8:c0:30:0c:49:f6:70:37:d4:af:
63:6e:18:90:68:18:13:88:b6:8c:1a:cd:5c:90:1b:
e3:16:f6:b8:90:98:b6:8c:1a:72:e2:88:11:64:47:
2e:8a:c4:72:0a:78:96:a5:cc:9e:22:af:77:a3:8b:
57:37:34:49:9b:78:d3:b2:1a:8a:e2:3b:ff:a7:9e:
37:cf:38:08:40:6d:32:4c:c6:a1:d4:d0:4b:d9:e9:
f2:08:02:25:da:a1:f0:67:ed:c5:7b:75:37:71:5e:
b5:b4:dd:9b:a8:23:5a:ac:fd:fe:83:c7:b8:8d:df:
d6:77:26:54:dd:5c:5f:2b:47:3c:26:1c:96:db:79:
fb:5d:e7:79:a7:e9:31:40:fa:07:19:21:ba:e7:d4:
8c:09:9d:90:9a:03:65:84:e3:c5:88:6c:45:9a:ae:
26:b6:d5:08:81:26:49:e7:3c:fb:6e:f9:f3:22:bc:
bd:f6:a7:54:44:05:60:b1:ab:ab:8f:54:d2:fe:64:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:29:2B:C0:7C:22:EE:97:6F:CE:80:C6:C5:F4:BD:7C:72:20:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5ffa38-a40a-3ae6-b9b6-89890f1aba69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:66:39:28:0d:27:be:17:0e:a9:a8:2e:50:4c:47:3f:b5:40:
7e:1e:4b:c7:7f:ef:3b:9e:b4:45:22:ca:02:54:57:4c:e3:df:
da:4f:b1:be:bc:1e:a0:c2:92:52:76:30:6b:e2:cd:49:c3:34:
30:bf:a5:18:a3:f3:e0:19:a6:da:31:44:8b:58:07:0c:c6:11:
f8:58:cf:78:97:a8:dc:b6:4f:21:73:b2:af:bd:bc:b0:22:ca:
69:47:38:5e:0c:09:e8:bc:da:28:4a:1b:ad:a3:b7:62:02:9f:
b5:c1:69:cd:cb:ae:0d:41:f8:11:42:aa:16:e1:4e:68:eb:ec:
a9:08:77:98:dc:16:3c:9e:99:af:0b:82:c1:17:f3:29:56:97:
17:ba:0c:40:90:dd:6c:e2:aa:2b:5d:7d:af:e5:d0:8a:4f:44:
83:49:e6:a9:1e:a7:e5:24:52:7d:31:af:b9:81:50:a8:5a:27:
36:ad:94:f1:6f:4d:87:d6:2a:c4:31:fb:79:d1:6e:07:11:1a:
64:1b:e4:59:b3:bc:cd:a2:c5:80:84:21:14:f6:fe:17:6b:76:
c8:90:db:ca:cb:32:0f:28:95:a3:7f:a8:fd:78:74:5e:4e:36:
c5:47:2e:e0:36:14:e6:e7:9d:62:fe:38:bb:ed:99:ac:d0:94:
cf:de:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org