Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1c2396f-521c-35a7-bec9-25cb4e3b6fb7.roa
File: c1c2396f-521c-35a7-bec9-25cb4e3b6fb7.roa (raw, json)
Hash identifier: 7OisqcDV9JoFZ4BrXW+GvTi5QZ4DndbYE75yJpSBqYY=
Subject key identifier: 9E:B1:51:D2:F2:0A:00:2F:C0:5B:41:34:B3:CE:60:D6:4A:17:D6:E4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE60A7D816E6438679FC780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1c2396f-521c-35a7-bec9-25cb4e3b6fb7.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 14112
IP address blocks: 216.18.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:0a:7d:81:6e:64:38:67:9f:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=448312aa-cf5b-4c97-8589-42600c138445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:0b:e3:6b:9f:31:cc:1d:aa:38:c1:f4:17:
14:c0:f4:c3:a3:da:6c:f9:05:5e:e9:18:0d:68:22:
54:8c:d8:54:78:21:51:67:41:d2:0d:6f:87:b5:61:
d1:7f:e1:6f:3a:29:46:d3:27:6d:fb:0d:f4:93:9d:
84:7c:67:ac:d5:f6:a2:04:7b:29:27:d6:53:16:42:
11:85:87:a2:cc:87:a7:57:99:98:ca:c5:d1:a8:4b:
62:8e:ec:29:c3:75:32:05:4d:cd:f7:94:75:43:8d:
47:90:11:a7:54:79:ab:a0:2a:02:3e:1c:63:14:dc:
8c:fe:3f:e3:80:b1:28:5b:7d:95:f5:db:11:ac:df:
45:69:5b:72:99:26:4b:8d:7e:1a:1a:98:05:f5:6a:
df:30:db:d9:0c:12:86:e9:a9:51:1b:17:74:86:22:
91:75:76:13:f4:19:81:d4:4a:55:5d:d3:51:76:61:
2d:a9:35:f0:ee:60:8c:77:e5:2e:06:eb:c1:97:16:
fb:35:ef:34:bb:5d:79:c9:10:af:fe:b3:9c:89:46:
cc:cc:1e:a5:67:cc:09:70:23:eb:6e:c8:a8:6e:21:
2b:f3:15:fc:85:60:66:b4:4c:73:69:ca:9b:38:d5:
bc:0a:97:42:bf:c0:cd:76:a4:43:d3:e9:1e:1f:23:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:51:D2:F2:0A:00:2F:C0:5B:41:34:B3:CE:60:D6:4A:17:D6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1c2396f-521c-35a7-bec9-25cb4e3b6fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:99:77:31:fa:1b:f2:53:78:bb:a9:e5:bb:26:86:23:ee:51:
ad:4e:dd:08:c2:c8:84:d1:3b:6d:0b:06:4d:63:5e:97:cc:39:
52:7e:56:ae:fa:01:81:52:0a:d7:7a:3b:af:2c:2f:46:72:ea:
c5:e5:87:d0:22:91:6e:59:04:36:f7:ac:da:3a:de:36:88:7b:
88:aa:22:87:3f:e9:77:09:f5:51:e4:4e:4d:34:f4:05:10:92:
50:f3:b8:a1:13:df:57:18:ac:ff:a5:ff:db:4a:e4:b6:c1:70:
49:85:6e:8b:5c:ab:ac:3e:e6:92:96:b8:f0:d5:1f:76:f4:b6:
11:12:59:b1:40:5c:13:f6:34:73:05:43:2f:53:03:05:eb:db:
ac:f5:6c:e5:7d:3b:10:c5:f2:31:6a:bc:40:89:f2:5c:6e:2e:
1c:54:57:e0:11:19:a0:ec:94:96:8c:2f:87:1d:19:e8:a5:3e:
1b:61:29:31:dd:0b:a1:38:8d:6a:80:b9:b5:a6:73:79:d3:8b:
99:1c:5b:35:5d:38:e3:28:8b:18:07:54:57:ca:dd:93:7a:fc:
a0:89:6d:61:6b:b4:05:64:f1:05:ed:3c:8b:08:28:36:36:70:
db:8f:7b:bd:07:8c:0a:76:4e:7c:27:07:a6:c7:69:6e:2b:28:
be:c8:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org