Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3d29159-95ed-30dc-9563-a24b4b07ee0d.roa
File: c3d29159-95ed-30dc-9563-a24b4b07ee0d.roa (raw, json)
Hash identifier: uFTFTQwcfTyjU+QgezWQtcvbgmptrkNlo99A8R3fWhs=
Subject key identifier: 37:9B:AB:31:C2:E0:72:AB:D3:F2:23:F4:26:12:EE:8D:A5:CE:94:32
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313B12AEFB9CD96B0751700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3d29159-95ed-30dc-9563-a24b4b07ee0d.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 69.158.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:b1:2a:ef:b9:cd:96:b0:75:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=dafa98a4-7a29-4385-87e6-df4d0cafd95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:c8:ee:ef:b4:ad:cd:4c:3c:e2:3a:9b:ac:
41:9d:dc:49:97:ff:ef:31:e1:4f:89:c5:12:58:4f:
60:12:ef:f9:2d:08:28:ac:fa:43:e3:9e:d2:8c:6e:
61:00:d9:f1:55:de:dc:42:60:89:b0:c4:5f:0d:2f:
96:4b:46:bc:ed:92:b4:c7:5a:ab:1e:f5:2c:5f:9f:
e8:54:bf:bb:70:d7:7b:70:ea:4b:de:cc:9b:c7:0a:
92:45:f4:47:c4:f5:fd:4d:78:34:5f:3f:e8:66:86:
5c:cd:5b:0f:77:b7:3a:e1:02:88:e3:43:8d:71:83:
36:0c:23:90:56:f0:21:3c:95:3f:d1:d7:ec:a6:92:
62:03:70:a6:82:20:b3:8a:07:19:72:00:e1:58:39:
e5:a9:66:ce:cc:ff:ee:c8:bc:58:0e:25:48:42:fb:
96:df:b0:a7:1c:1c:ca:3a:75:f1:ec:a0:c2:b3:b7:
ce:ca:e9:c2:7d:d2:12:8f:57:a4:4d:9c:6b:10:ec:
ee:b3:90:f2:eb:46:08:be:d4:16:71:a2:1d:72:94:
26:81:a5:78:b0:a1:15:a7:a4:9c:79:da:ea:d1:47:
52:3f:96:f0:1c:a0:f7:35:ec:7e:b5:73:62:e9:e0:
e6:4c:4f:b5:e2:31:f2:c4:0e:cc:0b:ed:65:fc:9c:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:AB:31:C2:E0:72:AB:D3:F2:23:F4:26:12:EE:8D:A5:CE:94:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3d29159-95ed-30dc-9563-a24b4b07ee0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
69.158.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:06:2f:02:ba:14:83:c7:bc:b7:b1:5d:32:23:2f:b4:60:67:
51:1a:d6:1f:c7:da:c3:86:3c:8f:5c:2e:e8:07:95:20:04:80:
b5:88:e9:b8:b1:0f:69:8e:c0:d8:89:55:53:0f:05:93:a7:d9:
99:3a:dd:3e:4e:ba:c6:b7:4f:45:e0:37:e7:f9:1a:bd:a7:fe:
27:4e:1e:1e:ff:1d:9d:70:46:a5:4e:cd:49:eb:b8:b4:73:68:
61:ef:d5:33:fb:1a:51:2d:17:1e:c6:9c:62:98:f9:62:b6:2b:
37:fa:04:25:2a:cc:25:b0:7d:a1:5b:48:95:28:84:a7:5f:45:
84:71:06:10:a8:4b:d7:b0:77:99:fe:85:6f:83:57:72:d1:24:
0c:e6:82:86:54:ea:2d:49:d9:2d:fe:b9:a0:23:da:f5:75:6c:
f4:ac:a1:85:e1:7f:0c:18:74:79:c1:07:64:81:60:1f:61:d6:
bf:ed:b3:ec:42:eb:80:6d:bb:d5:d7:8f:d1:4a:35:3b:1e:93:
58:16:2f:92:99:c1:49:0d:39:b1:68:6e:ec:8c:b9:25:68:be:
cf:1e:85:b2:9f:85:15:8b:26:8a:c1:80:b2:89:01:72:a1:bd:
4a:0b:b2:ef:23:ad:57:66:f0:39:61:37:43:47:d2:08:96:93:
6c:ff:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org