Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3e77aa7-164b-331c-8229-0108dbd8973a.roa
File: c3e77aa7-164b-331c-8229-0108dbd8973a.roa (raw, json)
Hash identifier: g3zt794ANfcyhsWD3zHiVWUBq1BWChGhWLZ2O1i4+0A=
Subject key identifier: E3:90:A3:46:21:86:6F:E3:81:99:FD:50:B6:52:EC:AF:D6:D4:5C:60
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA12CE047097E921C5F43400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3e77aa7-164b-331c-8229-0108dbd8973a.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 36522
IP address blocks: 209.71.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:12:ce:04:70:97:e9:21:c5:f4:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=04eac48c-8ca0-4a3f-a45d-75ddd7377892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:0e:b9:cf:38:4a:7c:9b:66:1b:ba:1e:f4:
8d:a7:57:da:22:a3:5d:cb:4e:e3:78:f0:ed:64:60:
99:93:b6:dc:c8:2c:05:11:3e:3c:ad:33:62:72:b8:
b4:17:82:f7:21:5c:bb:25:b8:b1:98:2f:d2:49:1d:
c1:b1:7b:a0:6e:e9:6b:62:6c:90:20:d5:64:9d:9e:
4f:a1:02:35:55:e7:47:10:46:51:7c:28:36:9f:d1:
d1:c3:65:c2:99:c4:73:e2:51:ba:c5:f7:ce:af:8f:
ee:71:85:00:e7:c1:67:42:bd:47:de:7b:ce:e6:a9:
e2:da:06:7e:17:b0:4b:22:2b:fd:70:1e:b3:dd:09:
95:27:01:66:5f:71:b0:4a:9b:2e:ff:8a:f2:d6:2e:
a7:8b:20:66:8f:ec:8f:3f:3c:ff:2e:ea:33:a7:b2:
86:2a:5b:8a:76:e4:ee:da:08:4b:db:7c:a2:94:a8:
8c:cc:96:05:97:77:c9:35:56:74:c5:82:e1:97:97:
6a:95:4c:b6:64:0d:fa:3c:72:5e:07:42:f2:c9:d3:
62:de:99:d2:d6:e0:96:13:86:15:32:49:fd:c5:c9:
9d:f0:57:38:47:fe:e9:13:22:bd:71:94:a4:4e:d5:
a6:8c:46:bb:ef:bc:ee:51:b6:54:f2:69:f3:7f:0a:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:A3:46:21:86:6F:E3:81:99:FD:50:B6:52:EC:AF:D6:D4:5C:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3e77aa7-164b-331c-8229-0108dbd8973a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3f:8b:4d:fd:f5:25:2e:b4:e6:52:3f:1d:81:e4:98:f6:0d:
0f:4b:b2:62:90:2d:80:cb:c8:18:1e:3f:89:85:84:c4:6d:f7:
31:45:29:4c:9a:61:ad:35:72:71:9b:6b:45:43:62:cf:4a:29:
d4:5b:62:f5:aa:de:66:54:6c:4a:c5:64:0c:6f:10:55:82:6b:
e1:81:d7:61:c6:27:7f:b2:1b:55:51:58:13:cd:bc:99:98:79:
c0:6b:b3:95:98:0c:fc:0f:a3:0b:b9:c5:fb:1a:8d:9c:42:e7:
ec:fc:ee:9f:69:f9:f3:04:19:df:65:8f:ea:18:aa:4c:67:98:
c7:cf:90:e9:16:9d:4a:6d:55:16:e2:24:b9:5a:d7:6b:4a:83:
67:de:4b:a7:cb:d7:b6:05:b5:65:25:bb:5e:e3:9a:83:4b:36:
1a:25:1e:1e:c8:61:e6:85:e3:41:2f:f5:c1:a7:0e:b1:56:84:
cd:e4:e4:30:e6:61:c5:44:cd:57:d8:9f:29:3a:67:c4:e2:a2:
ca:57:a1:51:b4:8a:1a:91:40:95:c4:0f:5b:df:12:fb:25:85:
90:3e:e4:eb:77:17:95:ec:3a:85:a3:b4:07:ce:0b:69:67:cd:
15:37:c0:af:a5:fd:3a:71:f9:ff:bc:94:d8:4e:24:95:5e:95:
cf:bf:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 04:07:35 2023 by rpki-client on console-ams.rpki-client.org