Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c68619ce-2389-3d5d-a31c-97a675218944.roa
File: c68619ce-2389-3d5d-a31c-97a675218944.roa (raw, json)
Hash identifier: 9RVKYOlQ6TV9lg70K8b0Cds7I8LIx8YiorNMla62W+U=
Subject key identifier: 19:74:C5:A8:38:CF:F7:B6:E8:2C:7B:CF:34:45:3D:EA:48:DD:5B:64
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF7522699270ADE1336E45C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c68619ce-2389-3d5d-a31c-97a675218944.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 74.15.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:22:69:92:70:ad:e1:33:6e:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=0df9ea98-8cba-43ef-b0a0-5a1750a81f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:1c:6a:11:61:90:7e:fe:4c:ef:cb:8a:3e:
b6:31:9b:c3:b6:58:95:d9:64:c4:15:dd:94:62:e3:
c5:23:03:d2:17:ad:74:05:c8:19:31:8f:ed:77:03:
02:45:c7:0f:dd:25:69:ef:e8:fe:10:cb:55:b8:54:
0c:0a:0c:12:77:38:0a:09:8b:cb:f3:3a:eb:f7:da:
d0:3a:c4:3c:eb:ab:dd:8b:e4:71:1c:c6:be:16:de:
09:95:4b:5f:ce:9d:3f:06:2f:ec:3b:51:4c:f7:1d:
bf:5e:fb:85:23:3f:70:1e:03:5a:4a:bf:c7:f1:d8:
a6:2d:a4:9e:85:83:ed:9f:84:23:e1:c9:19:40:90:
c8:2b:b6:d9:52:8a:c2:1b:ef:5b:e8:20:c5:45:45:
c7:9e:6a:9d:6f:d3:d6:dd:c5:bc:68:97:c1:16:f4:
54:bd:aa:f6:90:8f:53:80:7e:da:a0:91:e7:6c:2a:
66:53:aa:ac:15:75:7c:b4:6b:8a:30:ef:96:77:0f:
56:04:57:0d:2b:50:bf:3b:f4:98:78:36:33:2b:93:
e9:f8:b6:a0:ee:c7:24:43:57:17:72:d2:f2:ca:da:
44:08:72:01:05:41:bb:a7:46:8a:3a:c4:6a:43:aa:
9c:93:68:95:8d:60:bb:03:14:68:d1:60:0c:80:83:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:C5:A8:38:CF:F7:B6:E8:2C:7B:CF:34:45:3D:EA:48:DD:5B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c68619ce-2389-3d5d-a31c-97a675218944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
74.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:41:e4:bf:0e:65:1b:ed:90:53:ea:df:36:d1:53:ab:9a:f2:
8e:e4:ea:bc:fd:1e:92:95:c6:1c:50:85:3d:d6:16:60:6a:bd:
ba:11:75:fd:fb:ab:0d:cf:aa:2e:60:a9:9d:5a:6b:95:4b:0b:
26:6b:2c:f6:e5:c3:b1:65:65:0d:b5:2d:57:17:f8:45:93:aa:
b0:e6:c7:d6:7c:91:6e:1c:03:bb:e9:62:c8:4a:fa:b8:92:e2:
d3:11:8f:db:a6:82:16:4f:8b:72:c9:7a:3c:bd:c0:20:d7:8a:
ee:b0:69:a7:68:f6:3d:bb:8f:48:4f:68:c0:3b:2d:e1:87:1b:
85:6a:50:58:6d:d2:72:f6:14:c9:f0:9f:a0:9e:ba:b9:0f:61:
f0:ed:66:05:e3:b7:d0:34:2b:88:a4:f7:f0:bb:d3:6c:8a:a5:
b0:5c:dc:26:ad:e7:77:b7:2d:69:c8:f2:45:34:cd:f0:82:16:
cc:ce:5a:49:d6:3b:c1:07:e9:29:d4:d3:46:bb:1a:8d:8c:e7:
e3:b8:16:dc:81:c0:66:34:91:54:95:8b:de:13:7c:37:25:28:
85:79:e4:b9:86:60:e2:a4:38:a3:ca:04:06:90:08:0b:eb:85:
c9:fa:47:b6:0c:d8:9d:68:4b:e2:65:dc:33:f7:f6:34:2d:80:
0a:34:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org