Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7858945-1779-399b-be9e-150e5b71461c.roa
File: c7858945-1779-399b-be9e-150e5b71461c.roa (raw, json)
Hash identifier: KUgMkHnnA7JggtfSvZjxDg7QU1YV1mi2BbyWXV+rmWA=
Subject key identifier: CF:9F:76:22:BA:5E:9C:77:AC:5F:D6:40:43:3E:03:FB:0C:07:E0:6B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB031A5E15C7B81D778E580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7858945-1779-399b-be9e-150e5b71461c.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 397168
IP address blocks: 206.47.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:31:a5:e1:5c:7b:81:d7:78:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=2af66587-c834-4d85-a477-0b7e60964c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:8b:64:3c:8e:9e:67:9b:3f:b6:40:89:71:
28:76:a1:3d:55:f1:2d:6a:cc:26:33:73:ef:3e:8a:
d3:3b:dd:4e:ad:a3:0f:7f:af:0d:71:3a:1d:79:b6:
95:b2:06:9f:bf:65:c2:9e:1e:9c:e9:04:7e:97:bf:
24:e7:86:eb:87:f2:9b:56:f5:50:dc:68:36:24:49:
91:38:40:c0:c4:4f:38:7c:60:1a:9b:1c:be:d1:a4:
7a:96:97:b8:92:ca:ca:7b:3c:13:a9:90:f5:e5:51:
87:a2:9f:a2:09:58:6e:4e:77:09:93:13:5f:61:d1:
ab:14:07:d8:79:d3:6e:0e:ab:31:cf:c6:10:58:e1:
c8:11:cb:25:e9:f0:e4:08:48:48:d5:7e:c0:e3:b0:
dc:da:20:b8:15:74:bf:78:69:8c:9c:70:14:ce:fb:
f4:80:35:79:82:78:e0:12:85:6b:ea:6f:c1:34:fc:
d8:40:cb:7c:63:0c:c3:fb:97:70:13:60:3a:26:85:
56:e6:02:f0:4b:ef:59:a2:50:e4:64:b5:68:2d:45:
b5:c1:48:8e:88:2d:2a:fd:52:04:80:cb:c7:56:2d:
50:81:e4:5d:59:2c:45:0a:39:e8:00:61:94:14:03:
77:06:93:b0:f5:ee:f9:7d:25:0e:79:dd:38:0f:9d:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:76:22:BA:5E:9C:77:AC:5F:D6:40:43:3E:03:FB:0C:07:E0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7858945-1779-399b-be9e-150e5b71461c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1e:66:3d:5c:67:04:5a:f8:e5:80:35:10:3f:4c:90:00:dc:
47:ee:92:fa:c4:ec:4f:d3:95:a9:da:f1:ee:aa:42:37:93:d2:
13:2f:47:18:35:39:2f:b9:2d:c0:f9:30:75:7a:bc:07:57:6c:
59:32:a8:7b:60:6b:2b:33:6e:52:49:87:e6:7d:4f:18:11:8c:
38:91:3c:67:95:cd:09:27:e9:03:1a:a1:20:7d:be:29:41:46:
f8:d6:4b:25:93:af:47:02:2e:c8:f4:34:b2:00:a9:60:b9:22:
d2:3a:63:61:8f:01:38:31:69:3c:11:11:ba:dd:d1:d6:a5:be:
b4:7a:a5:00:3d:24:36:e9:51:ac:5a:6a:27:ac:a8:f9:2e:a7:
3d:e9:14:18:d5:e6:45:13:47:31:b1:e6:d5:ba:2d:f8:78:3f:
1b:9d:28:5d:fd:fd:ae:23:c5:fe:be:8f:de:71:1d:3b:fb:e4:
e5:18:55:85:7f:87:67:c2:73:20:76:79:d9:19:6f:10:8a:aa:
07:e6:80:ff:4e:79:b0:a3:39:ec:95:fb:42:40:fe:80:cf:3a:
21:5e:f2:db:90:c6:c2:c1:38:b4:5f:df:2a:c9:d4:91:e4:4a:
ff:93:e2:96:82:3c:28:e8:89:e5:c3:a6:c1:26:52:df:6f:84:
24:6c:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org