Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c847b939-22e7-3878-83e5-fced7b26fb03.roa
File: c847b939-22e7-3878-83e5-fced7b26fb03.roa (raw, json)
Hash identifier: JE8iMnngIEZWQLHtPXeqn3upXArmrwfeTgg+dYS9aI4=
Subject key identifier: 67:CB:AF:25:43:B6:4B:1B:6B:04:C3:EE:FE:BC:6A:14:7C:43:1D:1C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE654D0AAA7A9356BBA9420
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c847b939-22e7-3878-83e5-fced7b26fb03.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 216.208.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:54:d0:aa:a7:a9:35:6b:ba:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=9d91b490-8c36-4534-9414-9083d3716e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:de:0b:46:0a:b3:50:2a:c3:54:74:36:e9:
ea:e8:05:13:4f:c1:cd:51:c5:03:0c:89:65:8b:71:
77:22:e5:4c:8f:9d:43:c2:0a:fd:e9:bb:23:ab:4b:
55:ca:3d:49:2a:3d:59:d5:5a:81:92:58:ce:11:8c:
b1:94:a5:5a:5a:2a:94:21:12:47:f0:cb:a1:a5:b8:
64:13:14:d5:bb:22:80:76:13:22:4e:14:1f:86:5b:
3b:6d:ac:ee:e7:42:7f:18:17:44:8d:78:12:51:59:
f6:cc:69:b1:80:b0:b8:62:e6:28:a5:f6:04:5c:e7:
d6:db:5a:80:ae:ae:07:4e:ec:2c:cc:c5:e8:41:0c:
ab:37:71:f2:10:50:ed:9a:fe:e8:44:6f:16:a7:b6:
28:df:c2:16:84:a6:14:a0:9c:31:c9:af:57:7e:0e:
f0:b5:0a:ad:97:0c:46:48:79:8e:b2:77:b3:21:7d:
d3:d4:3d:ea:f7:10:cc:1e:6b:1d:80:3e:fb:3e:4a:
d8:eb:bb:9b:eb:f5:a3:01:24:f0:6e:83:20:ff:5b:
99:82:72:06:5a:b3:de:42:bd:c6:97:21:e9:a3:8e:
a0:48:ed:11:58:c7:62:57:8a:3c:6c:4f:62:c9:4f:
3f:e0:08:48:02:c5:13:4e:6b:80:cc:02:67:fa:26:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:AF:25:43:B6:4B:1B:6B:04:C3:EE:FE:BC:6A:14:7C:43:1D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c847b939-22e7-3878-83e5-fced7b26fb03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:bd:60:eb:9c:d1:4c:8d:97:5d:e1:51:52:ff:c1:42:0e:78:
87:1b:65:80:d3:69:27:ce:0d:9f:fb:08:e6:fa:19:1e:f6:ba:
aa:fc:cb:a4:39:93:fb:7f:fb:18:cc:64:87:ad:4d:ea:b5:f3:
57:b7:00:82:11:eb:3e:65:4e:f7:71:4f:cf:04:ea:66:68:00:
19:4e:70:90:57:b6:8e:e3:22:ec:21:cc:7f:b7:12:fd:69:63:
47:41:6f:86:fb:20:4e:58:d5:8d:9a:1a:c6:55:6f:07:ea:f7:
82:b4:b2:85:15:65:4f:d3:5c:79:35:9f:ce:21:2c:be:62:90:
35:2e:36:d8:e4:a1:76:9b:b4:26:b7:b6:05:53:10:32:af:cf:
ac:b5:85:ce:78:ef:34:06:eb:9c:f8:97:cf:96:a1:68:40:f0:
2d:4c:7e:95:25:80:bb:8e:99:bd:ba:44:c8:a7:6c:a4:44:b5:
56:bd:71:10:b1:57:ee:d0:8c:a0:d2:3c:8b:60:2f:42:89:20:
7e:dd:ca:f4:e0:b2:bf:e6:a2:87:40:71:55:13:80:23:c3:ef:
15:2d:c2:1b:fc:f6:11:a2:ff:48:19:0c:e6:c9:06:b0:b2:70:
fe:cd:54:2c:0b:ff:2a:61:12:12:94:e1:e8:c5:47:d0:b9:b7:
e4:f6:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org