Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c921de27-0e8c-3992-9e47-a9d17387b340.roa
File: c921de27-0e8c-3992-9e47-a9d17387b340.roa (raw, json)
Hash identifier: DV19lyPBRHnmyKUKXCog88CBVhNaLL18pmM10FySr5s=
Subject key identifier: 90:8E:9A:E6:AC:DA:0A:3B:6F:9E:55:1E:06:24:D7:BF:63:33:23:1A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931390AFA3B92615359487C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c921de27-0e8c-3992-9e47-a9d17387b340.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 67.69.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:90:af:a3:b9:26:15:35:94:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=688118c6-be72-414b-8f76-7f4935185f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:0f:04:7d:4e:36:d5:63:bc:5e:3e:06:cf:
fc:17:c5:88:02:28:0f:ea:7d:52:14:2a:44:29:d7:
c1:c2:19:67:05:7f:64:3d:41:db:4c:32:69:dc:63:
c3:2d:f2:62:ca:f9:c9:81:4a:76:b6:15:d6:31:0d:
41:12:3f:1f:b0:4c:a4:d6:ae:a7:f1:11:16:90:ce:
09:30:95:e2:56:13:31:a7:c8:ba:4c:ca:78:84:dc:
ed:de:3f:5d:08:d9:b5:8e:d3:9d:2a:f6:38:6e:b8:
12:1d:9f:13:f3:48:9a:ea:f9:70:57:f6:64:e7:4c:
c0:f5:a8:c2:47:d5:fb:97:10:b6:7a:71:8b:2f:24:
b1:9c:ba:fa:43:b6:d7:73:94:a9:be:3b:cb:cf:9a:
e1:a8:2e:ed:76:76:1b:29:1d:ca:5b:cd:5c:c1:f2:
16:ef:0d:f0:4e:d6:6b:c1:1c:bc:fa:1b:41:8f:ec:
18:84:bb:74:96:b8:40:b0:f4:7d:22:91:f7:5d:7a:
6a:31:f1:ef:78:9f:2b:22:10:1c:1a:5c:27:f8:70:
99:f7:c7:f2:47:1d:48:38:68:02:30:58:f2:e7:ce:
e2:00:85:dd:96:85:e4:b6:80:f1:ee:00:1f:a0:3c:
1c:61:47:a8:3d:98:8f:8a:1d:07:59:82:01:48:08:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:9A:E6:AC:DA:0A:3B:6F:9E:55:1E:06:24:D7:BF:63:33:23:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c921de27-0e8c-3992-9e47-a9d17387b340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d9:d3:9f:4c:f3:1a:0d:1c:8d:26:e7:b5:40:f6:65:f2:ad:
c1:59:b3:53:9f:ac:83:c7:56:4c:ba:b2:76:d5:de:98:1b:bd:
b9:b6:0d:da:7e:cc:5e:73:57:c6:e8:c6:29:9c:57:93:b1:10:
ab:61:7d:84:71:69:e2:4a:d7:fd:0b:35:d9:87:8b:04:da:b5:
33:7b:6d:17:89:60:f0:31:54:4b:29:f7:1e:b5:45:16:4f:5b:
6f:7c:65:f7:1c:40:41:a4:97:bf:08:58:91:89:5b:01:2b:25:
50:d3:6f:75:0b:74:69:29:ac:6d:35:40:19:23:8b:16:9b:1c:
c7:fb:5e:82:e6:be:6d:d5:b0:3e:6e:6f:d0:9b:bb:8e:82:50:
e2:ac:bb:eb:0a:4f:61:70:e0:24:f1:93:55:ea:03:8d:41:46:
25:51:ad:c7:32:d9:25:52:fe:80:33:b4:d2:63:ce:03:f3:9c:
cc:65:59:0d:70:41:fc:c7:2d:b5:c2:a7:26:f8:ee:ad:9f:94:
82:18:f0:cc:2a:cc:10:20:49:a8:ac:17:55:5e:1d:0d:10:a6:
56:65:f7:f3:41:52:12:e4:e2:11:90:1f:c7:dd:56:40:b8:a5:
88:c4:ab:66:05:5d:1c:e8:fa:bc:ee:d5:72:c0:87:bf:0a:ba:
87:f4:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org