Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca1af24f-df0a-3da2-9599-2b3235423fa5.roa
File: ca1af24f-df0a-3da2-9599-2b3235423fa5.roa (raw, json)
Hash identifier: XzXoonzXOdaJVARab9Mn+7AcEfFoJg9l/hX7OHRcJB4=
Subject key identifier: 5D:17:7C:9D:D6:C6:11:0F:56:54:52:0D:4A:0B:02:F4:C5:CA:BA:52
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5A8C63878A3BF9AD08B40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca1af24f-df0a-3da2-9599-2b3235423fa5.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 40575
IP address blocks: 209.128.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:a8:c6:38:78:a3:bf:9a:d0:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=47cdae3e-92d6-49c3-b20c-e9ffb3c34f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:9b:65:ad:a5:4f:91:0b:38:da:80:90:33:
90:14:24:cd:36:65:a6:11:41:45:94:d0:cc:6d:a4:
8e:54:0d:05:f1:de:60:86:cc:aa:ef:59:9a:31:37:
9e:5a:44:c7:8f:d2:36:32:50:b6:94:86:5b:8e:7a:
e2:54:0b:65:79:d2:c5:d5:e7:bb:5c:4b:72:a2:d5:
88:81:56:62:63:31:2b:19:12:df:a8:f2:ef:11:56:
01:a0:cf:e1:2d:a4:5b:87:6e:d7:ec:c9:70:39:81:
8d:00:90:85:c4:08:34:ef:d8:28:4d:14:9b:a9:1c:
89:6e:9c:5d:45:6a:0a:64:c3:f8:c3:27:26:b4:24:
f8:83:67:88:d3:31:2a:fd:bf:55:0b:07:c0:a3:bb:
c8:95:07:80:23:e1:a9:44:ef:40:66:a5:fb:11:9b:
5a:ac:3f:c6:d3:63:c8:fb:52:fe:8e:88:2c:59:d2:
5b:b1:e3:3e:37:a0:9b:06:65:e0:18:f8:a1:00:41:
d6:21:f0:89:ce:0a:f1:04:79:fa:89:18:05:b6:5a:
69:02:df:67:ac:c6:44:ba:a7:cc:29:0c:28:31:8d:
d0:0c:ca:33:40:5d:d3:9d:cd:5f:20:17:17:18:9f:
80:7f:85:2c:c8:c4:48:c6:2b:c4:c3:b5:42:a7:9e:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:7C:9D:D6:C6:11:0F:56:54:52:0D:4A:0B:02:F4:C5:CA:BA:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca1af24f-df0a-3da2-9599-2b3235423fa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:67:9b:e5:ba:0d:1c:72:ac:99:dc:3a:69:43:c1:a7:dc:f6:
e5:09:46:3a:b5:f9:6a:b8:44:c3:c6:0c:de:36:06:91:4f:63:
52:64:51:89:9f:4b:0a:0e:90:cd:c7:23:6a:09:bb:e5:bf:7e:
b1:6c:eb:74:70:b0:8b:ec:e8:2a:b0:c6:62:15:ec:c8:34:3c:
1c:be:f3:85:85:17:7a:5e:9f:d2:30:f7:39:81:8a:97:a6:15:
d8:a9:50:f1:e7:06:63:96:13:f5:bb:7f:22:eb:38:7f:08:42:
a3:99:92:4b:01:62:dd:95:2c:84:4f:36:23:aa:57:f3:95:cd:
c4:07:80:c1:0c:c0:33:b6:af:00:ed:4d:9c:28:bc:b5:34:02:
03:44:2b:69:29:4e:c1:34:42:f2:c8:ec:ad:17:2b:35:e2:ce:
96:3f:51:58:3f:02:b9:57:a3:a9:f8:0d:f3:fe:89:af:53:e9:
d9:9b:80:c6:02:0b:7a:e2:1e:ad:b9:c2:b6:53:46:18:51:25:
86:b4:cb:09:d6:2b:62:34:9c:41:01:83:0e:a3:06:0a:98:04:
a5:e3:cf:22:44:32:4d:42:21:5b:33:93:c4:a6:3f:9e:d6:c3:
cc:71:d6:e4:1a:ea:a0:e7:79:f1:07:06:c0:99:30:14:f4:c2:
75:b6:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org