Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2b303a-bd91-3df6-b66a-00d075095332.roa
File: ca2b303a-bd91-3df6-b66a-00d075095332.roa (raw, json)
Hash identifier: G52th7fmo+feXgUDnftFFN1UTPI17AgWehJiTbcUcjA=
Subject key identifier: 4A:1A:17:B5:52:2D:4E:07:B8:E4:F4:E6:FB:34:D9:81:B8:65:4B:A3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314F36E0C2E246D5B2EEA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2b303a-bd91-3df6-b66a-00d075095332.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:f3:6e:0c:2e:24:6d:5b:2e:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=924b1822-1f27-4bc5-8c33-bc0f4da937ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:fa:9e:a6:06:a3:c1:52:71:bf:c8:36:28:
e4:06:1f:b1:d8:bd:ba:a4:24:b1:4e:09:f5:8a:60:
94:54:b1:9d:d4:9d:61:65:4f:ab:bc:4b:9f:3c:d7:
e0:18:a7:d4:b0:07:7f:ae:4b:97:28:a2:c2:25:e3:
d4:12:cc:9b:c6:26:a1:b6:2c:9f:a2:4d:fe:d0:a9:
ff:3d:1b:44:8b:0b:2f:1e:15:86:1d:f8:6c:f4:80:
5f:92:11:f3:3e:6d:d7:e1:1e:85:93:ba:0e:ca:ad:
92:af:8f:b1:ff:73:7b:9a:99:41:71:6a:80:3f:f0:
3d:10:d9:fc:83:34:07:fb:c6:b8:14:0f:2d:09:87:
59:0c:4b:98:fd:38:1e:6e:7f:98:53:d3:b9:b1:92:
3c:13:8b:72:10:1b:0f:bf:35:a5:6f:d2:c8:4a:41:
20:56:33:c1:d7:c8:a3:7b:52:9f:e2:5b:df:bf:bd:
85:01:61:95:bd:8e:99:3a:b9:bb:c8:a1:fa:70:24:
89:a4:62:e0:f9:88:58:83:b6:2b:ee:50:fd:56:0f:
28:42:c6:77:ba:32:65:f0:61:e4:99:d7:e3:f2:34:
8b:bc:40:a4:92:d9:b3:f1:5b:72:4d:af:71:b1:d3:
9c:78:02:bf:34:28:cc:d5:ed:fb:86:47:a4:aa:2e:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1A:17:B5:52:2D:4E:07:B8:E4:F4:E6:FB:34:D9:81:B8:65:4B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2b303a-bd91-3df6-b66a-00d075095332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fe:f3:04:3d:ec:88:c6:01:3c:63:19:27:11:cc:57:4e:34:
75:4c:0d:82:de:e9:b6:df:53:96:ff:4e:fa:d6:39:99:ef:86:
6c:8b:4e:d3:a9:a6:2f:4d:19:66:52:73:29:49:10:2d:65:2d:
5b:04:ad:8e:99:20:de:d2:59:27:00:dc:43:2c:ed:db:8c:4f:
46:4a:08:6c:c4:32:68:20:d6:3f:d8:ad:97:f3:0e:9e:64:7f:
7d:18:7c:20:dc:9a:26:74:10:54:a3:66:ae:d3:df:ee:9c:47:
fa:ac:d8:c7:cd:d5:b7:9e:71:b8:82:aa:8b:03:95:b2:91:43:
1a:cb:7c:ce:a2:af:86:13:7c:39:16:0e:84:e1:9b:d0:5c:e7:
00:bd:25:25:51:b3:a0:a0:de:d5:e9:e2:62:0b:51:7a:a2:95:
4a:de:34:60:f4:c1:13:b3:cb:cc:0e:30:d9:d6:7f:57:bb:e9:
d3:c7:0e:69:ff:29:55:d5:23:11:a2:81:8d:7e:a3:ed:bb:5e:
19:65:68:a5:cb:9f:bd:21:d8:53:c3:0b:96:dd:c8:24:b2:c9:
f3:0e:e2:a9:5a:0f:7f:b3:e3:a8:7c:12:6a:30:80:4e:6a:be:
0e:07:84:6f:92:74:2d:cb:5f:14:8b:4f:dc:d6:97:b4:fb:99:
31:67:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org