Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cae1636d-ef30-3576-8a10-0aa9836bc00c.roa
File: cae1636d-ef30-3576-8a10-0aa9836bc00c.roa (raw, json)
Hash identifier: ddlYBlw/tNXhXMfvtpOAbwai3tOFtqIplPH9UHg0QuQ=
Subject key identifier: 34:E4:4C:71:60:AC:24:8F:D7:1E:C2:C2:E3:57:80:D0:30:92:F8:50
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931577CCC7DDA4DC19F8FB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cae1636d-ef30-3576-8a10-0aa9836bc00c.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.47.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:77:cc:c7:dd:a4:dc:19:f8:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0a476ffc-2550-4b73-b024-4c1565e4b1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:a7:5e:6d:21:eb:fd:a6:d7:b2:e6:b7:98:
dd:a2:c2:38:ee:86:c6:73:fd:9e:2c:fd:e8:83:76:
dc:81:9c:f2:de:5e:4e:e0:dd:11:5c:d2:be:79:16:
dc:39:41:de:4a:cd:43:4e:a6:dd:d0:6c:12:11:1f:
27:f6:30:b4:78:54:c0:ab:0b:dc:97:19:ef:ad:e2:
5f:aa:77:90:4b:3e:a1:59:fa:62:b5:4c:a4:06:b2:
d3:53:43:96:39:08:f5:32:55:6d:a0:63:58:b5:e6:
a5:b3:3c:20:53:4d:0c:46:45:dc:54:8a:75:a5:1a:
25:4a:8a:75:e3:22:e6:32:57:48:88:f6:09:5b:fc:
78:30:58:24:90:0d:34:a1:81:ba:f3:53:80:7c:2a:
cb:f0:b7:44:4b:9d:39:f5:34:62:c7:83:8b:0a:ba:
c1:cf:aa:17:d6:aa:37:50:a9:31:3b:d8:88:cd:15:
34:68:ee:c5:7c:76:59:e9:13:d0:cb:e4:e7:44:4e:
84:8e:a0:ba:98:66:ac:ff:2a:51:51:47:c3:20:15:
0d:28:1c:09:84:07:4a:d3:83:a2:34:08:fd:8b:12:
62:45:7e:9f:18:2a:92:e3:e9:ae:d4:5a:4e:4f:9e:
e4:f9:a1:ef:8b:67:79:eb:83:c8:61:bb:f7:78:93:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:4C:71:60:AC:24:8F:D7:1E:C2:C2:E3:57:80:D0:30:92:F8:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cae1636d-ef30-3576-8a10-0aa9836bc00c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:20:0a:50:1b:b0:d1:93:8e:87:86:05:0b:cd:4d:c5:1b:51:
5a:78:cc:92:e0:65:0c:3f:97:38:77:fa:9c:dd:a0:ad:b4:48:
3b:f7:94:7f:a1:a7:e8:b2:89:0d:e2:f5:1d:bb:49:43:18:a5:
c4:7f:1e:ce:a5:b6:97:53:41:db:c4:1b:5d:eb:89:66:27:17:
6b:f8:71:84:c8:58:98:b1:f3:b2:32:e4:e4:c6:95:d4:5b:0a:
5e:e1:ac:ae:92:c7:c3:b3:a9:7e:05:a8:e8:94:cc:dd:af:7c:
2c:08:6c:2a:07:97:bc:d1:fb:70:17:ca:e4:e3:03:d8:8e:35:
99:89:99:12:2c:dd:78:87:b1:63:ef:52:83:91:29:9d:56:50:
5e:cb:fa:f2:a4:24:2b:8a:9a:d2:cf:60:d7:27:4a:db:78:60:
0b:f5:9d:3c:86:76:3b:44:34:00:76:3a:04:3f:54:d3:c7:90:
7f:b2:1c:09:a7:ab:c7:e5:48:35:0f:db:b6:09:37:25:c6:83:
75:a2:af:a5:b0:c6:8e:fa:22:7e:fb:1a:7d:84:22:c1:f7:1c:
6c:ac:f0:ed:89:8a:f2:63:a3:9f:68:7f:79:7b:80:5f:e1:5f:
3c:a9:c3:0f:78:03:31:69:91:6d:c5:9e:17:19:a1:c3:bd:b3:
55:a9:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org