Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd510b2f-6fc2-3f84-b54f-377f777e4052.roa
File: cd510b2f-6fc2-3f84-b54f-377f777e4052.roa (raw, json)
Hash identifier: JF3mr6z/r5mGsBx+ChrjziXDyN04Q3pGR/2uzP4Ck0k=
Subject key identifier: 88:24:A2:41:60:2E:89:90:6D:D0:C3:69:28:B5:83:3C:69:03:2F:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314EF5E48C94AE7B33B9D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd510b2f-6fc2-3f84-b54f-377f777e4052.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:ef:5e:48:c9:4a:e7:b3:3b:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a270a2f7-5498-44b3-98d8-b399482ec459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:a3:bf:fd:59:ce:80:56:f6:fd:b5:13:63:
6b:c7:89:aa:98:64:71:9e:58:97:b9:81:a5:0f:14:
60:cc:90:98:a6:04:ae:07:31:d3:a6:67:38:b0:52:
fa:61:f3:6d:d6:0c:c7:cb:72:29:0d:cc:00:ea:20:
02:cc:be:6a:f0:47:d1:04:dc:83:23:5d:e2:80:7d:
0e:e5:df:5a:63:c1:96:ba:1f:34:17:61:80:b2:37:
11:5f:ac:b1:ae:38:64:58:33:a6:5f:c2:c5:90:20:
d9:6a:dd:52:ad:97:46:ed:ba:6b:e1:b3:c3:2a:d9:
c4:05:b4:e1:6f:7a:ce:30:82:4d:00:8e:b6:68:07:
b4:95:76:17:7b:52:d8:44:90:ab:91:06:1c:ab:40:
60:4b:b6:37:14:70:7e:3d:7e:5e:55:21:5d:31:9f:
bd:44:fe:ed:68:cc:b7:4c:95:0d:36:9b:3b:d9:12:
70:34:83:a8:9f:b5:ef:14:e0:d0:30:d2:2a:29:e5:
07:e5:01:ec:b7:1c:d7:0f:27:6c:cd:fb:d2:03:53:
b4:c3:0d:1a:3c:77:5b:f2:be:15:a7:f1:ac:3b:97:
7c:b1:8b:98:04:f2:5f:ac:e0:7f:5a:07:64:44:42:
23:d4:09:e9:87:33:d8:42:a3:4d:1e:70:d5:c6:cd:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:A2:41:60:2E:89:90:6D:D0:C3:69:28:B5:83:3C:69:03:2F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd510b2f-6fc2-3f84-b54f-377f777e4052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:c2:26:14:71:17:ce:1b:6c:1f:fc:6a:a7:93:72:40:7f:76:
b0:04:66:e2:65:e9:6f:f5:69:97:50:cf:cf:2c:78:ea:1e:05:
05:77:4e:61:0e:e9:d3:85:7e:ef:dd:18:e6:a4:b8:31:a4:ad:
b8:3d:e9:4f:cc:65:b8:05:b3:1e:92:31:18:5d:7d:e3:56:64:
cf:a3:b4:2d:ff:8b:8c:a3:76:c5:0e:18:5f:87:a0:51:f8:6d:
fa:39:da:bb:f1:8e:ad:a1:f5:2e:d1:85:cc:ef:cf:f2:b9:c3:
a1:9b:c4:cd:0e:f7:b9:a8:f2:b3:c8:ea:7b:02:16:2d:15:57:
28:2d:f4:74:4c:77:5a:f6:d7:9d:e6:a2:be:a4:86:90:e6:f2:
7b:45:70:66:67:03:c7:c6:7c:0e:22:e7:7c:6b:47:cb:b7:0c:
c9:d4:20:72:de:8a:46:3f:f4:76:de:36:bf:cc:7c:9e:1c:63:
a9:51:89:10:9a:f1:b2:5d:c2:4b:e5:71:ed:5c:d8:90:98:37:
44:85:29:64:5f:11:ec:06:85:20:32:2b:24:76:2f:44:8c:bc:
0d:19:84:09:24:8e:3a:74:0e:e4:87:19:5a:e4:2d:c7:3d:9c:
2f:77:1a:74:db:b4:2c:21:9a:c9:a9:b7:f0:c5:7b:36:90:d5:
d0:3a:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org