Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce1fb06a-fad1-3231-ba17-47e76a22e0c2.roa
File: ce1fb06a-fad1-3231-ba17-47e76a22e0c2.roa (raw, json)
Hash identifier: Q8MdAH3/cIC1lPS9ajAdergPd34gvsQiAdwxfr6xFnk=
Subject key identifier: 55:39:B2:69:E6:ED:CC:60:73:D1:0E:AC:F1:92:4A:6E:A4:57:3E:FE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFE0679FD6553039AD53E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce1fb06a-fad1-3231-ba17-47e76a22e0c2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 204.101.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:e0:67:9f:d6:55:30:39:ad:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=6dd53d78-1504-40e7-bb19-3e7acdbf7d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:63:87:6d:e4:df:ff:1d:ad:f6:fa:47:83:
4b:38:ff:75:07:32:f5:85:86:d8:67:89:0b:c5:57:
82:4c:c3:d3:bf:24:74:ce:cb:4b:29:10:2c:8b:22:
be:2d:47:f8:09:04:df:7a:91:ae:81:3d:0c:c8:d9:
a2:c6:6f:97:c9:ba:5a:d9:66:77:23:16:a6:8a:38:
9a:7e:b7:63:98:98:48:07:48:c7:cf:5c:b9:39:0c:
3d:a6:89:c6:c0:45:86:74:18:3d:19:ab:0d:83:ae:
0a:35:db:8c:1a:c5:79:c2:0c:b0:eb:bb:63:33:cf:
80:ae:66:a8:6f:68:aa:e9:b2:ec:f1:ea:b5:b4:51:
80:4d:b9:50:79:d1:39:12:60:1a:96:4a:eb:ff:6e:
fd:8e:21:63:4c:e1:e8:a7:5c:af:9c:3b:ff:17:2c:
87:28:70:88:5b:0e:5a:71:f4:47:66:47:89:07:c1:
11:2a:ca:67:2f:2f:07:05:94:88:fa:66:1b:b5:9f:
2f:fa:36:b4:2a:30:bf:db:ed:2d:c4:41:70:10:a5:
dd:5c:fe:d2:c6:d7:14:80:43:81:b9:19:d6:2e:83:
ab:6c:ab:2d:ed:72:18:c0:aa:03:9e:4e:57:97:ea:
c9:38:5a:20:37:af:83:ad:62:d2:56:b2:43:43:6f:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:B2:69:E6:ED:CC:60:73:D1:0E:AC:F1:92:4A:6E:A4:57:3E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce1fb06a-fad1-3231-ba17-47e76a22e0c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:54:c7:23:c8:78:91:4c:24:2f:49:12:ef:76:b1:ee:90:42:
85:d4:70:fe:e4:f8:9e:bf:4d:81:75:f7:0f:e1:1b:8a:eb:9a:
4d:5e:b6:dd:0a:74:13:6f:7c:9b:e5:6a:70:01:28:84:9b:da:
d8:35:33:b3:18:6a:d4:70:b0:3d:ec:87:f6:3d:5b:7c:43:2e:
51:7f:a1:7a:6b:6a:c1:3d:92:d4:ff:f5:d7:43:c4:37:3f:00:
ce:d3:1a:ee:ee:47:b2:94:ac:d7:59:e0:64:20:d4:f5:8c:2f:
6b:78:a5:b9:4f:61:ab:51:9d:d3:a7:17:d0:66:2e:34:8b:a3:
0d:58:12:d1:a4:02:97:4a:ee:40:7f:5c:3b:34:90:72:e6:43:
e2:a4:76:1d:4d:9d:0c:7a:72:66:85:57:26:73:eb:15:2a:f7:
aa:18:c7:3c:45:22:3f:2f:c2:ae:f7:55:65:a1:26:d1:d0:27:
14:24:9e:2a:75:ba:4e:f7:fb:4c:81:69:d1:d5:17:4d:e3:84:
fd:cc:34:14:fb:e3:e1:5b:91:2b:fd:2e:d2:99:9d:7c:df:8f:
1c:f0:e8:6a:25:9a:ce:5b:fc:cb:fa:ee:2e:9d:52:b8:db:08:
c6:6f:6f:40:22:4b:c7:d9:06:97:2b:18:ab:bc:26:c6:a7:91:
6c:09:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org