Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfc82514-f74e-3677-81d0-b1297d84131e.roa
File: cfc82514-f74e-3677-81d0-b1297d84131e.roa (raw, json)
Hash identifier: 2/zZvA36L9bAIgi6BmfAUKGVhbHRM30yijQ7H+FwXWk=
Subject key identifier: 6C:91:32:30:7E:8B:48:15:9F:CE:AC:A9:5C:57:40:A5:01:A5:46:77
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5D73686D2AFC859A9D180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfc82514-f74e-3677-81d0-b1297d84131e.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 32463
IP address blocks: 209.226.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:d7:36:86:d2:af:c8:59:a9:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=f374f223-b4ec-44ae-bc5b-935b4876419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:e4:ff:67:4a:49:03:60:e3:4a:a7:52:96:
06:b7:ff:77:f2:c6:af:ba:f8:a5:ac:76:b6:ae:91:
6b:b1:43:89:81:46:5e:fa:94:ca:f6:0d:00:74:75:
6c:df:70:b0:dd:ac:7d:11:e2:75:0f:8d:fb:32:a9:
dd:15:23:61:d3:d6:c1:4e:2d:a7:b1:ba:b4:53:b4:
3b:4b:79:59:93:23:4c:be:55:6e:25:9b:eb:67:1a:
7a:ba:69:22:a0:88:0a:54:1e:d9:59:4e:44:40:db:
7c:55:64:09:bf:a9:8e:d5:15:a6:3f:5f:c5:73:f7:
66:c0:f0:05:ab:ca:4f:fa:a2:0e:a1:32:7f:8a:4e:
7e:ad:91:86:0a:e3:15:2b:f8:75:bb:bd:b7:8b:52:
d6:7a:db:29:92:bf:3f:63:de:be:31:21:6b:14:7d:
3f:b2:43:ed:2b:da:91:3f:eb:26:6f:95:ce:a8:8d:
ee:56:83:8d:07:e8:69:a4:ef:7d:48:1f:6a:de:08:
7f:9f:55:8f:ae:a8:ec:5f:23:9b:ff:98:a1:20:2f:
fe:2a:22:dd:b6:4e:1a:75:9a:11:d0:53:5b:f8:66:
c8:e8:27:f1:9f:49:47:95:26:b0:f3:bb:a4:a2:db:
91:15:bb:0c:ac:c8:65:aa:29:8f:ce:07:29:51:c2:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:32:30:7E:8B:48:15:9F:CE:AC:A9:5C:57:40:A5:01:A5:46:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfc82514-f74e-3677-81d0-b1297d84131e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ab:65:fa:95:2e:e2:27:0c:29:e2:99:35:80:0e:13:63:c4:
99:8c:e7:2b:9e:b2:3d:36:8b:d3:93:70:51:de:32:e5:59:17:
fe:26:41:b7:d2:76:13:3b:53:97:d3:fe:0e:03:27:21:e4:58:
ea:b6:41:b0:6e:59:1c:2a:31:c0:37:08:52:7d:d5:d2:9d:b4:
b8:e2:b1:8c:f7:14:13:97:f0:9a:90:c7:1e:37:53:af:84:4a:
0a:d6:3a:8b:6f:d6:9f:00:6a:57:4b:96:50:ed:b2:86:1e:80:
5a:82:55:a5:69:d1:45:9f:2f:9c:23:e3:0c:43:53:5b:2f:11:
ba:8a:eb:f3:ff:e4:ac:b4:94:bf:19:c7:eb:5e:6f:f2:94:7a:
01:65:a2:0d:9d:af:81:d2:b1:e3:41:38:02:3b:b7:50:3b:3b:
20:cb:98:94:ea:2e:68:55:2e:2a:81:55:cf:78:2d:98:ac:cd:
7a:f0:7c:4c:74:80:2f:8e:eb:6a:10:2f:ae:af:62:f0:e9:cd:
6f:5d:dd:52:aa:0c:fd:47:d1:de:4f:08:30:f6:b2:97:86:c4:
ab:8d:04:97:25:09:f9:3d:28:bf:c1:70:d1:dd:ee:cf:19:ff:
85:a5:81:6d:9c:69:6f:72:8b:aa:0a:7d:2c:f1:4a:d4:ff:d2:
60:66:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org