Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d169ad37-6a76-3f32-8315-bdc585b6b880.roa
File: d169ad37-6a76-3f32-8315-bdc585b6b880.roa (raw, json)
Hash identifier: lrfTS0QtD2cBYaswlgMxvTVf5CRAEGVuTRAANqqPGsQ=
Subject key identifier: 83:C9:87:EA:C1:95:33:D3:FC:42:45:76:CF:F7:29:36:D9:AB:28:11
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5317DA960C9060320B400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d169ad37-6a76-3f32-8315-bdc585b6b880.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 184.151.134.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:31:7d:a9:60:c9:06:03:20:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=f49f789d-fabb-4338-9bae-bb2ddac54eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d9:77:65:b8:ce:2b:c3:67:e9:8a:26:68:e2:
d5:ec:1c:a0:4a:f0:80:70:23:2a:06:d3:fa:b0:c9:
fe:d1:ed:91:8b:d5:0c:1c:40:dd:96:94:94:5e:26:
87:c2:b8:f1:2a:b7:7c:d2:a4:e8:d9:16:02:5d:b1:
0b:85:83:7c:ae:ab:3b:b3:3f:b7:02:f1:1f:a4:4b:
23:87:2c:98:de:e1:06:05:9f:b9:b8:6c:0f:0e:f6:
42:b6:61:ff:75:fe:c6:fa:ad:ae:bd:cb:35:9a:fc:
93:71:33:28:5a:d8:48:5c:3d:c5:de:96:4e:09:11:
66:25:89:6f:92:a3:99:3b:51:c1:24:5f:9e:f7:f2:
cf:bb:a8:32:ff:4a:8f:d7:0c:bd:26:ea:67:01:3f:
ac:cd:ae:c6:d4:17:48:01:5f:57:da:17:4f:3e:28:
55:64:ef:89:c1:6a:5a:7f:20:2d:5b:c8:38:e1:38:
d1:3f:17:29:fe:03:73:99:02:d9:f2:71:4c:3a:3b:
61:8a:81:e3:59:86:9e:34:73:e5:cd:1a:5b:23:bc:
66:e4:d6:e5:e9:66:0f:fb:19:fb:4e:d4:d7:ba:d3:
88:05:57:11:7a:2a:9e:ac:d1:f5:72:1a:0c:d8:6f:
9f:4e:20:96:73:ef:ed:6f:b3:aa:83:86:87:58:ce:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:87:EA:C1:95:33:D3:FC:42:45:76:CF:F7:29:36:D9:AB:28:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d169ad37-6a76-3f32-8315-bdc585b6b880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:fa:05:87:30:87:09:19:13:7c:d9:d9:3f:3c:04:71:bf:50:
ba:2b:e1:fd:dc:f6:de:f4:22:55:f3:00:95:5d:56:20:36:c3:
36:f7:11:3b:a9:9c:5f:f6:3d:dd:9b:6d:06:e0:10:db:ac:1c:
4b:fe:90:b6:e9:37:a7:3f:57:18:53:08:dc:a3:72:ee:0c:a4:
31:b8:d4:60:8d:1e:a0:80:5d:36:84:8e:17:2e:86:ea:29:d9:
c5:04:b4:b2:4b:80:9d:c4:69:54:d8:ce:42:b2:1c:03:5b:8d:
3f:97:06:49:4b:cb:18:af:ad:98:0e:6a:33:53:5f:f2:3f:fd:
9a:54:55:0b:d6:34:1d:71:0b:df:9e:6a:77:d2:31:3f:55:4e:
17:4d:49:80:31:17:dd:0b:f0:02:50:c1:0a:16:ae:bb:06:5e:
53:24:21:b8:5f:8e:8f:9c:95:eb:56:72:21:b5:72:09:17:c3:
f1:dd:38:d8:e3:db:c6:80:4e:27:87:ac:ef:25:df:a0:fa:74:
ce:c8:fc:ce:32:e4:bf:f5:d2:cd:a6:5f:22:09:24:89:f1:74:
26:12:18:54:b3:b4:a8:24:b3:83:91:03:df:78:40:e2:5c:ed:
ed:49:58:86:c5:0d:3e:a5:81:97:9b:f3:8f:66:19:96:1f:fd:
36:39:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org