Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d299682f-0696-3513-8fd3-716e7ab3fc17.roa
File: d299682f-0696-3513-8fd3-716e7ab3fc17.roa (raw, json)
Hash identifier: GblJbwvzztQ5hSBVrRvxNk+op3SN9jTNjUGlC4JPfWM=
Subject key identifier: BD:C3:67:11:F8:38:66:BA:84:60:30:6D:D5:E5:37:B3:1E:CE:D5:CA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493162274B5D7BC6F7CA8F840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d299682f-0696-3513-8fd3-716e7ab3fc17.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:22:74:b5:d7:bc:6f:7c:a8:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f7be8d35-f18f-4c55-94be-21f4353f7dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:e3:46:0a:a6:f1:a1:16:c9:79:d0:cc:05:
2c:c2:f7:a6:52:b8:24:8f:b9:36:69:e9:e5:ec:50:
4d:e0:ee:3f:f1:63:7e:0c:77:70:25:20:ca:59:7f:
2d:25:9b:ee:e2:0d:53:c0:69:25:f3:86:f2:16:be:
cf:f8:d4:2a:68:5d:97:7f:95:46:e7:9e:90:b2:fe:
b2:cd:27:81:a6:6d:fa:ad:fe:85:31:3d:b8:3e:07:
7f:fb:d9:bb:1e:e9:6a:03:34:76:ea:73:75:22:a8:
5d:06:11:0b:b2:7e:bb:a3:ac:f0:49:9f:1c:b9:8e:
d1:45:b4:88:22:a5:9a:eb:5f:0f:30:f7:4f:bd:b2:
df:4b:94:43:28:17:14:bd:a3:10:b8:2c:66:89:6a:
08:09:a7:fd:dc:4b:f2:40:71:7a:2f:a6:c9:ca:dd:
0f:ea:86:0d:f5:9d:05:ae:c6:7c:c4:3f:cb:6a:d7:
e7:8f:6b:ae:f3:1f:bc:c5:f0:e7:67:e7:27:f3:f8:
00:1b:57:62:e4:a0:25:68:a9:d0:0a:9b:21:c0:6b:
37:33:52:19:04:ba:f1:9f:e0:c2:c3:22:39:b1:e7:
d6:e8:ea:24:df:1f:6b:84:81:e4:f7:f6:7c:ac:0f:
f0:29:37:81:c4:09:20:19:b9:47:e9:58:fa:11:ff:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:67:11:F8:38:66:BA:84:60:30:6D:D5:E5:37:B3:1E:CE:D5:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d299682f-0696-3513-8fd3-716e7ab3fc17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:fa:66:be:2d:4a:2d:62:33:29:e1:b1:53:24:b2:2a:63:91:
c4:9f:d0:86:e1:92:2c:8d:d6:66:78:b1:9f:86:0a:55:10:c8:
93:19:0a:ee:76:e9:7c:55:3b:3a:25:b3:a3:c6:6f:73:d6:d3:
ed:0c:ca:fb:ec:92:1c:4b:0b:11:93:c2:c4:07:8e:20:c5:b2:
fe:45:1e:72:96:b9:d8:ab:3f:b9:19:68:76:56:4a:1a:d6:7e:
b3:c4:e4:43:ed:f7:a8:14:8e:3c:60:2c:56:98:a1:c1:86:76:
ae:2d:f3:1a:8c:d1:bb:34:c3:b2:8d:7c:3f:ce:11:8f:62:85:
32:9e:03:d5:b1:42:70:f6:5f:66:5e:5d:14:d8:53:ac:a3:c0:
fa:30:26:f6:44:13:09:da:6a:99:9a:b6:e3:d7:16:b8:69:ad:
29:cb:55:e4:03:93:43:e4:fa:ca:e7:0c:8b:f5:13:c2:b7:c4:
10:42:cd:1d:0b:df:76:ff:bd:67:f6:94:86:89:42:fc:a2:c2:
b7:5b:45:76:7e:ea:8b:80:19:11:3c:b7:17:6a:04:4b:28:77:
58:dc:92:a0:6a:99:d9:46:45:5c:5f:6a:54:ce:65:f1:00:71:
17:df:51:0d:8e:8b:f6:3a:1c:a1:ae:f2:8b:af:f9:c4:32:19:
f2:1a:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org