Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d38bed57-9474-36e9-bad3-fa6d01545064.roa
File: d38bed57-9474-36e9-bad3-fa6d01545064.roa (raw, json)
Hash identifier: rltjFSAaAIll8j9y2+JGftF5FUSGxh/2EsybqaxdGFs=
Subject key identifier: 65:47:E7:CD:BB:07:5F:B5:EE:DC:B1:CB:3E:60:70:95:AF:D6:28:E2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5AD61D90D20B55D503C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d38bed57-9474-36e9-bad3-fa6d01545064.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 40575
IP address blocks: 209.128.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:ad:61:d9:0d:20:b5:5d:50:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=01bce6e3-6cae-4b2b-ba6c-bd5291880277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:b2:10:8c:ee:90:3d:0b:55:b5:18:2a:5a:
28:b5:b1:01:2a:eb:a0:b4:c9:3d:a5:89:07:97:6f:
53:32:90:fd:0e:fd:69:45:b7:7e:0c:6d:ea:8f:ee:
09:d3:49:46:fc:41:2d:cb:5f:6b:12:15:cc:89:28:
3e:f9:ce:e7:d0:15:d8:c7:a9:78:9f:66:8f:1a:7d:
4f:2a:05:99:34:d1:f0:59:6a:7b:be:9c:42:96:22:
37:1d:24:77:ff:4f:d2:2d:48:ed:d5:09:9b:5d:ff:
9d:d0:a4:cb:b4:7c:ee:d6:b4:b9:7f:d2:33:2b:1a:
f6:10:37:9d:dd:d6:48:4b:e1:ec:bf:24:d1:1d:bb:
08:5d:e3:6c:b2:ae:3d:6f:c7:21:85:91:2c:c1:5b:
c1:6b:b4:c3:1e:6e:bc:18:98:06:df:c4:4e:7e:3a:
72:a8:fb:09:f7:ae:e2:5e:51:d3:26:dc:d3:b8:59:
d1:06:f6:6d:3d:ed:36:38:72:59:a1:94:7e:05:62:
a1:3d:41:65:6a:e0:ec:0f:af:78:7b:a0:00:51:8e:
8e:74:d8:1a:4e:55:36:55:d3:aa:ed:38:92:51:c6:
74:80:84:7f:95:5b:72:e1:b0:b4:5b:04:1d:ec:55:
3f:b3:69:41:2c:24:24:b9:3f:33:64:a3:32:46:ce:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:E7:CD:BB:07:5F:B5:EE:DC:B1:CB:3E:60:70:95:AF:D6:28:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d38bed57-9474-36e9-bad3-fa6d01545064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d5:c5:9b:18:99:ee:98:06:9f:9f:e7:cd:91:79:01:d1:00:
27:a6:d3:ad:f7:b5:ec:ee:5e:f2:9c:0f:d1:09:6e:66:64:3a:
7c:11:d5:ae:6b:18:7c:94:2a:51:39:cd:64:3f:1d:96:0e:12:
29:22:7a:e3:a9:e8:af:ee:47:6c:2b:70:97:0d:00:18:f5:40:
80:83:c3:9c:6f:69:c7:fb:2b:b2:a0:57:ce:0e:83:4a:10:40:
88:fe:59:ba:93:cd:70:c2:4d:d8:20:f6:1a:cb:7d:8d:a3:99:
6e:69:1f:c0:b8:c9:58:20:9d:f9:9e:fd:dd:bb:64:5c:b3:73:
6b:7b:ca:ad:9b:9a:37:2e:f9:da:c3:34:0b:6e:db:ea:3e:bc:
9f:a4:b4:74:dc:fd:0a:af:16:13:0e:07:73:ee:e6:43:c0:19:
04:c8:c4:83:4e:50:e4:80:42:c9:8b:42:29:0e:9b:82:38:32:
ad:1e:b3:1f:27:a5:45:6a:b3:6d:93:82:bb:af:78:76:0f:65:
18:1e:5f:30:10:c7:5a:82:3e:f9:e3:4f:09:ad:cc:05:8b:fb:
4c:03:cd:13:55:cb:7e:d1:07:5e:d2:cc:a7:92:6a:72:17:6f:
20:37:cb:67:0f:95:a2:99:5d:0e:f0:03:52:13:56:b8:1e:db:
d0:77:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org