Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d470928c-913c-3ce6-8fe6-4327a1353562.roa
File: d470928c-913c-3ce6-8fe6-4327a1353562.roa (raw, json)
Hash identifier: AwsljIFKQjPTGredYOxBfzcjHkLMqlj9Wr2ZAG8Qy1U=
Subject key identifier: B2:FB:5D:F1:29:62:77:30:04:67:7E:33:24:10:BB:2A:49:A9:72:EC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFC50A95565B7440ED9C18
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d470928c-913c-3ce6-8fe6-4327a1353562.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 40895
IP address blocks: 199.243.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:c5:0a:95:56:5b:74:40:ed:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=5d228d1c-4c6a-43cc-b357-f6719a1f3f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:58:a5:d9:05:9b:48:07:69:64:11:70:51:
ee:ce:7d:a7:67:bb:70:9e:2d:0c:b5:8f:be:dd:e3:
55:ae:d5:84:9e:67:38:65:be:11:79:66:e8:27:fd:
e8:12:1a:34:85:64:cd:2d:22:70:35:3b:8a:6c:23:
5d:e9:03:3c:29:77:3a:22:d9:d6:ba:85:2c:6d:a6:
1c:c2:32:2a:7f:7d:cf:36:8f:ea:d9:7a:cf:ab:75:
23:4c:31:b5:61:eb:90:0b:34:7d:38:9d:19:d1:53:
f1:76:08:da:68:2f:ac:0d:eb:6b:d1:5c:e7:8d:0a:
11:0e:f3:ef:8f:e8:ca:91:f2:48:ce:d3:06:e0:df:
9d:33:d4:71:cc:e6:ac:c3:87:5e:00:e1:cb:1d:81:
70:55:c5:ab:f6:d3:43:d0:94:b6:0b:f3:c7:8f:50:
80:c0:d5:94:5d:fe:b6:d7:c1:1a:e3:ec:0a:64:f3:
e2:93:15:8d:96:95:0c:d9:0f:d7:4f:d1:c0:8b:4b:
d9:fe:ad:77:9f:4c:fb:a4:1c:dd:6b:6a:c3:2f:3e:
d0:98:5d:39:df:93:ac:43:30:16:b4:6a:f6:04:e5:
22:1d:b7:78:1d:57:bc:29:66:36:94:97:77:40:f0:
25:17:9b:7e:ed:d3:9d:21:cb:99:e7:78:9b:91:50:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:5D:F1:29:62:77:30:04:67:7E:33:24:10:BB:2A:49:A9:72:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d470928c-913c-3ce6-8fe6-4327a1353562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ee:72:16:be:de:13:9e:d1:cf:da:50:46:fa:7c:9a:f0:aa:
c0:c9:96:de:36:54:dc:af:c2:86:a5:bd:f0:b7:46:53:96:7a:
44:9f:00:3b:30:0d:80:5e:a1:f8:53:1e:eb:88:d2:b5:90:3d:
0f:c3:ab:82:82:0a:06:5a:0a:f2:ad:1e:d8:20:39:f5:45:8a:
3c:d7:66:06:e9:a3:be:a8:6a:74:96:2f:80:c6:34:f2:03:0d:
92:df:3b:4d:a0:64:79:de:b4:6d:b7:d7:ea:9c:d1:17:4a:2d:
c2:f7:26:bf:cf:ff:19:d4:18:e6:ba:22:73:1c:06:c3:1a:99:
85:c8:62:05:a6:63:67:75:2f:eb:e0:67:e0:e5:f1:3a:ff:c2:
26:db:45:45:94:c4:bd:c8:9c:eb:12:9a:bb:cb:25:26:bd:9e:
63:fe:5c:05:2d:18:9b:43:67:46:73:59:31:0c:19:bd:24:da:
cb:b3:57:69:59:fb:3f:2f:8f:ae:1a:ad:2b:c4:44:dc:af:89:
ba:7c:bb:50:49:35:cf:73:5e:e5:4d:88:0e:a8:9e:a2:14:0e:
1c:ac:98:1d:04:a3:4b:a7:10:2a:33:79:f6:27:54:41:f7:a1:
d3:a8:6d:2b:a5:25:19:71:3b:be:2d:19:8e:68:26:8e:ab:64:
1c:10:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org