Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5af0b35-8101-3044-ae5e-924cae0c7129.roa
File: d5af0b35-8101-3044-ae5e-924cae0c7129.roa (raw, json)
Hash identifier: soTn97mEY6r8UjoGHSRSJyoE5lwPAehhNmxuMT0qRV0=
Subject key identifier: 1C:79:CC:07:83:D6:09:C1:44:45:CA:64:9E:ED:E7:89:3F:27:06:9D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB00617646EE6D3B5A319E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5af0b35-8101-3044-ae5e-924cae0c7129.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 25946
IP address blocks: 204.101.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:06:17:64:6e:e6:d3:b5:a3:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=6606773a-3ad5-4f0c-8e8d-a3afc5a91b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:cd:80:ba:a0:ae:14:5b:92:cc:1c:42:9c:
c2:7e:57:33:9b:34:80:02:de:d2:b1:bd:d7:22:05:
70:4d:84:1c:cd:ad:5a:44:13:2b:1d:16:7c:ce:d8:
c6:8a:84:f7:fd:c9:2f:ec:69:92:60:ae:b7:d0:e1:
e5:d5:1e:41:20:3e:f4:81:2f:af:5e:4d:6f:e0:03:
a9:5e:65:1a:8c:57:40:f2:66:19:3b:dc:7c:d8:ab:
ad:02:d4:88:44:04:7e:3f:b4:66:b1:8a:bc:bb:3e:
a6:89:15:b6:4d:1e:5b:46:8b:c8:f5:a1:56:a4:60:
9b:9b:85:8d:25:4c:a4:b3:53:4f:6f:08:94:74:16:
9e:af:27:d9:52:39:73:f6:59:39:79:5e:49:00:f9:
59:c7:f5:1b:2a:19:68:df:ba:25:50:57:dc:1e:9f:
55:f3:b7:1d:65:f9:fe:78:d7:c8:ec:5c:18:1a:b2:
f2:59:ac:c3:71:70:64:93:fd:24:02:d6:c2:8c:44:
f3:39:26:45:7f:38:d3:3e:a2:53:c7:cc:e2:c7:ba:
3b:0e:2b:3b:5d:a1:2e:41:32:ce:40:1d:57:89:cb:
a6:43:0b:1f:df:c6:da:37:c8:b9:5f:d1:5c:f0:ef:
a3:f2:54:62:45:64:4a:ca:21:23:83:f7:18:ef:3b:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:CC:07:83:D6:09:C1:44:45:CA:64:9E:ED:E7:89:3F:27:06:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5af0b35-8101-3044-ae5e-924cae0c7129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b2:e2:1b:48:79:8a:28:9e:4c:c5:b1:a2:86:d7:45:b5:2c:
13:5a:3b:60:d7:7a:bf:45:95:38:3a:ef:ba:29:59:9b:5e:27:
2a:16:24:a1:25:09:2a:ff:9e:3b:ac:f8:e4:5d:c0:a1:1d:b5:
fd:62:6d:91:aa:0c:dd:94:a7:81:21:1a:e6:ca:82:e7:8a:5f:
d4:a7:93:ad:e2:bb:c2:c1:de:1f:01:41:b5:82:86:31:21:2a:
e4:be:9f:85:ba:ad:33:5d:45:2d:bb:24:2d:cc:e8:52:90:58:
57:c3:21:a3:25:fd:34:f9:96:8b:58:b8:04:81:ad:0a:26:41:
64:39:25:35:a7:44:e2:53:87:ec:4b:81:44:ee:61:a9:6e:2c:
b6:28:4d:56:0f:f8:c9:54:6c:60:53:d2:16:c9:60:ae:f0:7e:
8a:f8:d1:e4:ea:18:49:31:36:7b:92:98:c9:01:a4:63:d6:31:
61:ad:44:13:12:0f:20:ba:82:f8:3a:7d:cd:ce:82:b0:e0:35:
f5:3d:14:fa:09:fe:af:d5:de:ee:d0:f0:cf:7a:d2:74:92:88:
be:a2:0a:30:84:d6:bd:77:69:7f:de:86:99:23:ea:c9:2a:98:
d0:31:fb:ef:2d:e5:31:d4:5a:c4:cf:39:7e:28:a7:f2:f4:83:
e4:0e:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org