Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7316521-b4ca-3f36-aac4-00af0b449ba6.roa
File: d7316521-b4ca-3f36-aac4-00af0b449ba6.roa (raw, json)
Hash identifier: XAKcElIo3qctpkpo7TEOj1AxlKAUWZ63SoCgA8vzhpg=
Subject key identifier: 27:32:EF:67:FE:20:F0:99:E0:C7:70:48:CD:B1:43:3D:C1:3D:B0:63
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316045F152C6F1C77FD8E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7316521-b4ca-3f36-aac4-00af0b449ba6.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 207.236.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:04:5f:15:2c:6f:1c:77:fd:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=4aca8c3f-0851-4db2-ad44-e30ccf3ea286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:83:7a:a9:3f:6b:fa:e6:2d:e5:93:85:7a:
53:6e:68:5c:b2:8a:34:ee:c4:67:c1:f2:e0:94:0d:
27:fe:1e:8d:30:bb:b0:7a:33:20:df:45:ea:0e:59:
2b:33:95:a1:54:e2:27:42:a6:69:7c:24:97:58:4a:
2f:41:be:88:6d:bc:a4:93:a2:d1:d0:9d:4d:b0:d1:
ef:bf:f5:1c:4a:79:0d:cd:47:55:a0:be:76:ae:6a:
3c:43:a2:4c:d4:18:28:c2:df:87:d6:be:35:20:e0:
c7:b1:40:f5:4b:ab:e2:ff:eb:da:be:de:9c:6f:03:
39:4e:d4:5c:a8:4e:9b:6f:39:b9:03:68:ac:08:c4:
17:6e:f7:d4:5c:0f:4d:e4:46:41:5a:b1:c9:d6:4f:
40:02:02:6d:8f:25:73:73:8a:fb:e8:c4:aa:8f:25:
90:80:0f:29:57:69:7d:26:7b:b7:09:6b:66:88:a3:
e9:dc:10:b8:06:73:17:fa:35:58:9a:f8:ac:0f:b6:
fd:4d:eb:2d:32:a0:e7:e2:31:ae:ad:5b:04:66:26:
55:44:b7:aa:21:68:a7:44:5e:7d:f8:70:be:a1:c0:
3a:58:7c:31:c8:d7:27:89:76:49:a6:c4:3c:84:a6:
24:16:e7:b6:85:3f:a4:5c:f3:d5:01:7a:98:1a:d3:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:EF:67:FE:20:F0:99:E0:C7:70:48:CD:B1:43:3D:C1:3D:B0:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7316521-b4ca-3f36-aac4-00af0b449ba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:dc:ad:a4:37:20:3b:a2:42:71:d1:ac:06:ad:79:1f:19:40:
32:26:0d:da:34:9a:99:60:a0:68:4c:b5:5b:85:26:00:02:25:
96:4d:4d:53:ca:17:8b:4e:38:a0:de:51:26:f7:9c:63:42:45:
be:d6:d0:30:ac:f4:f0:26:29:76:03:43:f2:57:19:ac:fc:e7:
8b:8a:55:e3:e6:60:40:ac:b5:ea:0a:7d:ba:94:6f:2e:67:d8:
a9:9a:00:dd:5f:43:30:f9:f0:61:ff:06:59:83:d3:76:d0:4f:
c4:67:8b:76:08:d8:ef:0e:30:b5:41:2b:20:28:0f:f1:d0:4c:
cd:47:ee:54:e5:2e:9a:29:a7:b9:29:65:82:d9:1b:f7:a5:01:
4d:01:81:aa:29:e2:c4:5d:3e:8c:fc:38:f2:9b:3d:58:8e:2f:
49:6c:7a:c1:11:a5:d6:b2:3f:ea:95:26:19:f1:ab:4c:ac:34:
6e:65:66:93:11:8a:ef:aa:7a:37:b8:a0:31:0d:0f:77:f7:ca:
9b:59:98:35:75:5d:93:85:06:80:47:f8:59:f7:33:83:5c:70:
4b:d9:15:1e:01:64:e5:0d:0b:13:bc:11:61:ac:1f:91:ef:9d:
ad:41:ac:ed:02:99:28:3e:63:01:b3:cd:88:a2:81:3f:1a:52:
ee:e6:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org