Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7843057-b2f8-3947-8169-0a668172e574.roa
File: d7843057-b2f8-3947-8169-0a668172e574.roa (raw, json)
Hash identifier: 0lZts/jQyyjUgsAT2Iy5/HwW3fa9NKhB27x8vyQOIPk=
Subject key identifier: 45:B3:27:56:21:09:C8:90:25:46:60:D7:BB:18:9E:AF:24:89:FE:3A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE490D8D324B8EF3E308500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7843057-b2f8-3947-8169-0a668172e574.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 99.192.0.0/17 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:90:d8:d3:24:b8:ef:3e:30:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=0f912562-dd2f-47f9-82f0-dd3a46b06e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:0f:8c:b0:ca:e1:c0:94:57:8b:a6:32:db:
5c:1d:c2:39:88:15:0b:95:54:a1:42:8e:c5:95:e3:
d3:cd:da:98:4c:4a:3e:6f:8b:ae:ed:39:a5:95:af:
bc:e1:63:69:7d:de:e9:ce:40:8f:65:83:3b:df:f8:
b9:8e:e0:98:4b:e0:a9:29:2b:3e:03:aa:cc:ac:46:
c5:9c:8e:56:8d:2b:16:d4:69:b1:5a:74:f1:49:8e:
a9:7d:84:3c:7c:a4:92:3e:13:53:bf:e3:a5:34:8c:
a2:0c:c1:88:0c:12:28:a7:45:53:e0:43:37:f3:26:
c5:2c:a0:83:a2:79:b5:ff:e2:9b:6d:f3:c1:d2:d6:
73:6d:82:65:62:44:d1:41:e9:86:34:23:03:83:8c:
ea:a6:59:d4:d3:d8:48:b4:45:dc:72:92:3e:18:16:
f4:8a:49:0c:28:fd:cb:f9:c2:4f:4d:af:09:0d:80:
a7:56:55:61:cf:04:ac:cf:ad:cc:3d:bc:bc:cd:be:
60:41:bc:d0:b1:c8:68:d9:06:7b:4a:92:f8:73:b9:
21:81:d9:ae:65:b7:07:fd:01:34:94:eb:33:91:a6:
b0:e0:7c:50:ab:02:a2:23:d2:b4:e6:f0:ac:d3:71:
bc:c0:de:d8:12:ad:2d:5b:c4:dc:c5:e8:b8:93:0c:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B3:27:56:21:09:C8:90:25:46:60:D7:BB:18:9E:AF:24:89:FE:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7843057-b2f8-3947-8169-0a668172e574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
99.192.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e4:fd:1e:bf:0f:00:f1:88:5d:c4:85:75:fb:cf:65:e3:ae:
fc:a9:cf:e1:80:ec:ed:e8:7b:5d:71:7a:25:a6:f3:e0:22:d3:
11:b4:92:78:8e:3b:84:a8:aa:be:b6:c0:f5:28:58:d7:c0:b5:
32:f3:00:8f:6a:dd:8a:84:fb:12:a9:b0:7f:5f:d2:32:a6:0c:
6c:8a:d3:c1:90:fb:88:28:e0:3f:cd:3e:8c:2a:b3:30:7e:19:
c9:53:64:26:99:ae:6b:69:df:9d:c6:20:04:e9:06:61:eb:ef:
64:11:2e:55:5b:08:8b:06:d1:e2:df:41:a8:82:41:12:9c:34:
92:ff:c4:4e:ec:5d:e5:74:7e:ed:37:cc:9f:19:77:01:59:9d:
00:36:95:68:86:01:af:e2:7e:df:f3:c9:96:e8:dc:5d:16:16:
df:4f:b2:18:28:49:cd:b8:64:78:04:f3:d5:00:be:d5:40:3e:
20:59:43:5e:b6:66:66:fd:f6:ff:57:d3:2c:a7:51:fc:9a:c1:
bb:f9:90:ca:15:0d:48:a4:16:64:cb:25:c4:2c:26:cc:08:2c:
87:34:88:cf:ed:5f:1b:ba:c8:a6:5d:e1:d5:24:f3:8e:ff:ba:
40:b2:3c:c1:34:df:1b:76:ef:c9:2e:ec:03:f3:25:bb:2c:2d:
c5:b3:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org