Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a41a62-8f0d-3aeb-be58-29082277bcfe.roa
File: d8a41a62-8f0d-3aeb-be58-29082277bcfe.roa (raw, json)
Hash identifier: Zur8sTjIBP91kSVkR6RJzJvLt9/ggcRbhvEP1oBdu7U=
Subject key identifier: AC:AC:85:51:60:E3:A3:08:7E:01:E5:07:2F:77:AA:EE:34:B8:D2:D0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE55C5C7DE9A0A7ACE42B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a41a62-8f0d-3aeb-be58-29082277bcfe.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 7122
IP address blocks: 198.163.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:5c:5c:7d:e9:a0:a7:ac:e4:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=61da8d3b-6841-49ff-8d7d-27f3f23f7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:f4:0e:6f:56:cd:35:2b:43:bc:4e:41:ee:
a0:a2:09:ba:93:b8:cd:c7:1d:aa:b1:77:c4:71:40:
cc:4f:91:95:d0:25:65:83:ce:b9:3b:17:58:0d:1b:
2d:e3:99:41:bd:cc:ae:0c:31:be:37:02:0c:9c:7a:
c0:94:1d:cc:67:d4:95:75:7c:64:a8:44:bc:fe:e4:
fd:79:40:81:c5:13:35:a7:b3:a3:bb:35:3f:df:3e:
d8:cf:34:f3:8b:cd:f5:b5:34:57:9d:a3:ab:5e:e0:
46:94:dc:af:24:12:4a:76:5f:ec:1c:8f:e9:70:f8:
50:88:e0:d3:74:11:65:9e:1c:1c:37:93:54:a9:8b:
ba:64:3b:5f:19:85:14:e4:43:35:72:5b:3c:06:48:
be:1c:e8:12:33:19:ca:2f:48:9f:46:47:9b:99:55:
8f:71:1e:04:63:5b:8f:f6:59:f1:a5:bb:f5:79:2d:
20:64:82:79:ba:d2:6c:89:18:f9:ff:56:7d:2a:bb:
cc:fb:04:3b:95:cc:b3:4b:40:ea:6d:35:be:1e:d8:
a8:2b:c7:16:11:f2:b1:4a:48:75:a3:10:15:ae:e1:
29:8b:a9:19:4a:7d:39:0b:ea:e2:59:05:86:5d:1a:
07:c2:07:80:fe:d6:db:cf:cd:38:c9:ac:e3:d2:c7:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:85:51:60:E3:A3:08:7E:01:E5:07:2F:77:AA:EE:34:B8:D2:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a41a62-8f0d-3aeb-be58-29082277bcfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e3:6c:b2:38:ca:97:9d:05:19:62:0f:25:88:b8:18:97:7c:
d5:b3:20:4e:0f:b9:7e:ac:d9:1a:f9:69:73:45:e4:46:28:06:
62:83:27:ef:23:1b:47:ba:f4:e3:87:b9:c2:3d:f2:05:1f:76:
c5:c1:4b:e2:eb:b8:f2:5d:a5:c4:38:69:36:a8:ee:40:05:fe:
2d:fe:e5:fc:7c:e4:e0:c6:a7:ed:71:e4:1e:b1:b7:24:e5:90:
65:94:4b:ae:9f:0a:9e:00:57:9b:3c:4d:15:56:43:56:fa:6f:
ca:a6:ad:b3:65:d4:ae:a9:40:eb:62:d8:5a:43:92:b6:98:ee:
04:ad:21:74:d6:52:61:06:ea:25:b1:ee:69:61:c8:0e:c8:2b:
48:fb:08:9c:a9:22:bf:a2:da:e6:70:8b:35:bb:2e:12:a8:3f:
96:52:36:e1:b6:44:9d:40:7b:22:66:2a:70:c6:0c:fe:17:4e:
49:da:01:9e:df:c6:fc:f0:45:a6:ac:ae:6a:26:7b:10:51:d5:
a4:d2:3d:27:24:70:09:67:ba:1a:52:c5:8b:de:c1:d1:8d:bd:
81:eb:cc:ea:5c:5a:bd:bc:d2:3d:86:c7:4d:87:c8:f4:4c:b3:
28:66:96:fc:6f:40:7d:93:27:fe:fd:01:f5:54:0c:41:54:43:
3a:ce:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org