Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dac4dd16-2607-3566-8c90-e360f9d3b38c.roa
File: dac4dd16-2607-3566-8c90-e360f9d3b38c.roa (raw, json)
Hash identifier: CjgkSOCg8Yo3FXXQBXgmslXHclTHKGaz4kCSUzAb79c=
Subject key identifier: 8C:C6:29:46:3F:9F:C4:87:3B:3C:89:7A:F1:6A:13:38:A3:66:B8:6D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5DA37BBB79B7F4B95BBA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dac4dd16-2607-3566-8c90-e360f9d3b38c.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 4540
IP address blocks: 209.226.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:da:37:bb:b7:9b:7f:4b:95:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=304ef48d-dcc2-47e0-9a1e-cab87b67bbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:ac:29:ae:1c:84:a6:0a:37:a7:ad:d4:c1:
b2:40:4f:5e:ad:4e:b3:9a:5d:01:27:65:5f:19:f9:
ad:e7:50:35:82:06:be:8a:a9:67:84:e0:0a:29:01:
5b:c3:4f:38:41:c4:9a:9f:67:a3:c0:56:99:b6:ac:
e1:37:fd:85:67:44:a8:3a:90:33:a3:3b:d2:fe:c4:
09:ca:ba:8b:b7:c8:09:91:fa:fe:27:98:f8:40:21:
10:5e:98:d7:69:c3:1b:a8:eb:dc:dd:cd:40:6e:6e:
53:a0:03:f7:16:0c:0b:17:79:8a:68:0f:6a:85:cf:
e3:01:b5:2c:d2:e6:0f:e8:78:04:d3:d2:09:5c:81:
09:d6:fb:f4:98:bf:5a:8d:4f:91:59:7e:36:b0:f9:
ec:e6:71:bc:18:72:05:82:f5:e0:a4:f7:db:96:e1:
d8:5e:05:22:df:39:3e:b4:59:54:dd:b4:5c:b8:d2:
dc:89:35:f6:74:aa:a4:83:07:ed:a1:9a:c9:8e:3b:
67:44:55:4f:98:02:79:ae:9f:42:06:bc:4e:16:98:
fc:71:69:a1:1a:02:13:93:45:8e:b3:80:18:ec:71:
cf:ba:be:13:3c:27:64:e7:9a:6c:a4:fe:d7:29:fa:
db:06:84:3d:ba:ad:6f:c8:b0:ad:38:ba:ab:63:3e:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:29:46:3F:9F:C4:87:3B:3C:89:7A:F1:6A:13:38:A3:66:B8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dac4dd16-2607-3566-8c90-e360f9d3b38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:85:df:ea:25:17:ee:5c:07:0a:05:5a:e4:7a:3b:88:41:b7:
1b:d5:7f:37:d1:9a:4f:91:a5:b2:a7:21:6c:c8:fb:27:79:b5:
fb:1a:d0:43:b0:56:9c:b2:83:52:40:61:bf:4b:db:08:6a:e2:
f6:77:42:f4:40:70:9a:e7:de:da:b7:e7:21:07:41:94:0e:12:
77:ae:a1:d6:67:12:97:71:db:0a:04:88:8d:6e:d7:17:eb:86:
0e:90:53:d9:d2:0c:d3:ac:c4:14:80:fd:57:67:b3:4c:a0:b7:
2f:60:1e:1b:3a:02:f6:56:30:e5:79:39:bd:d0:27:b2:39:95:
5e:cb:de:f9:2f:95:d0:fb:08:c7:c8:5a:5e:65:79:5d:35:87:
ac:04:76:94:66:e7:eb:05:81:2f:2d:46:d7:52:1e:ea:04:ec:
bb:8b:67:5a:08:6c:78:9a:12:56:33:7e:51:9b:a4:79:e4:f5:
a2:a7:e6:c4:e5:82:0b:c2:38:4b:db:1d:8f:de:68:39:5e:23:
e6:37:9a:a2:c0:9d:fb:9b:eb:f5:30:bf:8d:cb:1a:17:32:dc:
a9:7b:09:e6:5f:c5:61:13:69:6a:77:7b:c0:98:04:24:fa:be:
5b:c2:79:93:09:e0:a0:85:c3:ee:73:79:c6:fd:83:4f:2b:2f:
db:af:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org