Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddc3f7c9-3961-3d54-aa38-453ee2750920.roa
File: ddc3f7c9-3961-3d54-aa38-453ee2750920.roa (raw, json)
Hash identifier: 5iLo5yFhZ1WaFWyF5bVplzvIvLL2w1iNRxK0i/QgOBw=
Subject key identifier: 36:24:7C:62:BD:39:0A:A3:BF:56:4B:2B:28:52:36:9B:0A:6E:5A:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313D4B95BE96DD5D6F87680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddc3f7c9-3961-3d54-aa38-453ee2750920.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.28.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:d4:b9:5b:e9:6d:d5:d6:f8:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=9bcd2f75-d4b2-4698-ab23-2e600aab8fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:59:d5:e0:d9:3b:03:ac:ea:4d:40:24:b8:
85:7b:0c:05:33:4f:3a:a5:35:79:2c:4c:a2:83:1d:
20:42:70:fe:29:5b:23:cb:58:48:c5:30:4f:1a:75:
7a:cc:29:8e:1b:74:38:1e:7c:d3:1c:34:c1:39:0f:
a6:e1:05:ed:0c:37:54:0c:26:8c:ee:6d:59:b7:10:
09:30:bb:20:f5:53:fb:6f:27:d4:b8:5a:15:78:30:
e2:01:6a:e8:7f:fa:6f:1e:56:15:af:a0:a5:63:ad:
d1:71:6c:c5:be:46:94:a5:f4:3c:09:75:c4:12:be:
da:8a:c8:9a:4a:ed:9c:92:32:3a:9d:d0:4e:6e:94:
df:77:61:f2:3c:16:44:86:b9:8d:8a:1c:c0:8a:ae:
2a:d6:74:d4:5a:62:d2:d4:dd:68:6d:0d:fa:06:3e:
a6:8b:75:29:48:39:4e:a1:43:84:a9:ea:cc:f5:fa:
23:dc:9b:11:50:ed:57:e0:61:00:0c:43:ac:a6:90:
53:2d:b9:b0:05:cd:95:ae:21:53:e9:72:9d:42:3c:
25:c8:55:78:59:a6:1a:a8:0f:be:8e:a9:f9:b9:2a:
7d:3e:6c:46:e5:2b:4a:40:63:a2:0c:84:d8:72:f2:
d0:f3:8b:65:c5:20:d3:26:b3:b0:32:42:30:9e:2c:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:7C:62:BD:39:0A:A3:BF:56:4B:2B:28:52:36:9B:0A:6E:5A:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddc3f7c9-3961-3d54-aa38-453ee2750920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9d:ec:72:03:06:45:97:02:b9:bf:bd:ef:99:79:69:07:18:
23:9b:02:da:aa:5a:8c:5b:74:eb:75:29:a4:00:7b:d1:e4:50:
51:55:a5:07:66:3f:35:ff:dc:86:3c:1e:2e:1f:76:6e:ae:c2:
be:1b:52:40:b6:94:e7:73:78:24:8d:3e:db:54:9a:c8:68:73:
c9:02:24:55:06:ab:f9:f7:7d:36:3b:63:6e:a1:77:61:c3:9a:
e1:e8:ee:91:ea:10:00:85:11:9c:11:6d:0b:c7:52:88:79:32:
01:bc:01:ea:b4:08:ac:37:64:02:de:2a:23:77:e2:8d:32:f7:
d0:47:56:dd:19:0f:65:33:f2:c7:17:ba:c7:ea:1f:d7:da:ea:
93:7d:7c:1f:4f:0f:e0:68:b7:ac:7f:84:31:39:0d:fd:48:9c:
d6:80:c1:ee:04:dd:7f:ac:29:71:14:9a:1c:0f:ac:a7:11:7e:
6a:cd:f1:ae:aa:cb:49:41:d7:64:48:41:7d:4c:ef:0c:25:46:
6d:50:5b:e9:ad:7c:00:a3:e3:cc:90:7f:58:b7:c4:92:4a:1c:
dc:ac:75:a4:87:ba:9d:54:97:2b:0c:56:e0:e0:bc:c2:46:a3:
cb:c5:0c:28:fb:16:7c:bc:33:b9:57:59:ab:bc:99:c2:f1:a3:
eb:b0:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org