Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e14cdc04-3082-36a2-8a55-9cf40de7bf8e.roa
File: e14cdc04-3082-36a2-8a55-9cf40de7bf8e.roa (raw, json)
Hash identifier: uwkvmYHnvtBF39m7oDWoiAJmny1rj4LpqXmzgCMsFf8=
Subject key identifier: 62:77:82:D0:26:B9:3D:70:F0:D8:8E:6B:E5:3D:B8:BC:92:CD:FA:45
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0132FC0FD2FBCD57EF300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e14cdc04-3082-36a2-8a55-9cf40de7bf8e.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:13:2f:c0:fd:2f:bc:d5:7e:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=d5b579c8-aef4-4d05-b195-c43550fe7cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:b8:54:23:cb:1e:27:e1:1c:b4:b7:98:65:
79:2e:8b:af:1b:8f:c9:17:fc:07:90:a6:2e:db:88:
df:ab:46:41:b8:d3:81:da:3e:ef:19:30:1f:e3:2f:
91:61:1a:32:cc:b2:17:1a:d7:1e:0b:c2:b2:dd:73:
c8:60:d5:d4:6e:5d:d2:e7:1d:eb:ab:ff:3e:9b:12:
0a:af:8a:e4:57:ab:66:38:81:38:68:d3:46:c2:3a:
ef:a0:27:98:22:cb:16:6f:a1:4b:cd:ba:fc:bb:3e:
d4:f1:e1:1d:ab:08:da:5f:0d:2f:53:1d:15:05:24:
8b:a4:b5:75:e8:85:d4:c4:df:45:5d:9a:0e:09:a6:
6d:2e:de:0c:0c:c1:46:b3:2b:27:38:bb:5f:7b:ec:
0f:7b:43:03:30:b4:fd:c7:f6:07:6d:97:1b:49:0b:
f3:34:30:8e:04:19:b7:5f:01:ac:d3:63:0e:fb:91:
06:e6:84:89:1a:bb:80:fe:57:02:ca:ca:12:b7:c7:
c7:1e:da:30:cc:a9:80:9f:c0:5b:8c:28:32:fb:20:
f7:5d:9f:15:fc:23:ab:e5:53:9c:f8:cf:74:23:5d:
0b:f5:75:9a:2c:ae:84:18:00:be:d5:07:73:3f:e7:
eb:d9:e6:c7:7d:88:ef:02:9e:ee:00:a3:da:16:ef:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:82:D0:26:B9:3D:70:F0:D8:8E:6B:E5:3D:B8:BC:92:CD:FA:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e14cdc04-3082-36a2-8a55-9cf40de7bf8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b8:d8:55:78:08:5a:d3:9a:31:9f:9b:60:5f:78:6f:84:71:
ac:5d:8d:75:a1:52:6d:8b:36:f9:10:93:8e:af:5d:f6:00:93:
5b:b4:08:a3:68:7b:ee:1d:aa:d1:c9:fc:43:ca:33:4d:66:ee:
f3:56:58:46:bd:60:be:d6:31:c2:08:c2:d9:e0:fe:07:3b:e7:
a9:a5:39:de:9e:33:55:69:d2:55:0d:cf:84:8d:a4:3d:c3:a0:
30:8b:44:47:72:35:f6:30:10:50:de:10:51:32:6b:37:2e:f0:
04:16:8f:01:b1:4c:57:8f:70:2c:94:3d:de:08:eb:4a:71:2d:
09:36:61:ac:78:01:dd:94:c9:dd:c3:8f:44:e8:fc:4a:c6:fe:
d4:66:64:f2:c2:aa:74:9d:e8:17:fd:13:a5:c5:53:34:e6:cc:
54:bd:c1:d2:fd:b8:c7:4f:33:63:f3:d3:73:c8:31:84:34:33:
a2:14:17:d7:c8:b5:d7:51:7d:de:3a:dd:6d:b0:48:a2:1f:aa:
f1:f6:b9:15:b0:ce:77:e8:c5:cf:ef:93:3f:bd:0c:35:44:50:
a8:0a:4b:63:28:54:18:b0:0a:48:a4:33:18:2a:f9:76:ff:13:
fb:1b:1f:f0:45:3a:c9:0c:ec:36:a1:47:0a:50:ec:2a:46:9d:
e3:7e:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org