Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5435709-dfcc-363a-91c8-36434f3a6a8c.roa
File: e5435709-dfcc-363a-91c8-36434f3a6a8c.roa (raw, json)
Hash identifier: Ov362dfEpIXFD265Vumt1f8HdC3goZUi/qSE/nHIZT8=
Subject key identifier: 97:48:44:58:E6:ED:E2:BF:82:73:31:5B:24:D3:61:A2:91:CD:34:3A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE450E674E7AFCA22C9F500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5435709-dfcc-363a-91c8-36434f3a6a8c.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 70.28.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:50:e6:74:e7:af:ca:22:c9:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=d05ff432-4281-405a-805c-d79ed8e0ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:94:9d:b6:b3:c0:ff:c9:0f:91:38:10:bf:
c2:80:f9:12:8a:76:7a:a0:6d:9b:f7:ba:1b:93:62:
4f:36:82:a7:c8:5f:9f:ea:39:28:f5:3c:35:72:15:
43:7b:b3:ec:10:2a:23:cc:de:75:2a:d8:40:bb:6f:
8a:84:a6:85:07:2e:49:a2:0d:9f:50:bc:f3:b6:ae:
32:92:59:a0:f7:5a:ac:f1:c2:26:19:a8:ee:da:08:
c9:4c:26:ee:ee:f8:5b:92:d7:0a:2d:f6:9a:e2:8e:
ec:73:61:9b:53:5d:a7:32:60:00:1b:80:3d:f4:7a:
91:f1:b4:9d:f8:de:66:83:dd:70:a7:a8:f7:2d:66:
5b:8a:4a:09:c1:d0:c7:15:ea:44:e0:ba:3e:be:d9:
11:9b:9d:62:1b:c0:1d:5a:e9:8f:bb:6f:b1:fb:b9:
3c:67:5c:cd:5b:51:68:87:77:3e:02:68:74:98:8b:
c0:21:82:b4:43:77:9a:6b:76:86:2e:32:01:54:dc:
4c:4b:93:7f:27:47:fd:de:bd:c8:05:30:ed:a7:8a:
1b:40:91:67:29:8a:25:b7:ca:e9:cd:2d:6b:5c:ca:
33:eb:dc:18:42:ef:1c:60:51:25:90:14:82:08:a6:
df:bf:8d:34:74:56:31:be:b2:07:32:d8:fc:87:a1:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:44:58:E6:ED:E2:BF:82:73:31:5B:24:D3:61:A2:91:CD:34:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5435709-dfcc-363a-91c8-36434f3a6a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:bd:ca:3f:b0:f8:12:2b:19:90:11:7f:74:2e:92:1d:3a:f3:
57:f1:78:43:ed:56:63:19:a5:3c:cd:82:e6:e1:19:5b:20:c0:
8d:76:21:82:dc:9e:af:6f:b5:52:e6:77:e5:12:ef:e0:cc:95:
ac:f7:30:a2:6f:27:5e:0a:de:05:72:6a:b1:63:bf:b9:b2:4e:
2d:6a:39:bf:45:ee:99:20:8b:ef:88:ba:ff:40:12:c3:09:d4:
b2:a3:cd:ac:a1:72:62:8e:f1:c1:ca:be:97:2b:ed:61:5f:58:
43:85:ad:a6:c1:3e:4a:b3:9e:34:44:b9:74:4e:86:18:61:71:
eb:9b:b8:79:2a:6e:ff:76:18:1c:83:b4:60:21:93:0d:62:0f:
51:f1:45:09:d4:41:09:c7:87:48:0b:0f:39:b6:30:e6:2e:17:
ba:ee:57:13:f8:99:ce:51:2b:a2:23:40:4f:13:a1:ed:51:20:
70:3d:79:13:cb:31:c7:20:db:85:fa:fe:9b:29:9e:5d:33:42:
a3:5c:28:12:e1:43:32:54:c9:35:7e:e5:c3:ab:f0:2a:c2:bf:
1f:dd:c3:2b:bb:1e:65:6a:ee:37:01:74:ee:20:53:9e:9a:06:
08:00:e4:4d:ea:da:ee:06:c8:da:85:5f:33:7f:73:9b:02:ea:
04:cd:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:23 2024 by rpki-client on console-ams.rpki-client.org