Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e695089a-626c-302c-adc1-fdbce560ec18.roa
File: e695089a-626c-302c-adc1-fdbce560ec18.roa (raw, json)
Hash identifier: 7qf9G8inVkeXR52SvySbJqoqe15sH8qmPdfnLaBjC54=
Subject key identifier: A3:71:D0:BB:CE:64:31:36:17:4C:39:49:31:3A:FD:8F:9F:46:C8:56
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFDF89EB27A3B1AC51A6C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e695089a-626c-302c-adc1-fdbce560ec18.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21724
IP address blocks: 204.101.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:df:89:eb:27:a3:b1:ac:51:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=e67a2b11-72da-4c06-9bea-8e45eea2b44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:7d:12:dc:15:22:9d:94:fb:f3:e3:9e:7f:
48:df:be:e9:c6:97:2b:a0:7c:0a:75:9d:b1:4a:71:
0f:d2:34:2b:af:b6:b4:70:64:bc:57:6e:c7:ad:7f:
9c:91:7b:46:99:e2:80:94:03:0f:c7:53:34:fa:d9:
75:98:cd:a4:fd:01:4a:a8:78:60:b9:91:ad:44:73:
7e:f2:67:51:2d:2f:5e:c7:48:6f:4f:75:4d:b9:68:
0d:05:45:a7:b0:0a:62:13:91:4d:8c:77:9e:a3:07:
4f:73:52:b9:1c:c7:74:af:32:65:05:61:7f:52:60:
78:67:72:f4:72:89:fe:1e:61:59:c7:80:b9:b9:de:
f4:af:be:6a:8f:47:6c:a1:df:66:79:2b:26:56:69:
a6:ea:62:fc:8f:a9:16:01:ae:95:8a:d3:c2:7e:fc:
80:d6:55:0e:6d:28:c6:45:b6:94:b7:63:0e:71:2f:
0d:9b:c6:57:9c:40:57:a5:8c:fd:92:b5:fd:13:db:
5f:16:0a:b8:79:d5:32:15:ed:61:de:4d:7e:c3:f4:
4c:71:73:cb:94:dc:8a:0a:50:08:0d:bc:c0:a3:3d:
ea:6b:15:6d:4c:8b:d2:6e:a7:37:b7:40:02:56:b8:
c6:43:58:14:45:12:76:62:0c:c2:a3:51:7f:ab:a5:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:D0:BB:CE:64:31:36:17:4C:39:49:31:3A:FD:8F:9F:46:C8:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e695089a-626c-302c-adc1-fdbce560ec18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f9:82:35:0d:63:9a:31:44:5f:0b:8a:74:8a:a9:69:98:76:
22:a7:4a:5a:9b:e3:a2:8b:dc:57:29:84:d1:27:f9:a1:8d:2b:
1e:8e:a8:c5:63:6c:a2:c8:14:07:0b:d4:40:e5:6d:fb:27:0f:
ff:e1:75:a3:23:f6:77:6d:c0:db:03:76:2c:72:12:03:b8:a2:
26:83:cc:8e:76:a7:04:c8:a2:32:42:64:b3:93:7a:23:bf:8c:
c2:47:f4:c2:33:e0:b4:da:14:f2:53:1f:b4:a1:d7:c2:e3:07:
c8:18:81:f2:58:17:10:d1:f9:c4:3d:95:54:8d:be:2a:16:d2:
36:43:bb:f4:24:fd:47:02:6a:dc:7e:9d:ef:4b:06:f7:e4:d2:
1f:ce:dc:5c:5a:86:86:e5:fe:46:bc:90:83:a7:1a:3b:c5:a7:
f4:a4:4a:95:fc:e6:2c:b8:8f:c0:c9:89:47:c7:0c:87:64:fc:
36:f8:c0:e8:4e:56:73:6b:16:25:58:c6:60:24:44:c6:ab:af:
bd:24:89:02:ed:ee:c2:7d:de:c1:f5:c5:dd:92:7f:26:6e:dd:
a4:aa:9f:b9:59:a7:34:e8:93:20:cf:53:1d:ca:98:2f:87:b1:
88:82:43:86:ba:79:92:3c:eb:5c:f0:16:53:3a:ee:25:57:e4:
7f:37:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org