Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8f3b232-aa23-39b7-b2c2-1e41b149cddf.roa
File: e8f3b232-aa23-39b7-b2c2-1e41b149cddf.roa (raw, json)
Hash identifier: HdgWPlxMDUq3YhAZJNXDJiE1PtToJx/WxeNTyOI3JFA=
Subject key identifier: D3:54:05:85:26:1B:60:77:C5:5A:97:AF:6F:9A:1A:79:C8:7A:10:39
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF76344CF29D03CEE379A880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8f3b232-aa23-39b7-b2c2-1e41b149cddf.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 36522
IP address blocks: 216.208.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:76:34:4c:f2:9d:03:ce:e3:79:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=2a121f29-d6f0-4b4e-9197-fc6db4ee008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:3a:6a:4b:7b:fb:aa:c4:06:12:7d:37:23:
cc:4f:50:ac:89:71:4f:d5:bb:fd:9e:8a:a9:f3:48:
1a:89:30:90:84:be:89:4d:a7:a1:46:31:57:98:4a:
66:a8:3c:59:16:57:f1:db:57:10:d6:0b:29:16:cf:
12:8d:38:0d:05:99:21:8a:c8:b9:18:a7:cb:2d:91:
d1:3e:5a:b1:6b:7a:c7:12:c2:a7:f0:50:68:cf:fd:
a1:aa:2f:e0:b1:a4:11:60:7c:99:aa:bf:f8:f2:29:
d4:07:77:8d:84:13:4e:d4:3f:dc:98:e5:e0:c7:b1:
34:7b:26:42:c9:b6:b4:06:7f:3b:1a:55:59:45:16:
de:3e:7d:93:09:ea:a8:0f:1c:c0:af:60:17:f3:e3:
09:5f:d6:a4:cc:73:0e:1d:88:78:d6:6c:b7:38:49:
a5:0b:6a:40:cc:f4:06:3d:ff:47:15:e0:81:e7:8a:
42:c9:20:e8:b3:ea:8b:6d:93:5d:95:6d:ac:44:00:
1f:d2:02:fc:a8:f6:3d:c4:f9:70:ff:b8:15:ed:cb:
58:ce:a2:80:89:03:56:2c:6c:f8:9b:ce:cb:91:02:
56:8a:ac:2a:bb:e3:55:ba:18:57:2f:b0:f6:85:e2:
cb:8a:1d:46:e9:0b:b7:80:9e:3c:80:7a:11:6b:92:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:05:85:26:1B:60:77:C5:5A:97:AF:6F:9A:1A:79:C8:7A:10:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8f3b232-aa23-39b7-b2c2-1e41b149cddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f7:8f:be:72:c0:1c:29:87:21:26:f9:65:b3:ee:3d:75:00:
69:95:6a:64:76:96:6b:40:1d:1d:a2:7a:e7:9d:84:79:0a:25:
b8:02:4b:3e:32:f4:89:d5:12:01:d0:78:01:8e:8f:19:bf:f3:
27:1d:16:55:fd:b7:a0:c6:ce:48:9a:97:2e:3d:bc:75:31:f3:
63:52:82:6f:ee:a7:06:45:cc:1d:17:a1:12:5b:7f:e3:e4:d3:
a1:18:9b:03:ea:55:77:c4:57:f0:f8:95:79:a8:bc:a0:e2:7c:
88:2c:d3:07:61:86:cf:29:d6:a4:d2:cd:3b:0c:92:94:30:7a:
60:a7:93:40:56:18:b6:ff:6a:2f:07:65:3c:65:c7:d1:39:d5:
1f:73:7c:9b:0b:bb:e0:48:20:8d:47:63:d9:75:1a:55:c1:05:
ae:2e:c0:bb:4b:01:e9:e2:af:b2:e8:db:4e:eb:70:70:a8:f2:
be:bd:86:3f:3b:84:85:30:fc:38:a0:75:af:9f:82:14:d4:9a:
3b:ef:fc:e4:bc:93:f2:85:6c:ba:18:af:e6:4e:f3:23:5e:b4:
c2:a9:1c:ee:dd:0e:d5:d1:96:4a:cf:89:0e:51:58:4c:82:79:
df:bf:87:a8:9b:1b:9b:51:4d:d0:cb:04:55:d7:62:69:47:a3:
bc:bb:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org