Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea3655f9-cb1a-32cc-9158-531a49ec7eb5.roa
File: ea3655f9-cb1a-32cc-9158-531a49ec7eb5.roa (raw, json)
Hash identifier: KT6JLAIxwFqdN8NAfVptTtQPG0tCCTDt6MAorQ0VR3s=
Subject key identifier: CC:08:F5:91:CB:8F:7B:B1:99:36:C7:12:90:11:7F:49:0E:03:93:13
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314BE9CF7E0297F5257F380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea3655f9-cb1a-32cc-9158-531a49ec7eb5.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:be:9c:f7:e0:29:7f:52:57:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0f6fd452-08f8-49e1-bf7e-36befbde3a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:33:14:f5:fc:12:42:eb:49:29:57:a9:dd:
40:33:24:4e:5f:56:2c:13:8c:8d:bb:f6:b0:5a:85:
16:5c:61:98:c2:d4:6a:59:c5:bc:44:18:04:3b:32:
d1:59:4e:a0:df:81:3a:af:fd:d9:ca:66:74:5c:60:
0c:e0:d2:e3:4e:a8:75:d2:eb:f2:be:54:83:b5:76:
7f:51:ed:02:93:6e:db:59:16:08:01:1f:17:1c:ce:
b0:cc:a5:f8:09:25:22:2e:20:11:b3:02:35:96:aa:
44:3e:78:d9:09:62:cb:48:b5:75:a1:07:8a:65:38:
d5:54:45:b3:55:9b:70:cb:7b:aa:4f:21:6e:a1:75:
20:56:9e:0f:50:81:0c:96:b4:a9:85:e6:68:50:b2:
12:b5:11:db:ca:0e:a1:42:64:9b:01:b2:f7:90:38:
ca:44:b5:7e:0c:23:36:de:80:83:45:45:09:44:11:
87:9b:48:9d:0c:a9:0b:50:cb:e2:7f:1f:07:79:41:
c5:fa:0e:ba:1a:c6:5e:cc:cf:0c:4d:be:94:b9:5c:
89:40:34:c0:91:77:c3:9a:35:b8:23:17:e4:b7:ec:
b7:ed:47:89:74:5c:2b:ca:9f:8b:28:00:d7:14:41:
22:86:32:80:06:cc:31:f5:3e:47:b0:75:01:07:4f:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:F5:91:CB:8F:7B:B1:99:36:C7:12:90:11:7F:49:0E:03:93:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea3655f9-cb1a-32cc-9158-531a49ec7eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:75:5e:aa:d8:87:a5:9d:5b:54:0c:36:80:de:24:f8:8e:c8:
58:14:2c:df:1e:09:a9:69:95:bb:07:81:74:a6:38:09:3a:61:
96:f6:f8:da:6a:94:30:c3:47:ec:18:85:f0:21:7e:a2:23:35:
7a:e6:cf:63:a1:43:fd:8e:88:7a:e3:8f:ec:88:9e:1c:14:41:
49:72:3d:3f:8a:d2:9e:1e:86:6b:12:3d:44:ff:08:88:b0:e4:
74:04:d2:50:eb:77:75:73:0c:22:2d:7f:36:1d:be:ea:2e:aa:
66:8f:2a:e2:b3:f5:69:71:db:69:44:d5:94:bd:c2:6c:f8:47:
d8:81:2b:36:37:15:5c:54:72:db:95:8f:55:fe:31:9f:33:6e:
7a:64:19:04:83:22:62:86:50:60:9a:9a:6a:ae:2c:99:03:00:
8d:c4:e0:ff:5b:ca:ec:0c:53:ce:f6:5e:8e:5b:89:e0:e4:5b:
19:6e:5e:ff:cd:f0:6f:ec:5a:cb:e4:16:79:68:8a:7c:0b:cc:
52:eb:1c:7a:0d:b7:ba:da:7f:70:02:ad:39:a8:c1:5d:d3:81:
a5:be:13:31:13:8f:8c:70:b3:a9:b8:dd:07:3f:cf:09:dd:8a:
1d:6f:7d:db:46:06:4e:57:80:4e:e3:24:87:49:91:08:e5:08:
21:21:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org