Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea723210-2f9c-39c5-a73f-162a1e1d50b1.roa
File: ea723210-2f9c-39c5-a73f-162a1e1d50b1.roa (raw, json)
Hash identifier: DiVbOjw2SiBEUFe25pv81xZQ70LmXI/po9irkmMQPvA=
Subject key identifier: D8:58:84:48:12:A9:01:48:24:47:27:C0:FD:AB:28:DE:00:79:5D:6F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493162053E9F1A566DCBDE480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea723210-2f9c-39c5-a73f-162a1e1d50b1.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21552
IP address blocks: 207.236.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:20:53:e9:f1:a5:66:dc:bd:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f6a8b829-1e4e-4630-aac7-f23b886575a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:9a:b3:6c:fd:95:89:05:02:4a:e8:1b:e3:
22:9b:6e:b0:41:0f:f2:a4:31:b8:de:51:6e:4d:e0:
92:f1:ea:89:25:89:48:84:b0:55:d1:d2:25:1c:dc:
10:a8:2a:05:79:f8:eb:80:4a:3c:a3:a2:b6:c2:65:
30:bb:22:52:00:ce:c9:c9:ed:7d:2a:c4:c4:e2:c3:
be:f5:f5:c1:59:92:97:dd:70:a5:fa:b3:23:08:99:
bc:3e:de:73:30:da:62:ec:fa:31:fe:37:ad:de:d1:
e7:0e:2e:45:9f:51:50:47:94:c0:54:10:ff:4f:b4:
c3:7e:17:e4:13:e6:db:70:ef:13:41:11:5a:07:2e:
14:1c:67:aa:1f:ce:11:a8:c8:71:4a:8b:67:6e:ac:
85:0b:22:5b:dc:2d:37:50:36:1c:3e:90:33:f9:6f:
44:90:fa:d2:ed:6b:a8:d3:f1:b8:b8:99:0d:f7:84:
bc:31:c0:e4:ae:58:d9:15:3e:1e:8b:3c:a8:46:32:
1b:84:e8:f1:9e:a5:6e:f9:b1:20:f9:77:b9:c4:fc:
ad:b9:2c:7e:09:c4:77:ac:90:8e:23:9f:f3:98:b3:
4e:d1:e1:df:04:1f:5f:37:78:c2:03:a4:7b:95:85:
e5:3c:91:ff:97:85:69:d4:38:18:f8:e9:a1:eb:61:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:84:48:12:A9:01:48:24:47:27:C0:FD:AB:28:DE:00:79:5D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea723210-2f9c-39c5-a73f-162a1e1d50b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:46:61:72:83:ca:b8:be:e1:59:6f:43:f3:87:07:eb:41:42:
ef:64:ea:02:b8:6f:71:f5:0a:28:5f:ad:17:fb:9e:d5:d6:55:
b1:56:40:23:e6:0d:c1:e1:ea:ff:db:90:28:f2:d2:7f:71:9a:
64:cd:ec:83:6a:35:f6:a2:3e:fe:25:a4:3a:07:b6:35:e0:6e:
bc:bc:30:41:37:f4:90:47:6f:81:c3:c7:ed:06:1e:c3:6d:fc:
31:e9:62:cc:6d:a9:62:22:b9:39:7c:85:e2:65:cb:c3:b6:7b:
78:14:e0:94:cc:74:78:b1:a1:04:c8:10:1d:66:ad:f2:2d:03:
36:4f:8d:bf:d2:bd:8a:d4:3f:13:2d:13:8d:2a:8d:76:45:08:
ac:a0:5f:3a:26:7c:b8:47:54:fe:01:d7:e3:10:f4:6c:57:30:
91:2d:76:e7:e8:83:48:7f:bb:6d:7b:e1:02:6b:76:ea:fb:21:
3c:a7:d4:85:7f:ce:5a:9a:37:d1:e6:74:4d:40:a8:50:54:b5:
47:54:54:3f:5c:ad:14:b8:35:21:d2:70:16:aa:44:fe:0c:e3:
c8:88:10:67:9e:f6:4d:d9:4e:a2:fc:ee:5f:ce:1f:20:a8:03:
fe:5a:9e:8d:f3:e4:1a:c4:28:8b:b8:bb:a6:57:90:74:f5:19:
f3:4a:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org