Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef4abf11-4ce2-3ccb-8bb1-02fe205ed669.roa
File: ef4abf11-4ce2-3ccb-8bb1-02fe205ed669.roa (raw, json)
Hash identifier: Vsi5Nunf6FHZfnmvSoMVX0cN79DYAgUgx1NxpzIs+Ow=
Subject key identifier: 07:6A:10:E3:9F:33:5E:49:4E:83:A9:C1:1C:1C:30:24:D8:CE:18:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493162B153C1AE857D57A3C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef4abf11-4ce2-3ccb-8bb1-02fe205ed669.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:2b:15:3c:1a:e8:57:d5:7a:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=f4da36ed-9b66-412a-b6f6-6bef42b9f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:34:39:0b:ff:06:f2:87:7c:cd:96:3c:48:
07:e5:73:43:02:93:56:61:9c:b1:13:22:55:07:c9:
fd:6a:12:b2:92:7e:84:99:c5:8f:45:f8:50:c9:cb:
38:99:12:06:b4:9d:f9:6b:3b:e6:75:22:b0:3b:36:
38:35:d8:fa:0d:42:3d:3a:4a:82:97:df:c1:e5:e9:
07:b0:2c:35:76:55:ff:1b:f7:24:4a:22:82:7b:71:
9e:e8:01:c4:31:32:7d:ae:de:56:f4:66:84:1f:7a:
15:71:d1:74:95:dc:ca:cb:d1:26:e2:24:88:bc:50:
bd:82:29:e0:71:b3:1b:60:69:fe:05:4a:e8:e2:15:
02:83:b4:aa:db:fb:af:a8:65:b4:1e:1c:4c:1e:03:
05:a4:fd:90:b7:24:ed:a7:33:54:19:17:c2:47:40:
21:cd:d2:4f:62:5e:ac:1d:e8:8f:f6:4d:b2:a2:1a:
82:59:86:a0:05:ac:17:66:e8:24:31:04:9c:76:6c:
8d:af:fc:67:3b:e4:49:aa:be:56:71:97:da:46:a5:
c2:16:c7:85:35:2b:a6:b5:16:0a:0d:f3:42:01:69:
69:0b:41:09:6d:61:a7:8f:8d:d8:99:36:99:62:d2:
47:3a:af:05:42:8d:95:ef:66:29:2e:fc:49:05:93:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:10:E3:9F:33:5E:49:4E:83:A9:C1:1C:1C:30:24:D8:CE:18:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef4abf11-4ce2-3ccb-8bb1-02fe205ed669.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:cc:87:d9:4f:1c:83:96:8c:d0:a4:53:f3:f9:f2:8f:7a:6c:
6e:57:dd:69:81:95:d4:0f:9f:fc:26:11:c7:02:b4:6b:45:27:
46:3c:7a:92:e2:d2:78:de:f8:95:36:04:97:bf:cd:89:af:09:
7c:36:b4:c8:28:93:2a:71:fb:a3:23:9b:bc:76:58:ac:66:ff:
60:d5:ee:64:da:78:b3:85:f5:ff:14:52:42:05:3b:bb:11:04:
0d:c7:4a:42:a2:84:cf:20:ca:4c:b1:13:51:c5:70:58:d6:7a:
f0:ac:8d:fc:05:ac:4a:8b:e7:2a:fc:b2:8c:78:8e:7b:3e:62:
d0:6d:93:39:40:43:13:1d:f5:31:e3:bc:0f:19:00:39:8a:1c:
a5:06:71:ab:1f:18:fb:56:21:24:ac:69:cc:d1:c7:ae:0d:f6:
85:9a:92:c4:a5:c9:4d:5a:93:8a:6c:48:f5:c9:fc:8c:62:7d:
97:4a:0f:7a:08:6a:65:6a:d6:83:2b:8a:be:f5:60:f4:28:55:
8c:ce:3e:7d:aa:71:28:f6:2c:4b:d2:34:fe:f0:33:3d:61:9e:
cd:2a:18:39:a1:01:ea:fb:b2:61:d9:5f:63:ce:f1:8c:51:64:
7f:3c:2d:9e:80:b3:1c:f8:67:06:d0:eb:50:19:55:3d:48:f3:
9f:3c:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org