Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f11724d7-fd00-3f87-886f-ae8cdc69c059.roa
File: f11724d7-fd00-3f87-886f-ae8cdc69c059.roa (raw, json)
Hash identifier: 3qyRxFO0a8IS91tsfLFJJWBoFJjhQVjajAq2hKU/i4o=
Subject key identifier: 46:4F:48:4E:94:C1:83:70:A2:74:EB:0C:C6:F4:A6:C1:94:CE:39:EF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA12AFCED4BD2DDC382DFB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f11724d7-fd00-3f87-886f-ae8cdc69c059.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 18814
IP address blocks: 207.34.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:12:af:ce:d4:bd:2d:dc:38:2d:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=186c518b-2d8a-4af5-ab3c-b9dee67c4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:0a:2a:74:38:2c:65:fa:19:77:a3:89:4e:
ee:6a:eb:5e:00:7f:11:4d:13:6b:af:0f:78:88:29:
db:52:34:43:0c:a1:c3:9c:35:b7:03:14:1c:0d:5e:
32:61:f8:f2:b1:14:be:e4:ed:77:7e:f0:b8:ff:6a:
0a:ed:e8:7e:cb:75:41:b2:d0:c5:3f:e6:f1:83:68:
d4:45:9f:23:7d:be:e1:0f:9c:b3:ab:94:c0:e7:9d:
5a:23:74:4c:03:6b:ad:83:39:21:05:ee:23:59:69:
ae:d4:5b:31:ed:b5:c7:c0:15:db:fe:e3:b4:9b:d4:
43:2f:d7:94:ed:e9:3c:b2:24:3a:51:65:ea:34:96:
c1:d2:c4:76:78:21:06:cd:ff:51:c4:57:fe:e4:b9:
7b:51:41:fd:93:f1:cb:7b:bb:02:29:74:78:7d:11:
3b:56:d1:3d:dc:81:fb:5b:fc:01:5e:a5:24:0c:d6:
2a:b8:6a:b0:fb:5e:73:25:38:10:b6:51:dc:1f:48:
c7:d1:1a:11:c4:18:76:6f:8f:40:14:0f:2c:ef:c8:
87:9a:1a:aa:02:48:59:2a:4c:49:55:71:1e:8e:00:
69:e1:6f:cf:4f:38:b3:11:0e:a1:d6:16:25:ce:35:
14:94:60:dd:38:e1:08:6d:87:67:2f:fe:27:2f:92:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:48:4E:94:C1:83:70:A2:74:EB:0C:C6:F4:A6:C1:94:CE:39:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f11724d7-fd00-3f87-886f-ae8cdc69c059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a4:99:5c:24:3c:41:92:04:42:c2:aa:50:2c:07:88:8c:25:
a9:35:53:43:80:a9:18:2d:4a:3a:da:cc:9a:42:83:a9:36:a5:
78:d6:52:15:84:31:fc:cb:be:e4:a9:e7:a0:1a:60:5d:ae:38:
55:f9:ff:a1:0a:30:ed:7c:fb:17:ae:bd:14:8a:aa:32:54:c0:
30:99:e6:5f:66:5e:e9:cc:0f:26:df:28:9e:db:3c:37:0f:41:
59:db:df:a1:0d:87:0a:9b:a0:dd:8c:b3:ff:87:a6:a7:38:29:
d5:76:7e:19:2e:68:c5:ee:80:44:9a:1c:5f:58:17:03:1d:fd:
2c:a4:b6:b4:43:ca:81:a8:e1:96:b3:08:5e:b8:12:5f:3f:38:
b0:5e:c7:f4:54:5e:aa:57:c0:69:ff:48:2f:b9:84:a1:93:9f:
b4:10:b9:e8:54:a6:e5:e5:fd:8c:31:92:7e:b8:4c:e0:6c:3c:
97:d7:4a:5c:c4:1a:16:ee:5b:0c:6f:63:ee:08:01:08:a6:9c:
8a:fd:b7:22:e1:fa:29:e9:8d:0d:1a:23:bb:31:14:fa:00:1d:
2d:e0:88:ee:57:16:26:f4:ee:51:fc:56:fb:3d:fe:e9:20:c4:
72:e6:db:ba:0b:ad:b8:d8:5f:2d:68:aa:3c:55:0b:6e:00:21:
37:c3:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 04:07:35 2023 by rpki-client on console-ams.rpki-client.org