Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f189aaf6-5970-3f36-88d1-f3faef8e1bc9.roa
File: f189aaf6-5970-3f36-88d1-f3faef8e1bc9.roa (raw, json)
Hash identifier: gOAm/joycz+nrSNxTs+D1LdEZO+CfE/52QnMSKKE+x8=
Subject key identifier: 9F:A2:7B:C5:4B:AD:03:80:B6:AF:F7:8A:BD:AC:71:BB:84:CC:27:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB06CEE0338579C6C065140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f189aaf6-5970-3f36-88d1-f3faef8e1bc9.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.172.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:6c:ee:03:38:57:9c:6c:06:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=a189974f-fb7f-43e4-91eb-2257873846c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:e2:4b:c2:96:aa:3c:d0:3c:50:d3:28:bd:
04:8e:dd:9e:dd:c5:66:c0:6b:d5:be:44:80:9d:c0:
f6:bc:38:6d:fe:ae:7e:4e:ff:7b:0f:ce:4f:e1:fd:
09:9a:bd:86:5a:93:e4:2e:c1:20:61:50:50:b5:c7:
b3:b3:fa:2b:85:8c:90:25:c6:33:9d:9d:3a:94:08:
85:1e:70:ec:b1:b2:3d:ec:40:5f:70:c2:9a:4b:cc:
40:7a:5c:5a:ca:1e:d7:71:25:5d:bd:0d:12:2c:16:
3b:b3:97:28:f1:b5:f8:23:b8:cd:b5:df:d2:1e:05:
9a:f8:76:48:0e:fc:9a:ba:e7:c3:e4:51:fb:3c:36:
b4:1c:d4:42:07:f1:2c:20:e8:07:1d:5e:a3:a5:f5:
bb:52:17:c1:d1:c4:fd:c8:2a:1d:a8:d7:9d:71:7b:
07:9d:27:b5:64:3d:56:cc:2e:cc:2f:52:f8:6f:eb:
a5:27:1f:74:67:d5:0a:4e:b3:70:2e:44:df:e6:9b:
6e:e4:e6:f9:50:a0:f9:88:00:bf:be:8e:63:e2:1c:
a4:5d:f9:22:8c:bd:33:a1:b6:3c:ad:16:76:52:43:
c3:d1:c5:d1:83:bb:5c:04:4b:65:29:3b:3b:15:ad:
46:4e:2d:df:c2:c5:77:cb:04:24:ed:57:14:cf:39:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:7B:C5:4B:AD:03:80:B6:AF:F7:8A:BD:AC:71:BB:84:CC:27:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f189aaf6-5970-3f36-88d1-f3faef8e1bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fb:bf:87:8e:ed:06:6f:24:bf:81:75:ef:9c:d3:e3:13:d2:
67:38:50:6e:3a:bf:70:d8:1e:5b:cb:0f:5a:6c:c9:d6:c2:11:
64:10:70:e4:d9:44:6d:31:9f:5e:dc:a8:22:e7:a9:23:8c:21:
03:33:de:69:fb:7b:5e:63:8b:7f:a3:6a:96:81:64:eb:12:9f:
f2:56:15:cc:bb:7e:32:4e:63:71:91:7e:3f:82:08:91:f3:e8:
06:df:3a:6f:38:ec:9a:d5:f7:14:2f:60:e5:66:76:94:35:a8:
64:f1:05:6c:ef:9b:44:61:8e:86:ef:bf:9e:cf:97:0c:c7:09:
6a:77:15:19:9c:dd:88:f5:fd:f7:07:2d:90:c4:d3:1c:19:ba:
e3:d1:55:b9:cd:43:a8:eb:91:8a:50:93:4b:12:20:e3:11:48:
01:59:31:51:3b:80:82:6f:29:53:0a:a6:55:77:f8:85:14:d8:
0a:4b:93:43:95:b8:1e:e0:b5:0b:88:65:df:fb:d7:8e:ca:d9:
44:27:ba:99:d8:09:fc:f0:5d:42:6e:06:88:51:4f:72:60:b7:
2a:ff:75:c2:00:d3:e2:fb:9d:4d:da:21:c4:c0:b4:03:52:4c:
0b:69:a0:7d:5a:6f:d4:85:30:2f:4f:0e:48:ba:35:45:d9:08:
ca:d3:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org