Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f41f1d49-1830-3d55-bc6e-f446d8977e0c.roa
File: f41f1d49-1830-3d55-bc6e-f446d8977e0c.roa (raw, json)
Hash identifier: CQdegNREFoU27DMemKhQQfR3PtmU+PoXmvqmsc9QK4E=
Subject key identifier: B8:AD:C1:28:E7:81:63:5B:03:EC:5A:C7:24:0B:10:42:05:6F:A3:12
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFDC51EDC174A845D16B40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f41f1d49-1830-3d55-bc6e-f446d8977e0c.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21724
IP address blocks: 204.101.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:dc:51:ed:c1:74:a8:45:d1:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=d7008d2c-3433-417b-9c95-42bac154b103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:73:26:43:8b:e5:0d:db:d3:43:19:1d:e4:
a1:f5:7c:00:d0:8c:e3:c9:96:39:c3:af:d2:0a:55:
0d:83:5a:a6:12:98:8e:0d:40:48:57:4a:b7:0b:b3:
dc:a1:08:4e:3d:11:95:f1:61:34:30:d5:35:df:41:
39:d3:fe:f1:c3:fd:22:af:2f:99:d8:38:c6:59:01:
be:a0:82:02:f6:44:4d:d2:76:c6:d3:b4:e9:2f:53:
00:43:02:e4:90:5b:63:c9:8d:bb:62:89:d1:d0:a3:
ec:d0:e0:5f:8a:b5:38:78:04:13:04:3e:50:64:fa:
a5:25:f6:7c:a4:88:80:ed:06:53:b4:57:15:dd:8b:
49:a3:5d:6b:a4:43:c7:dd:05:64:71:d4:00:0c:54:
45:a5:23:24:de:68:9c:f7:4f:11:d3:f7:dc:d7:41:
7b:45:92:ac:59:5b:6b:b7:be:b8:80:39:3b:21:82:
fa:2c:7e:55:66:28:01:01:f6:d5:73:69:e4:9d:a2:
69:1a:58:6b:56:ed:39:02:77:9f:ec:ca:0e:88:19:
9c:cc:e2:4e:68:0e:64:e1:23:2c:57:08:68:58:5c:
d9:49:d0:3a:7e:28:c4:03:d7:fd:65:66:ec:a4:39:
bd:b8:ff:fe:24:c8:4e:b3:a8:9f:46:6f:43:be:4c:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:C1:28:E7:81:63:5B:03:EC:5A:C7:24:0B:10:42:05:6F:A3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f41f1d49-1830-3d55-bc6e-f446d8977e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a0:df:87:13:a7:4a:c0:fc:7d:3c:79:95:dd:b3:aa:25:27:
a7:b8:1a:6b:96:20:ee:25:a3:28:86:3d:55:25:a8:c5:a5:02:
5f:98:36:3b:cf:ac:5f:c0:84:53:18:80:ba:c8:ae:49:ac:43:
9f:58:53:b6:ff:44:d1:38:77:85:fa:5c:ca:4f:65:ec:aa:d9:
16:75:cb:dc:78:45:60:4e:2d:7e:2e:35:33:93:80:47:d1:8e:
cd:5a:f5:ad:dc:c7:8a:d3:94:2e:4d:4d:a3:56:9e:3d:0d:fc:
57:7c:3b:0b:15:3b:48:a8:52:13:96:e5:4d:d8:15:cb:e3:07:
b1:dd:50:56:69:90:a3:02:4a:42:37:35:6f:a2:eb:7d:db:46:
bc:a4:8e:e0:4a:4d:cd:f6:4f:ea:ec:ca:46:61:fd:c9:25:3e:
29:8c:2d:1f:eb:c4:2a:c9:d6:ef:e7:27:a2:e2:e9:d5:7f:66:
5d:60:f9:c5:09:20:38:27:45:3c:29:c7:ab:ce:b0:b2:dc:73:
7f:9b:da:e1:c7:5e:45:f8:13:2f:28:0a:de:a8:df:07:a4:4a:
66:ee:65:9f:d0:62:76:76:88:25:c7:9b:a1:4a:0c:1d:bb:d3:
27:63:f3:05:9a:e9:75:da:eb:64:9f:6a:82:52:d3:cf:f2:cd:
39:d3:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org