Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4becff8-27d3-3b71-9ca4-0e8c1e6b2445.roa
File: f4becff8-27d3-3b71-9ca4-0e8c1e6b2445.roa (raw, json)
Hash identifier: dvm0d7h7QX2Su3bJn6CTDQHgpOiUUW1dKFB+oe8wOTg=
Subject key identifier: D7:3F:95:EF:A4:62:85:A5:36:85:56:93:89:78:FD:77:1D:D1:DD:88
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931645EA306E4D1053FB1140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4becff8-27d3-3b71-9ca4-0e8c1e6b2445.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.226.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:45:ea:30:6e:4d:10:53:fb:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=ce0d6b8f-4e6b-4e01-bd35-1a6feae9ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:65:17:13:ab:f1:89:4a:19:d8:d4:1b:c8:
4a:61:d1:65:48:b9:32:b4:d9:33:8d:fb:12:6a:08:
9d:d3:0e:1a:2a:d9:1f:5b:af:01:17:80:7a:9c:db:
60:20:bf:13:d0:b7:af:79:0d:3e:92:78:51:a4:d8:
86:f3:71:05:5d:13:85:7c:96:3c:9c:c1:d6:75:5b:
36:51:a4:63:7e:d9:a7:6f:66:e0:79:9a:d1:6a:cb:
ca:aa:8f:2c:ac:c8:42:b4:87:a0:a6:ce:3e:78:31:
3f:fd:63:fa:80:78:9b:5b:79:a1:08:d2:fa:49:37:
61:f8:c6:31:d2:10:f6:61:bd:f1:a9:0b:cf:b8:e8:
b6:42:41:e7:8f:87:2b:63:46:9c:e5:4b:0e:af:fa:
cb:e2:78:9e:09:be:09:2b:2f:0b:3a:eb:17:2e:16:
71:4b:17:4a:fa:c2:12:33:9f:74:78:bb:6f:6e:af:
fd:a8:0b:be:e4:a7:12:b7:43:52:ba:ed:49:bc:8e:
96:df:2d:f0:61:66:26:e2:86:b0:24:66:4b:ef:d4:
94:df:b3:46:5a:e6:a0:ae:92:32:d6:ae:7f:da:18:
b1:dc:68:d7:a8:45:3a:c8:87:7d:e8:52:38:1c:aa:
0d:d6:ac:d9:87:17:7a:5a:f8:a8:58:0b:79:f2:c4:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:95:EF:A4:62:85:A5:36:85:56:93:89:78:FD:77:1D:D1:DD:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4becff8-27d3-3b71-9ca4-0e8c1e6b2445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:77:bb:69:cf:15:10:74:71:90:4d:2d:db:eb:2b:4f:26:f5:
c6:69:d6:5b:77:ac:f2:e5:0f:4e:72:e2:dd:02:12:d9:d4:14:
c8:05:34:aa:c1:9d:6a:23:59:db:d4:15:fa:ef:74:ee:2e:1b:
a3:9d:dc:4d:9d:94:51:84:35:03:9d:17:ae:fc:98:a0:77:4c:
82:fd:78:1e:c9:a7:f9:94:b3:8b:31:91:fd:5d:cd:62:73:00:
c3:6d:58:2a:01:48:41:3b:c3:4e:91:25:e3:f5:ec:27:ab:05:
4b:e6:07:2e:25:e8:dc:80:d8:92:3f:bf:cd:47:e8:7d:46:0e:
a7:b1:e4:1d:44:e0:b6:9c:9f:cb:8f:0c:bb:78:8e:69:9d:92:
f9:2d:06:89:0f:59:f7:c9:38:47:c5:49:f3:e9:db:86:24:97:
15:37:d3:09:4c:c1:60:ed:eb:4b:14:b6:f6:8b:24:7f:ee:f4:
a9:60:40:42:97:5b:63:39:4e:3f:c4:4c:68:be:5d:39:53:68:
8e:b0:7a:15:6f:ba:94:46:49:d8:68:89:d2:12:6c:f9:25:b1:
41:d3:31:e5:a5:6b:97:af:17:48:bd:5f:0d:c8:95:c4:54:55:
6a:67:bc:cc:27:e4:25:0f:25:90:e7:06:b8:3b:a0:59:68:63:
4b:07:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org