Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8d8a35a-b830-3d78-b5a2-5d1672d62b22.roa
File: f8d8a35a-b830-3d78-b5a2-5d1672d62b22.roa (raw, json)
Hash identifier: alhVCXNwXydnI/kpOmsvIwJFbZWTQevQFs+HmIQ3iI0=
Subject key identifier: 0E:89:BB:7E:81:5F:B3:6E:83:FB:0E:BF:D1:0E:BE:E6:55:46:F4:68
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75A47B1461B0AF187A6E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8d8a35a-b830-3d78-b5a2-5d1672d62b22.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 36522
IP address blocks: 184.151.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:a4:7b:14:61:b0:af:18:7a:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=5756bbc1-4f00-44ab-bef5-603d05998fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:9a:80:df:a4:56:51:43:8f:e3:8f:ab:4f:
43:fd:d7:a9:0a:0b:81:ff:fc:5a:36:3c:c2:f9:60:
c4:e5:9f:fc:36:61:11:01:a2:8d:0f:40:1f:cb:90:
b4:4d:5e:45:c3:07:0a:37:64:5c:40:8e:a5:a3:2b:
23:f5:17:2c:e1:30:14:1e:e0:75:ac:03:f9:72:a0:
80:cb:a9:8f:e7:f3:9b:bb:93:fc:c5:73:25:d6:d3:
68:65:c4:a1:2e:d0:87:48:f9:fc:7a:be:d7:ee:7d:
0d:c8:21:59:c2:cc:5a:4a:31:1a:01:5d:c1:94:64:
52:c8:32:6e:a5:ff:60:38:eb:d1:d9:1a:79:98:52:
e5:56:6b:38:9f:2d:d0:6c:af:96:4d:a4:13:01:8c:
d6:04:a5:4f:78:f4:ff:82:cb:db:83:28:3f:3b:e1:
ff:26:ba:c1:1d:5f:7c:30:ba:3d:ce:c7:f3:d0:93:
2f:1b:5c:ba:98:ba:db:d9:a2:ea:0c:2d:1e:08:cd:
53:e5:9b:f7:de:60:1c:28:3f:b0:8d:5c:5a:ac:92:
f3:17:40:85:34:fe:7f:32:66:f6:b2:cd:38:dd:03:
82:cc:56:57:bb:6d:71:bd:54:f5:50:c6:e9:a3:84:
73:11:a8:47:c0:cc:68:72:83:8e:fa:97:49:e0:8b:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:BB:7E:81:5F:B3:6E:83:FB:0E:BF:D1:0E:BE:E6:55:46:F4:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8d8a35a-b830-3d78-b5a2-5d1672d62b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c6:ac:c7:59:38:5f:25:e5:46:b2:32:71:5c:de:1a:51:2a:
d3:9b:36:78:03:11:27:a4:bb:d8:94:7f:5d:09:1e:0c:03:ca:
4f:6d:bd:ad:76:a2:2a:66:8b:03:e9:76:24:54:02:f8:fd:e9:
39:d2:c3:22:ed:9b:60:8b:d0:b3:4d:9c:21:41:23:d9:94:97:
ff:24:56:76:9e:22:82:53:d4:44:85:2a:76:78:3b:5f:f4:99:
74:ad:56:60:33:61:ba:bd:14:1f:af:2d:b0:f3:05:51:0f:97:
94:b9:e2:e4:c7:c6:d0:52:bc:cc:a0:a7:3c:b5:60:ae:d0:3e:
99:59:0b:15:8c:c3:4c:77:e4:a0:4f:fa:1e:82:07:f0:ca:2a:
dd:78:8f:b6:f7:a6:bd:e6:0e:17:3c:ec:55:d4:08:63:cb:db:
45:c8:fd:7a:76:31:9d:ae:7a:eb:02:32:fe:48:57:45:4e:d3:
3b:ba:7b:8c:d1:88:ed:86:02:20:cc:db:19:b5:65:e6:9b:03:
23:d1:97:10:5e:7e:db:42:b4:d2:06:14:81:a0:d7:66:b9:d5:
62:59:fe:95:59:db:e4:85:7b:78:06:36:53:fa:50:54:0b:09:
a7:27:e9:08:3d:30:8f:72:3c:47:d5:da:d7:d1:b8:79:c6:46:
23:bd:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org