Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd44fb1f-dc30-3b18-b921-3aee6b13dd67.roa
File: fd44fb1f-dc30-3b18-b921-3aee6b13dd67.roa (raw, json)
Hash identifier: CdS/oP/dioQdXNkB30XDZlKmMa3eTYEBPz8K4YwMWaM=
Subject key identifier: 5B:5B:92:D4:86:AF:9F:58:BF:77:20:26:00:48:6C:19:B6:3C:DA:E5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE3FEF5D484721BF736A700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd44fb1f-dc30-3b18-b921-3aee6b13dd67.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 67.69.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e3:fe:f5:d4:84:72:1b:f7:36:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=4f542dca-cbb6-4953-9912-624814c82e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:69:5c:6c:bd:9b:05:22:71:fc:a2:cb:e9:
93:b0:d7:43:20:c1:74:9c:ae:2d:ac:68:5b:a8:7a:
f3:d3:57:61:c9:72:cd:55:4e:f9:94:37:4a:0a:d1:
fb:70:ff:e3:34:eb:27:b6:f2:a3:10:2e:f5:47:7a:
83:68:38:46:34:0a:94:de:73:4f:b3:5d:5c:99:5d:
6f:d4:20:fe:e9:b7:71:8f:3f:84:a6:2c:da:6b:20:
fe:77:53:75:ce:91:07:5c:7c:63:db:96:64:4e:81:
0f:3a:70:f0:2e:c8:09:49:9a:63:61:8a:e2:67:13:
45:b6:5a:97:9f:c8:71:1c:88:af:d4:2e:41:98:b9:
7a:a3:e4:e6:a2:cb:80:1f:5a:9b:8a:69:1b:86:83:
ee:75:3e:63:8a:66:6a:45:a0:e2:b9:a0:20:f2:7e:
27:38:74:7c:a6:43:96:01:2b:fd:f5:7c:17:5c:82:
a0:6d:9a:5f:45:28:fa:be:31:0d:f7:1d:cc:fc:4f:
86:d0:34:68:a6:9d:66:db:ab:fa:07:3a:c0:8e:e8:
10:14:32:38:bc:46:f5:86:f2:e1:a5:67:fd:54:14:
5a:17:c4:9b:80:1b:6b:aa:d6:9a:da:11:71:43:1b:
15:81:49:98:03:35:56:13:30:5f:85:fb:79:04:8b:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:92:D4:86:AF:9F:58:BF:77:20:26:00:48:6C:19:B6:3C:DA:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd44fb1f-dc30-3b18-b921-3aee6b13dd67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:eb:5a:47:d4:5d:46:50:0b:d1:b3:54:fb:c4:8c:55:d9:9d:
5e:a2:94:59:d1:c7:8e:bc:63:87:a1:b9:46:54:7f:fc:7e:2e:
a6:cc:4a:ab:dc:ac:63:16:d8:8e:b4:90:d7:e9:94:33:c2:75:
3c:b5:56:ec:0e:8a:8b:61:29:f6:8d:7f:79:7f:a4:1e:a8:7a:
64:43:79:dc:3c:6c:fc:df:52:0d:31:4d:bd:e7:a4:86:a0:5a:
72:79:fc:e0:b3:36:bd:ac:b7:f5:a8:38:e6:8a:6d:33:d8:cb:
2f:15:e9:aa:aa:1d:c8:57:56:2f:cd:b3:14:f4:97:69:c3:87:
c4:6f:cb:bb:bd:04:b0:73:4d:61:6a:b6:a7:09:87:7d:e1:66:
32:60:d1:e4:4d:50:20:5a:fb:66:bb:60:8b:6b:c2:61:d8:a6:
11:35:da:e8:2e:b8:92:9c:d8:01:df:2d:e0:63:d1:0e:70:ab:
68:c0:49:69:4b:e3:67:c1:20:9c:f2:87:c6:2e:2c:7e:a3:e5:
2f:7d:b4:a9:3f:9e:d7:d9:45:6e:17:a9:66:ea:ef:7a:f1:a8:
fb:a4:13:ef:77:39:d6:73:ed:48:7f:1d:76:46:77:18:91:f8:
fd:44:cb:e4:45:80:c8:f4:51:85:f7:3e:1a:17:b2:d6:4e:99:
3f:b7:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:16 2024 by rpki-client on console-fra.rpki-client.org