Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffae5d61-c5ea-3288-9367-ae9e67c8306f.roa
File: ffae5d61-c5ea-3288-9367-ae9e67c8306f.roa (raw, json)
Hash identifier: sL/H2HFfIhYR89v3EwKmHVfl+rfK935YHP0jGhXznxA=
Subject key identifier: 05:9D:8B:4D:C5:26:F4:7F:3B:01:B6:B4:5A:A2:AD:56:30:D4:A5:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE59FD9D483F936D7032100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffae5d61-c5ea-3288-9367-ae9e67c8306f.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 209.71.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:9f:d9:d4:83:f9:36:d7:03:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=970127f3-5c21-48aa-95ed-e4f4ea65c588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0a:e1:52:30:6f:12:7a:cd:31:05:93:77:72:
f1:c8:23:2a:d5:72:55:31:c4:e6:db:e7:ec:bf:71:
e2:6d:fd:24:cc:4d:e9:bc:73:69:01:06:a1:7f:26:
52:9c:c9:55:f7:ea:b8:d5:dd:97:03:83:35:82:d8:
3d:78:da:65:11:0f:5e:71:49:63:8d:51:80:de:c0:
28:4f:29:92:32:e1:09:0d:8d:07:1c:f6:c3:93:82:
17:7d:9e:00:89:b2:f7:04:08:b3:3e:7d:a2:4b:be:
13:45:d3:4f:71:43:34:6e:e9:36:f9:75:ce:36:74:
f7:95:37:5a:5f:2c:98:af:34:26:95:03:ed:8f:fa:
0c:32:fb:01:2b:6d:b3:22:16:53:e6:f7:fd:0c:c9:
a8:60:80:d7:99:29:e4:5e:13:c2:aa:d7:9c:cf:78:
a9:6f:26:96:f2:10:9e:b2:1e:80:36:da:9d:70:cd:
e8:cf:ba:fe:ed:8c:76:c9:3c:60:dd:9b:93:e9:31:
d8:55:bc:c7:f8:5c:a6:1e:6c:d8:94:79:f1:7d:70:
e4:06:32:1f:75:d1:17:09:47:71:f8:a7:77:31:32:
04:c5:d2:18:12:fa:de:c4:7f:cd:cd:e0:8f:1d:37:
7c:ea:d7:d8:dc:8e:62:3f:9e:09:d0:da:3b:12:9d:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:8B:4D:C5:26:F4:7F:3B:01:B6:B4:5A:A2:AD:56:30:D4:A5:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffae5d61-c5ea-3288-9367-ae9e67c8306f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c8:25:2f:4a:15:69:94:21:ee:51:bf:e4:8b:98:54:ed:7d:
87:52:7d:fb:45:d1:f1:91:fa:2f:bd:b3:4b:8e:85:64:ee:11:
75:d9:48:de:47:2e:05:7d:e0:4e:15:3d:6d:c5:d3:14:af:8c:
d9:e2:38:4c:24:88:ce:4e:9f:86:ab:56:5a:86:6b:bb:00:d2:
3b:e5:1a:64:18:de:12:fe:09:e8:a5:f8:de:dc:18:b7:11:01:
c7:f3:bf:ae:46:18:bf:51:d2:75:ba:2e:b3:40:d5:21:7a:f0:
8f:75:98:dd:2d:d9:b3:b6:6f:bd:e1:23:29:13:9a:eb:f8:34:
06:be:24:bf:b8:2f:bd:ef:b1:ce:68:37:18:f4:3d:cc:fd:f5:
d0:ab:9f:65:fb:dc:d2:69:fa:b1:4e:4b:f1:ba:df:f8:84:53:
3b:3c:f2:73:7c:c8:97:54:a8:7d:84:1b:6f:d8:0c:08:bb:4e:
3f:08:da:04:e2:f2:57:31:64:18:1e:72:ff:d6:19:36:e7:bf:
51:1c:1a:7c:64:7f:71:e2:33:1b:69:b2:d0:02:bc:a0:f4:9f:
78:34:05:a5:49:4f:bb:1c:20:3e:32:f1:43:aa:98:1c:1d:dc:
28:04:81:85:14:66:4a:85:ee:f8:da:2b:45:95:5b:9a:03:7a:
0b:64:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:16 2024 by rpki-client on console-fra.rpki-client.org