Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/089d136b-9259-3bd9-93d5-377efdedc3c1.roa
File: 089d136b-9259-3bd9-93d5-377efdedc3c1.roa (raw, json)
Hash identifier: CkH+MJMgCTcE1ge5QiVIlowmF4z82rt0aKCjVh2k4mw=
Subject key identifier: F4:A0:17:11:A1:5A:31:41:3F:D6:94:8D:F5:23:F3:C3:B6:02:82:3F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493142F037BBE6F541648A280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/089d136b-9259-3bd9-93d5-377efdedc3c1.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 398006
IP address blocks: 142.163.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:2f:03:7b:be:6f:54:16:48:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=3e38fd37-0e01-454f-bbf5-691efa6c63f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:58:62:6d:81:1f:17:d5:04:aa:d2:9a:9d:
64:f9:d2:87:a8:d7:50:0a:e2:61:9e:b5:db:34:1e:
c6:7c:a6:7e:45:52:32:d4:48:7a:69:cf:89:61:4d:
f6:ef:4f:f6:ae:a5:f4:d7:d0:cd:cc:23:35:f2:35:
a7:3c:19:74:00:9e:aa:68:79:1c:3d:cd:26:46:a8:
7f:75:6b:5a:14:1f:82:77:1d:01:cd:83:3c:cd:e6:
fb:4a:90:c7:57:d7:2c:0f:4a:5e:cc:7a:ed:40:62:
7c:b0:a6:ef:21:39:f3:80:d8:f3:bc:c6:e1:ab:f2:
be:da:9f:63:7e:da:93:8d:12:aa:e2:6c:61:5f:6c:
4c:27:72:bc:5f:c6:f5:42:0d:1c:53:ca:b2:6d:ea:
48:fd:fd:2b:73:48:b3:ca:f9:22:dc:9b:ea:41:d2:
bb:e9:ec:f3:80:60:29:47:a6:20:28:0c:85:ca:84:
fd:97:c2:b8:89:65:70:d1:5f:76:72:25:dd:88:45:
46:e6:69:80:48:9a:bf:82:80:8b:06:cc:09:6d:da:
79:5e:ae:25:81:1b:b0:8e:23:15:71:84:db:10:a2:
37:cf:a2:7d:ad:9a:d6:f4:5b:c1:fd:e3:77:9d:cc:
f3:e4:2c:09:22:3c:3f:ba:c5:0b:5b:8e:91:b7:bf:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:17:11:A1:5A:31:41:3F:D6:94:8D:F5:23:F3:C3:B6:02:82:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/089d136b-9259-3bd9-93d5-377efdedc3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.163.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:73:6d:53:8d:0a:c6:53:a2:70:f5:d3:3b:62:c9:61:9e:eb:
70:ff:0a:25:d2:fe:88:dd:a7:40:fb:12:c2:71:7a:0f:8b:4b:
5e:46:2e:df:7d:0b:cf:db:eb:b9:ae:8d:eb:50:71:ae:94:c0:
b3:ed:7b:52:b1:b5:7a:b3:2c:5e:89:02:96:03:ed:66:51:c8:
6a:6e:ef:e0:f3:6c:cf:9c:86:3b:43:ab:bd:ea:d7:28:8e:95:
54:b2:98:5d:62:3a:e4:a0:41:a2:4e:c2:8c:a5:1d:91:9e:cf:
ef:11:78:d8:67:6e:c4:d6:ed:e4:46:ab:98:2b:6b:49:d4:b8:
e6:6f:94:46:ea:9d:5d:6b:9b:be:76:3a:f0:ab:8d:56:04:14:
c5:ed:f0:ad:bb:80:75:a1:2c:8b:64:c8:d7:43:c2:ea:b7:a0:
0c:b0:28:45:33:91:e4:b8:e4:a2:f5:cb:6d:79:2e:c3:f5:3f:
83:8d:46:44:e0:1c:48:9d:7f:cb:a8:28:c9:64:99:b7:a0:83:
69:1c:f2:84:91:14:e0:37:30:85:09:cd:02:0e:c4:45:62:37:
e2:bb:22:bd:0d:e6:55:0d:84:75:76:bb:51:19:4a:1b:11:41:
7b:6a:13:c4:31:24:37:6c:55:de:bc:4b:ab:2f:05:c8:93:f9:
13:08:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org