Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa
File: a1699145-799a-32c1-a573-c7188a58dc91.roa (raw, json)
Hash identifier: /hPpP/vhSwoZmaR/TM/4W8fNaLw3QbIGW2rzv2zyuT0=
Subject key identifier: 0E:B7:F3:FB:24:F5:7D:97:5D:E0:88:37:A1:88:48:37:41:2A:15:15
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314126EB227F13475E53910
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.117.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:12:6e:b2:27:f1:34:75:e5:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0178c96e-43f3-4fc5-b8ea-c41e23b50f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9e:27:bd:a6:c3:a2:1d:07:4c:aa:fd:fa:92:
56:06:d6:42:6b:74:53:c8:3e:12:80:7a:a2:2e:8a:
c1:26:4d:f7:7e:d1:eb:c1:5f:62:eb:74:14:ad:a0:
f3:8c:3f:09:d5:13:b9:4f:45:13:49:c6:74:38:44:
24:56:79:5b:b5:40:d9:f7:06:ef:b4:f0:9f:db:dd:
45:fe:25:b3:45:43:ff:a9:48:06:b0:66:a9:fe:19:
42:a6:50:e6:18:59:4c:6f:ac:ad:31:66:62:f2:f8:
38:33:2c:7c:a0:99:bf:4c:bd:bd:9c:52:58:31:cd:
30:d7:88:39:39:63:84:32:c5:dd:06:e0:a1:66:97:
16:e1:54:fb:82:05:3d:61:b2:38:c8:cc:62:50:dd:
3d:ce:f8:ef:35:e4:8c:d1:46:b6:36:74:05:cb:67:
5a:c8:02:a9:9d:bd:14:6a:0f:ad:19:80:0e:52:29:
4e:4f:9d:ca:5c:7a:87:d4:bc:32:74:59:f4:8d:f0:
30:f3:92:97:bc:2d:26:ef:62:07:af:18:ab:99:48:
9f:0d:d3:5f:31:24:b6:bf:59:e7:97:90:dd:79:95:
17:79:9b:56:92:8d:14:87:f7:4e:bc:04:82:29:94:
f9:9a:c5:57:9e:07:c3:51:7c:0a:ef:53:2f:65:cf:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:F3:FB:24:F5:7D:97:5D:E0:88:37:A1:88:48:37:41:2A:15:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1699145-799a-32c1-a573-c7188a58dc91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:99:13:67:d1:e2:e8:85:f4:e0:1b:55:33:de:92:b9:89:ac:
f1:c1:06:a9:c5:a2:c4:4d:d3:fd:08:01:bf:cd:db:09:37:d2:
48:c8:8b:36:27:b1:14:b5:3e:d9:54:a3:99:a7:94:c0:bf:e7:
64:57:f9:f1:a8:58:d8:ce:60:49:1f:91:a8:1c:f1:fc:2b:a9:
2e:0b:c5:b8:54:dd:fb:57:32:61:ed:6c:4c:d9:5b:17:4c:22:
f6:fb:95:0b:dc:f6:18:fd:d7:ac:5a:c0:cf:58:ef:1b:d0:f5:
61:16:6a:fb:ea:0a:3d:da:65:f5:0c:d7:eb:55:5b:37:5f:be:
18:b2:37:b7:53:6d:75:8c:68:dd:c2:be:4d:e9:3f:d0:d0:3b:
dd:77:e4:34:d3:e2:8f:5e:46:ce:c2:fc:4a:24:0f:3a:82:cc:
53:c7:5c:1c:a3:be:02:8d:0d:89:89:65:75:2a:2f:a2:3e:0c:
8d:f4:ec:b7:76:58:c4:9b:31:75:8b:66:8f:d4:eb:11:d1:f2:
c6:21:a5:de:c6:f1:25:96:52:e7:60:c4:88:5e:43:f3:4f:b7:
85:4c:6c:97:9a:84:bc:95:e6:f8:66:9f:8a:d0:b6:20:ab:ea:
c7:06:be:7c:f1:a1:a7:4a:f6:9e:30:6f:9a:4b:d7:87:80:f7:
6c:c4:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org