Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9b18d43-2dca-343b-ae93-e8924fa0ea63.roa
File: c9b18d43-2dca-343b-ae93-e8924fa0ea63.roa (raw, json)
Hash identifier: 9+ryZPV4kfzdGUHykIhx+ga1wzdt+D0x5Eg5sKFE/xg=
Subject key identifier: 6C:2A:1E:9E:0D:9C:16:75:3C:FB:22:86:75:CC:E0:DA:03:64:E9:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314137E4DD16FDA68011140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9b18d43-2dca-343b-ae93-e8924fa0ea63.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.118.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:13:7e:4d:d1:6f:da:68:01:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=61b9eb21-0cba-426d-87c9-543857a5e1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:0e:72:9e:4c:4e:a6:f7:b4:98:74:35:40:
c6:4d:13:a4:bf:e6:ae:c1:48:e9:1b:9f:ed:f8:fd:
ea:90:1c:b5:b6:ef:a4:4e:19:f7:1d:08:fb:52:91:
f3:a3:c2:42:c7:7e:84:fd:b2:a4:f4:48:23:9a:b7:
4f:af:3c:f6:8b:9a:5d:d7:e1:39:35:38:bb:f5:c1:
7d:15:6e:75:d5:10:19:e1:56:ac:0a:2f:93:34:a2:
3e:96:7f:1c:80:7b:96:79:c8:4c:41:fe:11:ca:f9:
d7:d9:3e:af:cf:fa:82:a6:88:6b:d5:1b:64:bf:2f:
44:fe:78:00:36:d6:cf:6c:52:ba:45:22:76:02:31:
91:0e:99:ae:dc:c2:c8:3e:e4:8e:47:40:a7:0a:86:
53:81:8e:56:72:cd:54:49:c4:78:6f:9f:b2:01:4e:
b3:85:78:04:cd:d7:bc:dd:bc:d9:f0:d5:87:47:9e:
0c:16:e0:9a:a5:65:fe:60:e4:20:c3:fb:b6:11:28:
21:72:02:33:49:ba:48:b7:a4:1e:4c:28:8a:28:1d:
8a:3c:e2:80:e2:0c:bc:0c:b9:d1:a3:17:86:fa:54:
51:7d:2b:03:99:97:e9:cd:e6:47:6c:75:96:4f:14:
07:2d:b8:9d:58:43:05:2f:fd:51:e8:22:68:f4:57:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:1E:9E:0D:9C:16:75:3C:FB:22:86:75:CC:E0:DA:03:64:E9:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9b18d43-2dca-343b-ae93-e8924fa0ea63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.118.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e8:ad:22:0d:50:8d:17:ed:68:cf:3c:f5:80:0e:89:fa:c0:
5c:33:e6:8d:ef:cb:a4:8d:86:b1:c6:69:19:41:be:cf:58:7c:
42:d3:4e:f4:47:59:f3:90:84:5d:00:2c:b0:06:57:e9:95:a4:
cb:09:f0:df:d7:b5:a8:5d:f3:77:4f:60:f5:fa:b7:14:47:91:
68:c8:92:c4:f9:14:c7:36:17:49:24:ed:78:49:d1:e8:50:29:
21:31:d7:7a:12:3c:79:23:52:08:b1:e0:e9:f2:49:5e:b2:88:
d0:70:0e:42:fa:9d:8d:b8:d3:11:59:f3:69:b9:b4:0b:a7:9b:
8c:21:20:42:46:e4:ab:81:f0:7a:91:e6:78:33:e9:d2:ee:e0:
bc:8d:b1:bf:39:71:01:0a:99:a8:7d:1d:b7:3a:5a:7f:88:e7:
41:92:1d:a2:8d:ef:0c:42:55:a4:b0:7d:3b:48:30:df:b4:ec:
1b:c2:37:00:d3:e4:c6:9e:94:e3:bd:de:f6:90:5b:36:6e:7d:
83:d2:30:6f:89:48:42:2a:b1:d8:76:20:1b:10:0a:6d:22:b7:
2e:72:1c:1f:0e:bd:a7:79:db:cd:08:1f:83:c1:db:39:ab:e6:
ce:72:a9:a0:30:67:75:cd:e4:9d:97:2f:b4:ae:7c:e4:d0:58:
8e:35:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org