Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09c98d55-6ad1-35db-85ba-519425c10179.roa
File: 09c98d55-6ad1-35db-85ba-519425c10179.roa (raw, json)
Hash identifier: mvdbT0F6na+6JmaLw+TlVQdJU+v0ubCoIRxC5PBN7xU=
Subject key identifier: 7C:83:28:08:E9:20:CE:31:FD:0B:32:8B:BB:27:8F:B0:CB:D7:81:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF753BE653BB29039488C400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09c98d55-6ad1-35db-85ba-519425c10179.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 855
IP address blocks: 142.134.192.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:3b:e6:53:bb:29:03:94:88:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=f994ab37-bbba-4d9a-9c0a-2734ecf69294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:52:ca:d0:23:e6:6e:4f:83:db:bc:82:98:
ea:08:54:fa:42:a0:45:d3:62:09:72:00:52:26:72:
59:35:1e:c9:5a:15:43:fb:65:cb:bf:0e:49:70:db:
5a:90:e0:1d:31:e8:18:a2:94:c5:17:7a:e6:5b:ba:
69:58:2f:d1:ac:bd:72:61:42:cb:07:27:01:dd:77:
a3:41:c4:df:35:28:2f:4b:9e:2f:ae:1a:66:2f:e7:
fb:e5:2b:f4:83:84:2f:de:69:d4:81:13:61:72:62:
95:02:90:65:e7:2b:d3:04:c1:11:04:db:85:b4:6c:
9e:ec:26:14:d3:f5:2f:da:f0:c3:cc:e7:43:ea:cc:
ba:6f:b8:81:9d:72:e5:aa:7d:b0:0b:22:4c:13:0e:
67:e2:97:fc:c3:d8:e1:f9:bb:3f:0a:c4:73:ad:b5:
a2:1c:00:d3:f7:bb:8a:7d:1d:0c:5e:e5:98:7d:d3:
f6:4a:d2:cf:2c:d9:da:3c:b3:41:a3:45:6b:cb:6a:
b9:69:33:8a:ba:f5:3d:d0:86:21:6b:b8:31:3e:59:
a7:f1:ab:84:54:fe:a4:93:a4:f3:5f:29:78:4c:71:
26:60:5d:ee:02:a0:aa:6b:5b:0e:e3:8a:12:07:2f:
cf:8d:37:4c:fd:f8:fc:16:a7:6f:3d:80:71:58:34:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:28:08:E9:20:CE:31:FD:0B:32:8B:BB:27:8F:B0:CB:D7:81:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09c98d55-6ad1-35db-85ba-519425c10179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:41:71:72:15:7c:2f:ab:06:28:ec:09:0f:05:54:7c:0b:51:
51:b8:fb:f5:5e:37:82:93:31:54:31:a8:b4:7f:79:0b:24:95:
f9:f6:ff:4e:97:a7:86:3c:bc:48:24:84:97:52:8c:87:95:de:
02:bb:51:ac:5a:80:61:db:03:6f:71:a0:d8:ba:b9:79:27:81:
94:6d:4c:09:41:f8:16:47:54:6c:ca:92:3d:c2:ca:15:62:41:
df:bf:20:97:e7:1a:29:f4:91:df:39:6c:d4:65:c5:20:16:55:
85:02:5e:5e:50:8f:ba:57:5e:e1:66:dd:38:37:a6:9d:00:db:
6c:3b:ac:5a:3e:b2:83:2e:19:ca:51:4d:65:47:9f:6c:33:d6:
45:42:6a:24:23:08:6a:81:34:2a:b6:78:d9:81:11:9e:bc:47:
ed:91:1e:39:5c:76:ea:9f:65:e6:e7:0e:60:60:95:db:b3:e0:
9e:9d:a7:9a:69:3a:9b:ec:13:90:94:5d:5e:15:57:35:2f:3e:
f4:3b:00:c2:91:a8:da:9b:b9:10:d1:1b:7d:1a:98:46:7b:94:
e0:95:d1:97:98:85:d9:f3:26:d7:b8:67:de:b6:43:03:7b:7c:
b3:7f:88:85:49:fc:48:fd:f9:1c:e9:8d:0a:96:cd:a3:5d:97:
7d:8b:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org