Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a3843a0-dd03-3291-991b-8c96ce36e806.roa
File: 0a3843a0-dd03-3291-991b-8c96ce36e806.roa (raw, json)
Hash identifier: Y0LMZJoYjRN8ZRJzVk5ju3KqlkoooQ8XSgj7bro+RNQ=
Subject key identifier: 7B:A4:09:A4:F1:51:68:4B:1F:FE:38:EC:93:85:90:39:A0:61:C6:AF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0F1AF402F75B46B2C8CAC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a3843a0-dd03-3291-991b-8c96ce36e806.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 855
IP address blocks: 142.177.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0f:1a:f4:02:f7:5b:46:b2:c8:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=0bf9708f-8750-44c1-be88-548320f471fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:05:fc:e5:21:f8:5f:03:52:26:e2:2a:1e:
1a:80:d4:5b:ad:9f:2b:f0:4d:f4:64:6e:94:29:bf:
c7:3e:21:c2:ff:80:14:da:c8:d4:51:52:cc:60:f2:
d4:7a:be:b1:c8:a0:8c:01:10:c2:3e:9c:21:9f:36:
3d:cd:e0:41:60:5e:ca:37:6a:e9:6d:81:09:ea:d9:
9a:18:6c:ac:a4:61:2f:3d:a0:2d:9f:b7:b9:d7:10:
95:4b:c3:4c:37:46:a2:a1:c7:1c:3f:f8:2c:b3:26:
60:28:73:3e:fe:4d:af:57:84:88:ee:88:d1:ab:f0:
76:51:31:cd:37:33:41:27:4d:f3:42:10:b6:bc:e0:
c3:55:d3:24:c9:8f:6c:8a:5f:5a:e5:c3:c9:d9:e5:
ef:2c:ae:89:0a:38:cb:5f:3a:a9:c3:da:82:27:c2:
f1:21:9a:39:5e:0a:cb:e6:69:7c:9f:cc:04:c0:a4:
e0:ea:a1:d6:97:b9:14:a4:26:c5:6b:63:62:07:b7:
7c:04:16:00:63:95:50:00:58:97:74:c5:68:f7:80:
54:a6:24:e2:cf:64:1d:ad:20:9d:36:56:2c:a2:40:
df:7b:65:66:2d:b6:79:ad:46:25:f2:80:40:38:1e:
81:59:0c:01:00:70:9d:2c:96:62:7f:6b:d7:95:09:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:09:A4:F1:51:68:4B:1F:FE:38:EC:93:85:90:39:A0:61:C6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a3843a0-dd03-3291-991b-8c96ce36e806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e0:0c:7e:13:6d:c8:76:42:03:35:e7:93:f1:24:f7:f9:0b:
0a:f2:42:d5:0a:09:d1:a3:b2:b1:3b:11:c9:a6:ea:81:2c:0b:
ca:97:26:75:6d:ab:86:0b:62:16:ab:24:9e:9f:9e:be:b6:d1:
23:92:1c:de:37:f6:23:23:63:02:6c:40:76:65:71:bf:87:3c:
70:06:11:07:39:69:1a:7b:a3:1c:58:0a:0c:0b:65:ce:cc:42:
12:27:d8:f8:ba:55:32:47:4d:5c:5f:89:80:1b:a5:df:05:ed:
ab:5b:a3:ba:02:52:71:88:63:41:09:68:00:3e:2c:2e:22:0c:
21:05:e4:fc:af:3b:1d:34:f4:52:eb:dd:d5:a0:d4:7f:2c:e6:
a2:7d:a9:6d:79:1f:89:0b:35:ba:ad:8c:6d:15:2a:43:2d:92:
cc:d0:f3:ed:db:ab:e0:8c:79:4d:d2:d4:23:7f:e5:14:21:d2:
43:44:9c:cb:7d:b7:99:23:1c:ad:2c:d2:30:72:0f:e8:e1:14:
dd:df:db:7f:94:08:ee:90:76:cf:12:a1:e2:3d:17:90:ec:8e:
62:2c:db:cd:d6:01:0d:08:14:c1:0d:13:66:19:70:e2:f1:c6:
2b:8a:1a:3b:cc:9c:6d:ef:cc:8e:7c:33:ff:51:bc:51:d6:39:
24:d2:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:05 2025 by rpki-client