Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fbfcdec-aa65-3a67-8866-771522169442.roa
File: 0fbfcdec-aa65-3a67-8866-771522169442.roa (raw, json)
Hash identifier: J1xTstEKX1gsMQfcV+33YIs/FQ74K8q10cPPodQfbZM=
Subject key identifier: 38:0E:0A:FF:58:5F:D4:FA:4C:FE:78:AB:06:2B:45:82:A0:26:03:2C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE49D89A19888346BC0E600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fbfcdec-aa65-3a67-8866-771522169442.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 142.134.192.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:9d:89:a1:98:88:34:6b:c0:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=cbae14c9-b9eb-4f43-8131-cfe4efdd63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:95:16:a4:f8:a6:7e:66:e8:f0:ec:7f:04:
0b:2e:1b:d4:5d:cb:41:91:7a:d8:66:aa:99:c4:4c:
30:b5:10:35:0d:42:aa:8f:7a:e9:69:e2:4d:fc:a5:
0c:97:d2:3f:cb:68:50:c1:fc:88:cf:0f:02:ba:19:
bf:3d:d7:86:97:f5:9a:32:81:3b:89:c7:95:c1:1d:
8e:74:1d:9b:b8:e1:fb:3f:62:70:27:4e:02:72:7b:
1a:14:4d:c1:ba:66:f8:43:ae:78:45:1e:59:1e:10:
00:00:ad:67:ef:df:57:96:1a:4f:be:0f:6a:17:9b:
46:64:17:86:0d:75:ef:e8:c6:eb:83:ae:d0:06:fc:
9b:8d:0e:92:c8:3d:62:ef:1a:f0:33:0e:6d:98:5f:
1e:37:ab:51:71:cb:71:7a:24:de:bb:8b:f9:80:c7:
ca:97:a3:e6:fe:b7:4a:07:a9:d8:39:d2:b7:20:70:
55:82:41:29:15:3a:ea:38:e4:7e:57:b1:69:fe:12:
12:32:2d:39:d1:c7:03:6d:5e:aa:ba:a8:da:a2:59:
4b:4a:8f:d5:de:d1:88:05:e2:2a:48:96:74:e0:9f:
7c:34:41:9b:c9:68:3e:f0:a2:f3:7b:e2:06:ea:fa:
a2:d6:48:11:ec:d2:35:0d:ba:2d:12:80:16:ac:00:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:0A:FF:58:5F:D4:FA:4C:FE:78:AB:06:2B:45:82:A0:26:03:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fbfcdec-aa65-3a67-8866-771522169442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a6:cd:22:6d:22:88:78:47:52:e7:bd:64:80:a6:16:f3:ff:
8f:f5:fc:18:d9:66:9e:11:50:aa:43:6f:53:03:30:08:23:39:
28:c3:4b:38:64:1b:27:38:dd:23:cb:6d:44:f5:7d:5b:e4:60:
0e:d6:af:d5:ef:be:3d:3f:e7:54:48:62:f6:4a:d2:8e:31:bc:
f3:56:7a:bf:9f:95:90:fa:69:ed:20:a3:a9:e6:81:6f:f7:a4:
59:ff:46:49:d0:c8:7b:e3:7a:50:19:fa:a4:5c:f1:9c:bb:3e:
49:4b:80:9e:86:df:26:f9:8c:cd:be:6a:07:00:b9:df:df:e0:
ab:d1:31:2c:5c:ba:f4:a7:a8:c3:8b:6f:be:06:34:f5:b1:30:
07:d8:62:03:e7:14:b3:9f:d5:22:76:58:c5:f6:95:87:ab:62:
0e:93:1f:47:4b:b5:c1:a1:31:bf:a7:7d:55:e2:34:cb:1b:6c:
f4:72:6a:3d:87:ea:29:4f:1a:0d:af:c8:e9:98:64:a3:09:71:
04:da:9d:39:8d:0a:c0:36:a8:aa:c6:fc:db:0f:ec:fc:a7:19:
a0:42:1a:41:32:2f:84:b8:dc:d2:12:a3:03:5e:d1:fa:a9:af:
d8:9c:cd:25:6d:bd:cf:ff:fb:55:3b:c2:73:62:53:fb:97:f5:
df:d9:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:25 2025 by rpki-client