Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12d3b898-f6b9-3285-b753-6c2ef2d48d07.roa
File: 12d3b898-f6b9-3285-b753-6c2ef2d48d07.roa (raw, json)
Hash identifier: 2Q+zuolmw9dsTrrzvHWq2gzWWy3zYfKy/3m4kJK17SY=
Subject key identifier: 6D:62:4A:C7:58:B9:81:1F:FF:9D:AA:E7:7E:B0:DD:80:A0:B1:5B:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF755560E1D845BC2CBE5D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12d3b898-f6b9-3285-b753-6c2ef2d48d07.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 142.187.0.0/16 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:55:60:e1:d8:45:bc:2c:be:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=378eab03-a730-4290-b813-f7a02cc42283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:33:9f:a1:9a:0a:53:c3:3b:e5:8e:47:fd:
4d:0d:b6:2e:07:72:e2:81:5b:61:8a:63:ae:77:c0:
80:59:b1:8c:fd:90:1d:e4:37:18:bb:c3:23:a8:c0:
7b:6b:76:b3:8c:98:e0:ce:ca:cf:4c:3f:29:f1:27:
93:e0:a5:1c:bc:68:f4:e0:e2:bd:47:31:51:f7:5f:
3a:97:47:36:d1:79:b9:50:57:e6:88:44:0d:84:5e:
bb:d0:92:13:5e:67:a9:c1:11:87:d4:12:d4:98:67:
c5:6e:df:1e:e7:92:f6:6d:1c:c1:66:54:1a:6b:b8:
b5:bc:8a:71:d0:84:df:24:70:f3:5f:c3:8c:8a:4c:
98:81:56:65:43:26:f2:1b:1b:72:69:db:69:83:71:
c2:7c:e0:d9:c3:85:3e:7b:f6:8d:2d:ea:de:06:d8:
e9:ac:6e:b9:5e:a6:9f:d1:bc:80:3d:68:73:b7:ae:
8e:aa:33:ab:0f:ad:b1:89:b0:27:59:da:30:4f:81:
79:4c:81:9a:bb:ef:2f:4d:57:3c:fa:a6:6f:92:a4:
a5:34:03:6d:5e:34:ee:89:78:e8:11:e8:c7:7c:9f:
cb:be:4a:d7:b1:91:dc:56:19:81:ec:fc:28:65:ed:
31:ee:c2:78:a7:7a:40:07:d6:e8:1b:51:08:f6:a0:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:4A:C7:58:B9:81:1F:FF:9D:AA:E7:7E:B0:DD:80:A0:B1:5B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12d3b898-f6b9-3285-b753-6c2ef2d48d07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:29:03:43:1a:a7:a9:7f:5d:73:49:1b:67:b9:0d:98:3f:89:
44:33:b0:6c:a1:53:51:1d:3b:f5:b7:56:f8:6e:7b:ca:85:00:
54:bf:64:8f:0e:8d:59:4b:5d:65:8c:bc:a4:c9:15:f8:60:1e:
8a:48:f5:06:b9:7b:e7:99:fa:7b:f0:01:53:9f:d1:e5:d7:aa:
7b:21:0e:b9:f4:0f:69:54:b0:83:49:2a:9b:cb:a9:7c:4e:e9:
b6:a9:f8:93:55:ce:cb:24:26:08:c1:62:ff:11:c7:c5:08:8a:
1c:d1:28:3e:a1:ae:73:c0:ba:c9:aa:3e:e9:8f:b7:9c:80:4b:
c3:b6:a9:7d:83:77:d8:af:73:2a:f9:73:53:d5:64:f9:03:8b:
db:74:ed:62:4d:de:4b:49:06:9d:a0:e0:00:86:11:2b:ff:b0:
04:ee:17:f6:4c:c3:6a:7e:95:b2:c6:d1:26:36:10:e3:d6:c2:
42:e2:c5:a5:93:66:dd:2a:0a:ae:b3:a4:d2:d1:ca:94:1f:0f:
b2:f1:4a:f9:c7:50:71:b1:53:f6:93:79:4f:3b:59:05:b7:8d:
c8:6e:a1:c4:53:8c:1e:a2:ec:c1:35:a4:87:97:b5:d7:21:6e:
d1:c7:a9:95:24:e3:61:88:cb:cf:d9:50:2c:79:c5:fd:02:81:
7f:fb:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org