Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/146ab41d-3184-3f24-8c65-f153ac5becb6.roa
File: 146ab41d-3184-3f24-8c65-f153ac5becb6.roa (raw, json)
Hash identifier: s6ho49iKxScfQQaUhh6WIaYq8R8TRckc65pqcWgax9A=
Subject key identifier: 4B:79:C8:A5:4F:4F:EB:FE:01:1B:AC:FC:33:54:CC:C7:00:38:12:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB38E7CD0CCFEA9A20480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/146ab41d-3184-3f24-8c65-f153ac5becb6.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.120.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b3:8e:7c:d0:cc:fe:a9:a2:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=e6afb0db-2194-4a0e-8bc0-4bc0073b40a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:59:8a:f8:b2:d2:c0:4b:a4:de:80:fc:de:
da:27:49:60:1c:ee:52:f3:34:c7:50:53:b1:f2:e7:
d8:e3:90:6f:4e:74:72:aa:7a:fa:05:56:53:37:c1:
da:6c:ed:c2:d3:0d:93:70:26:e6:ba:ab:b1:bd:01:
a3:0f:d2:0d:2e:96:ed:c5:44:8c:cb:8c:14:2e:66:
9a:1e:80:bd:ee:46:95:9c:15:6d:a6:40:56:e7:e9:
61:59:ce:29:36:92:b6:4d:7f:53:0d:f6:03:1c:61:
5c:67:6d:a8:60:9a:88:4c:78:5d:0d:b2:14:ab:26:
37:0e:4e:7e:77:ee:82:7d:e3:22:c3:ce:60:86:96:
a9:ac:2a:84:bf:97:b9:b9:28:67:b6:35:dd:7f:6c:
75:d7:88:2b:bd:1b:0d:cd:68:82:6a:12:aa:e1:66:
cf:fb:b6:71:a5:88:ce:2a:8c:a1:8f:dc:f9:a0:65:
13:db:6a:49:9c:06:fa:8f:04:e8:42:b1:1d:e0:92:
ea:8a:01:6d:78:52:ad:ef:94:e3:21:20:5c:93:47:
c2:92:95:f2:84:3f:70:24:81:91:cf:ce:f7:10:fa:
b3:ad:51:1c:e1:fd:7b:bb:1a:eb:9d:7c:5f:e9:56:
95:86:da:5f:54:e5:b3:19:82:af:fa:a8:27:98:ad:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:C8:A5:4F:4F:EB:FE:01:1B:AC:FC:33:54:CC:C7:00:38:12:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/146ab41d-3184-3f24-8c65-f153ac5becb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c3:81:ca:a8:87:7b:61:48:1a:38:39:81:8f:ac:3b:ff:4a:
ac:73:c5:21:6b:a4:7d:25:d3:a4:4e:6a:5f:a2:77:6d:e7:1a:
2d:87:33:1e:f2:ff:34:bf:59:c0:04:be:03:85:32:91:b7:3b:
55:7e:1e:5c:af:a6:2a:a5:9a:c5:d8:44:37:c9:0f:74:95:c9:
be:55:38:61:be:d9:71:b4:6e:68:7f:8d:a4:e4:0b:ec:10:5a:
b0:f2:0d:1c:a6:42:30:b6:55:12:29:96:c9:6f:96:4b:83:dd:
2e:3d:d1:f9:af:21:ee:e9:79:e1:cd:aa:a0:83:aa:7d:60:36:
90:79:c0:58:28:7d:f8:cd:dc:80:0d:7a:d1:83:44:79:f3:00:
b6:19:54:f3:72:2e:0e:ad:e5:a4:e2:fa:5e:a7:50:d6:9a:36:
93:70:e0:92:61:7c:0c:39:92:18:f2:58:1c:bc:77:82:11:b1:
3e:f4:48:2b:be:c9:94:06:34:8e:a4:5c:e9:13:00:ff:c2:1d:
4e:52:ba:b5:f5:d2:a1:3f:62:1e:9f:d0:8f:9e:74:f0:e8:b4:
74:a9:75:86:ef:8f:35:13:2b:2c:44:99:e9:8d:be:16:15:d8:
34:a2:2a:31:83:3f:14:79:68:d7:0a:cc:41:ee:7f:3e:c1:1b:
5f:dc:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:07 2025 by rpki-client