Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c02bf5c-853a-3c77-911a-73d79b0e80ac.roa
File: 1c02bf5c-853a-3c77-911a-73d79b0e80ac.roa (raw, json)
Hash identifier: SDizHacqElqGUxoRZ5ATkrXnjEQwfvD0ybGc2ye8yXQ=
Subject key identifier: BE:E9:98:39:46:FB:1F:08:6B:36:D2:11:9D:EB:61:B2:07:BF:0E:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D290AA574EDCF433AA325E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c02bf5c-853a-3c77-911a-73d79b0e80ac.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.116.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:0a:a5:74:ed:cf:43:3a:a3:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=cba5af65-98ca-4de1-877f-d65d3d8620c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:6f:93:ab:54:62:fc:b9:b7:2e:1f:c4:1c:
4a:f5:28:c9:4f:1e:32:d0:98:62:09:f2:ad:68:49:
e0:e0:60:52:52:2e:4f:08:aa:b1:fd:8b:da:65:56:
81:96:bd:8d:c5:f8:7e:ed:11:59:1c:cf:1e:be:92:
be:12:c0:e3:9e:92:fc:d3:c2:22:8b:4a:d3:80:8d:
9f:97:a3:41:b7:8f:14:4b:f5:b3:d9:d0:ff:be:a2:
c4:ea:af:ca:93:06:01:df:0e:9e:93:ca:2c:d8:6e:
20:7b:3a:0c:cd:82:37:19:44:90:f6:4f:f4:d5:9b:
2c:18:68:ef:b8:88:39:31:38:a6:b1:a9:6c:c1:09:
57:91:f4:3d:d4:59:25:21:64:84:42:93:b1:32:e2:
11:f9:14:47:7f:0a:f1:da:31:3c:c3:93:7c:a4:f8:
bc:6f:4f:27:e4:da:5d:96:ab:6e:85:1d:c3:db:53:
5a:ec:4e:b0:11:8e:b2:29:49:3c:db:4d:2e:4d:45:
e2:32:0a:3e:19:40:26:92:3e:c5:bc:7e:3c:0e:e7:
55:4f:81:91:d3:31:e2:c2:e2:df:d0:c7:d0:32:ec:
d3:c8:55:6b:32:48:29:c5:b4:9b:a8:20:74:29:6a:
d7:b2:b0:06:a7:85:8f:4b:24:ed:30:a7:0e:47:ec:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:98:39:46:FB:1F:08:6B:36:D2:11:9D:EB:61:B2:07:BF:0E:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c02bf5c-853a-3c77-911a-73d79b0e80ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.116.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:44:46:eb:25:78:26:e9:8a:44:01:92:3a:8c:55:4a:1d:b7:
0e:4b:0b:a8:63:f5:cf:0e:bd:ba:1b:d0:01:f4:24:f9:6a:12:
62:96:f9:33:54:fc:1c:73:a7:4c:45:62:b5:9f:71:49:f1:bc:
c9:5e:8d:0a:c6:cd:13:2c:bc:9d:94:b8:dd:77:63:d2:b9:c3:
9c:4d:05:33:15:09:0c:2f:e8:dd:8b:12:53:be:27:7f:0b:65:
78:cc:f9:15:db:b2:95:1d:1a:ab:25:1c:de:99:1a:70:01:db:
04:24:2d:0a:31:77:e8:14:1b:88:a9:31:b4:5b:22:4e:5e:a8:
55:2f:df:b4:08:f9:7d:b9:b8:65:ea:58:b0:15:17:6a:8e:b6:
ad:e8:67:0c:b4:4b:ec:c9:90:89:78:4e:50:de:26:1c:c5:52:
88:44:be:9b:01:60:1c:c0:73:2c:18:b4:ab:d4:ff:b3:5c:92:
9f:b2:07:df:06:1a:20:18:f4:93:d0:33:8e:c5:64:fc:3a:6b:
13:4e:b9:ca:c6:d1:b9:d0:b4:ee:4c:26:a1:56:0a:b7:72:5a:
d4:94:37:78:5d:ee:aa:78:7e:4c:13:cf:35:61:2e:26:11:87:
f6:3f:98:b6:e0:b8:9f:0d:4f:72:91:68:24:81:04:7a:c4:d6:
d1:05:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:13 2025 by rpki-client