Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ef8788c-9413-3f5f-b678-a9ee085c37d7.roa
File: 1ef8788c-9413-3f5f-b678-a9ee085c37d7.roa (raw, json)
Hash identifier: cTtIQmLNrfBSob7rjSygA9eEJWSi4YHUtrOfaj45gpg=
Subject key identifier: D1:5E:3F:13:C2:30:A7:E9:AE:BC:1A:B4:3B:BB:33:23:7D:03:AA:F9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5814756FEB3AC9E23F660
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ef8788c-9413-3f5f-b678-a9ee085c37d7.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 142.134.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:81:47:56:fe:b3:ac:9e:23:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=dba94c7f-71c8-4ca5-88de-6b77860d05e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:a1:b6:65:7c:e9:b6:ec:c8:64:15:98:e6:
29:94:51:91:da:aa:8a:cd:c1:7d:0d:55:e0:36:ff:
0c:c3:2e:08:ca:4f:4d:1a:93:23:76:68:37:7e:95:
02:58:a1:39:22:5e:ca:38:b3:14:15:64:7c:13:8a:
45:1c:b3:43:90:4b:79:85:45:cf:b6:bd:35:2c:87:
0b:ff:4f:5b:a4:5c:e0:52:9b:c5:fe:bb:53:ba:18:
1b:2d:ff:e1:b4:72:81:ed:1b:c2:00:76:e4:6a:87:
88:bb:78:7a:78:6c:46:4e:c2:db:dd:48:39:20:e7:
4e:2b:48:71:5a:1f:b0:99:a6:3d:d5:c9:2c:c3:83:
5c:02:81:c4:51:bf:f9:52:ef:4e:40:3a:16:ec:d7:
8f:e3:b2:37:c1:f1:1f:10:04:30:29:b6:3c:19:59:
b8:35:69:b7:5f:5e:20:6b:00:e7:2d:2a:61:ed:2c:
6a:46:af:b2:41:dc:ed:57:03:8a:fc:bb:81:6e:d2:
a0:8a:8d:e6:e9:3e:76:c4:03:a3:ef:2e:3a:55:7d:
4d:64:08:70:54:c2:fb:23:87:e0:f5:4f:a3:14:d4:
e1:d4:ac:54:b8:4b:21:c1:fe:2a:a1:64:6e:49:0a:
c1:dc:bf:f5:9f:f1:14:c1:bb:db:e6:04:a3:b8:d7:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:3F:13:C2:30:A7:E9:AE:BC:1A:B4:3B:BB:33:23:7D:03:AA:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ef8788c-9413-3f5f-b678-a9ee085c37d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:97:0b:02:cc:6e:db:ba:89:ce:04:8b:bf:6c:8b:c9:ac:69:
a8:27:99:f6:14:28:ee:6d:0a:b0:8e:a8:d7:64:c0:30:b3:67:
73:75:1b:37:a6:15:77:d0:d9:7c:ac:0b:af:35:87:46:5b:d0:
33:5b:86:70:ea:d4:b6:fb:fd:97:4c:f8:1e:99:10:28:ae:81:
04:fa:69:99:cb:0d:15:cf:3c:58:27:5a:04:e6:98:5c:11:9a:
73:03:32:94:80:1f:b4:b9:9a:ed:8a:ad:b3:55:25:de:a7:2d:
bf:d4:43:f3:dd:b5:36:0b:2c:db:a4:70:a4:39:62:46:35:5b:
3a:87:41:e0:f6:e6:85:37:f3:07:6f:5a:3e:70:3d:72:21:30:
da:20:3e:62:50:c8:1d:bf:f9:f8:b1:a9:ba:4a:23:cb:a5:04:
b0:30:c6:ae:84:82:04:ad:ae:84:04:c3:61:d8:19:20:ca:5c:
3d:fe:c6:95:24:4e:dc:02:05:ee:40:11:bf:a1:3f:b1:5a:fe:
23:81:ab:d8:c5:ee:ab:09:e9:69:d2:53:33:f8:b3:e8:bf:b2:
55:54:2e:79:89:f6:e9:2c:f8:7b:63:7f:db:3e:e7:cb:1d:09:
78:a5:d8:ac:ec:14:5e:fe:8e:66:9e:43:49:55:c0:ab:c4:31:
e5:d6:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:06 2025 by rpki-client