Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370df31e-56e3-312b-aa85-c43ac6f8a024.roa
File: 370df31e-56e3-312b-aa85-c43ac6f8a024.roa (raw, json)
Hash identifier: S+K4yjBW4LQaEfpZYymZLdj62Pv+4zL8IgeuuTQfoVk=
Subject key identifier: 97:E1:E0:92:7C:9D:3B:24:EC:ED:27:6C:7D:0B:90:B8:36:03:9A:9C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB5AE3B3613A9F5B00B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370df31e-56e3-312b-aa85-c43ac6f8a024.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 63131
IP address blocks: 142.120.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b5:ae:3b:36:13:a9:f5:b0:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=741e2814-cfc0-490c-9d71-73dba825a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:21:1a:3d:6d:f6:85:cb:cc:18:0e:e8:a3:
3a:07:2d:38:66:48:c6:2b:33:eb:49:4d:c9:c6:89:
0f:8b:c1:9e:69:41:98:8e:7d:24:0e:30:70:4a:24:
b8:44:2f:17:d2:aa:07:d4:1e:17:55:33:71:af:94:
87:d2:45:04:21:18:a3:a4:11:1c:62:1c:aa:f5:1e:
cc:fe:d8:a3:e1:49:84:f9:26:f0:bb:3e:65:c5:1b:
0f:56:7d:c2:61:0c:52:26:56:3d:ad:3e:e5:9f:d5:
2a:e2:83:54:e5:a5:c3:aa:66:31:91:7d:74:d0:84:
99:33:5b:06:6f:2e:7c:12:d3:6f:dc:2c:88:f6:c2:
9c:f7:3b:fd:22:31:7d:ab:58:f5:6d:d2:29:cc:1e:
e4:96:77:1f:c0:da:6e:f5:27:7c:65:fe:8e:ba:d0:
bb:95:d4:dd:26:6f:8a:93:70:df:13:a1:f3:3f:b9:
d3:9f:0d:74:a0:34:54:aa:f7:6a:93:92:20:cc:e0:
76:1e:60:3d:8f:62:ac:57:d0:da:9b:21:16:02:d8:
be:fe:d5:43:92:c7:10:c5:5b:d4:af:b8:24:d7:7c:
d0:5c:26:71:d9:91:0e:5a:e1:fa:bc:8b:0b:50:22:
ce:cf:b0:ea:2c:21:75:43:60:5e:31:56:b0:91:6f:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:E0:92:7C:9D:3B:24:EC:ED:27:6C:7D:0B:90:B8:36:03:9A:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370df31e-56e3-312b-aa85-c43ac6f8a024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.120.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:be:12:19:94:45:af:99:5f:a5:26:5b:5e:41:d3:70:19:3b:
f3:57:34:33:90:8a:43:03:1f:37:18:44:56:8a:9e:e2:01:3f:
c5:36:d3:51:2c:4d:d5:49:2f:52:b4:dd:3e:38:d9:d4:8b:89:
bb:47:fa:e8:50:08:39:bf:87:a2:f9:28:7b:30:e8:52:5c:68:
db:5b:0d:35:8d:2e:b9:5e:88:5a:fe:fb:80:85:d9:93:9e:e6:
1d:50:fe:64:76:bd:4d:e2:fc:5d:10:ab:6d:64:8b:eb:ae:60:
a6:ab:79:8b:5c:3a:72:24:e9:68:1a:3f:c9:80:32:27:24:fd:
ab:fe:41:08:8c:f1:6a:a1:e7:20:61:73:d7:94:1c:a8:b2:f0:
3d:c8:e2:78:00:29:e4:d0:90:57:f3:6d:37:8b:c1:ba:0e:70:
00:b7:58:2f:50:8d:61:b3:43:7e:96:05:f0:53:dd:85:45:d9:
56:fc:11:00:d1:01:ad:12:f4:8d:0e:ac:61:37:31:32:c5:de:
86:3a:b2:9b:95:ca:4e:75:47:d7:8d:d3:6a:9c:77:5d:d8:61:
de:70:5c:26:7c:05:b4:b6:37:ba:f1:94:e9:93:7e:5d:e9:94:
51:79:55:a9:50:30:db:ed:c8:22:bc:63:f6:a3:e5:d4:9c:c9:
4b:c8:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org